Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732BB40CA0C811EFBD74B365762E951A.roa
File: 732BB40CA0C811EFBD74B365762E951A.roa (raw, json)
Hash identifier: mufNS6qggZT/8jjDz3Sfzg3EMx4G/MlS2NO8M9+E0Mk=
Subject key identifier: BB:01:9A:6D:B0:FF:67:34:94:12:2A:69:DB:5F:31:07:1B:72:9E:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732BB40CA0C811EFBD74B365762E951A.roa
Signing time: Tue 12 Nov 2024 07:33:46 +0000
ROA not before: Tue 12 Nov 2024 07:33:42 +0000
ROA not after: Mon 02 Dec 2024 07:33:42 +0000
asID: 21859
IP address blocks: 154.83.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68588 (0x10bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 07:33:42 2024 GMT
Not After : Dec 2 07:33:42 2024 GMT
Subject: CN=673304da-2853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:d9:ce:1b:cd:bc:47:1e:13:37:b2:88:7b:
ae:5e:58:0f:ef:49:f6:10:33:13:c1:f0:a5:ff:a8:
44:24:31:ed:68:e6:c9:f4:dc:81:f5:29:70:e8:ed:
6d:f8:53:26:11:bd:13:30:41:ba:6e:e4:23:55:e7:
46:9f:b1:31:f7:d5:a3:29:34:dd:63:59:d8:f6:b3:
98:59:a0:39:89:ad:57:e0:f6:ab:05:27:01:df:0a:
a8:20:bc:53:0c:d3:70:f2:30:da:94:76:7f:5f:1c:
f7:88:27:c4:95:30:af:21:f7:01:f0:f2:4a:9f:b4:
5c:e7:32:64:7a:b9:34:e7:58:f8:5a:74:a3:9e:65:
f8:d8:4b:df:3a:4d:1e:43:ff:e8:ad:12:e5:48:ca:
cd:d5:85:04:c1:fe:3e:1c:21:17:ae:9a:7d:4d:35:
11:5c:c8:3c:66:8b:a3:e6:5e:e7:2c:ae:84:be:15:
c0:2d:d8:d3:ab:7b:69:91:16:07:f1:5a:27:2b:63:
d8:d8:fb:7a:01:89:d5:2c:98:86:0c:d1:25:1a:d3:
7d:5f:30:80:b4:80:c7:d0:ae:03:34:e6:b9:e1:15:
0b:08:4a:c8:12:12:71:92:ec:c1:2d:31:c5:17:ac:
54:f7:38:ec:9b:d7:ee:34:db:11:54:a1:71:52:7d:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:9A:6D:B0:FF:67:34:94:12:2A:69:DB:5F:31:07:1B:72:9E:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732BB40CA0C811EFBD74B365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
89:24:7c:05:36:7f:8e:28:fa:d6:cd:ee:46:6f:54:4a:ed:94:
6b:52:87:e3:b1:81:1a:08:13:b9:07:f7:dd:50:13:34:aa:91:
65:00:5c:81:76:14:5e:84:df:72:d1:50:41:f5:0b:2a:13:bf:
aa:71:ad:b1:4e:72:44:26:28:4b:b4:01:b4:ee:2c:d5:f8:8e:
19:79:aa:6a:15:be:bd:b9:7a:73:ab:d5:85:64:4e:eb:84:a1:
be:5c:71:c9:fc:04:6d:84:56:fe:b3:29:75:3e:77:8a:6c:3d:
af:60:ff:86:b0:99:0e:e2:ad:92:bd:f8:de:d0:48:01:d2:ce:
35:79:9c:d9:fe:ff:fb:69:65:bc:67:66:c7:8f:70:fd:52:1a:
10:62:82:24:f4:3f:01:7d:de:28:19:2c:6a:fa:6b:99:0d:cf:
d1:70:d9:48:10:2f:4c:79:ad:bd:56:1d:03:92:9c:3a:38:ca:
e3:97:45:b4:6d:d8:78:b9:93:db:43:cb:b5:1e:7b:16:bc:6f:
cb:54:f5:95:42:21:0f:b7:b9:cb:b6:43:41:1c:b3:2e:04:04:
83:80:f9:6d:a6:9e:ab:c2:af:b7:5b:2b:11:39:13:04:35:13:
9b:b6:c9:34:cd:ea:b9:fa:eb:4b:3d:19:7b:00:4e:37:06:ff:
c0:d0:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:44 2024 by rpki-client on console-ams.rpki-client.org