Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773A77B2A19B11EF98A9B7BE762E951A.roa
File: 773A77B2A19B11EF98A9B7BE762E951A.roa (raw, json)
Hash identifier: DsTYNox824uS28wFaSJ7JFxz9vRGTmW+DQKvpWeOCIY=
Subject key identifier: 93:90:3B:66:0A:53:6D:FE:3D:29:A3:37:E1:BD:A5:BC:E8:76:AF:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773A77B2A19B11EF98A9B7BE762E951A.roa
Signing time: Wed 13 Nov 2024 08:44:16 +0000
ROA not before: Wed 13 Nov 2024 08:44:13 +0000
ROA not after: Sat 23 Nov 2024 08:44:13 +0000
asID: 142062
IP address blocks: 154.212.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68799 (0x10cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:44:13 2024 GMT
Not After : Nov 23 08:44:13 2024 GMT
Subject: CN=673466e0-543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:f4:4f:46:df:de:81:30:0a:62:8c:7b:33:
f2:a1:1c:96:9d:7e:5b:b5:a2:dc:25:6f:da:9a:1a:
ac:ee:5d:1c:cd:b2:54:5f:54:53:d5:e5:21:6e:4f:
ea:8e:43:45:29:e4:37:24:59:7f:32:e9:50:02:1d:
1c:05:2d:17:f1:08:b6:c6:8b:f7:c3:11:69:ac:9c:
75:a4:20:e2:3f:b6:a1:16:f1:1a:03:3f:5c:48:e4:
9d:ee:38:56:28:9c:1f:f2:96:3e:4a:50:48:41:61:
d1:7d:a7:c3:b2:82:a9:f7:69:d4:6d:25:5f:0c:89:
70:39:2a:01:34:9e:5b:7d:23:23:99:20:54:7d:cd:
de:5e:3e:10:35:ea:50:97:9f:21:a4:c5:2c:23:5d:
a4:61:b6:f9:48:5c:0c:a1:ab:63:f6:58:91:cd:9c:
57:fe:3f:4f:cf:a4:aa:3e:f1:32:1a:79:ea:16:48:
47:82:0b:8d:c2:8d:bf:e0:85:d6:c6:c3:7e:02:14:
e2:47:94:8f:48:74:ef:13:10:b7:e8:3d:8c:d2:65:
3d:53:98:af:57:ef:b6:49:40:d1:e2:d5:82:bf:9f:
53:70:18:f3:57:c7:04:aa:5a:db:cc:fb:a5:96:63:
34:59:9d:3c:3c:49:50:e3:90:51:64:e7:4a:26:11:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:3B:66:0A:53:6D:FE:3D:29:A3:37:E1:BD:A5:BC:E8:76:AF:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773A77B2A19B11EF98A9B7BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:95:6c:05:dc:d6:45:d3:47:b6:8f:70:d6:63:1b:44:90:4f:
09:65:28:6a:63:5c:09:f1:7e:bd:a5:02:ba:9a:5c:67:ab:ab:
4b:0f:4c:2f:58:6f:83:79:05:55:f5:94:ad:8d:6f:8d:85:41:
fb:a6:be:51:b3:ac:53:5c:87:e8:9b:dc:17:30:8e:75:a9:6f:
8e:c6:b6:d3:c0:3c:03:8a:f1:bf:d8:17:ee:99:07:b9:c7:e9:
af:48:57:eb:74:e6:b6:db:a8:b6:ca:e7:9d:a5:eb:01:7d:c6:
18:96:83:1f:11:50:f5:03:94:14:90:35:f3:8a:6a:51:cd:ba:
35:b8:45:7d:ce:21:d2:e6:cb:d6:f5:b8:57:e4:d7:06:c1:6b:
fc:a0:86:5d:50:0e:35:93:4b:ac:81:9a:aa:7e:64:b2:3d:f9:
15:42:c2:6a:08:78:ef:67:eb:d5:3c:e2:7c:14:24:4c:41:ab:
9f:72:e2:3d:b3:f5:81:54:73:10:f3:aa:9e:e7:58:a4:38:4f:
3d:7d:77:72:02:b8:d9:d2:ae:39:e9:5e:9a:61:2f:8a:7c:21:
8f:42:f5:54:6d:2b:f8:92:f8:da:ef:1b:b0:7f:90:0b:bf:c5:
3f:d9:47:22:ca:14:f3:d5:82:86:45:ab:62:97:b1:cd:04:ff:
08:24:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:10 2024 by rpki-client on console-ams.rpki-client.org