Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7864295274CE11EFB10E2A4D762E951A.roa
File: 7864295274CE11EFB10E2A4D762E951A.roa (raw, json)
Hash identifier: QkmENi8PTMpNYqkwGo9BeOXWeJ052zIaX8k9dFlequw=
Subject key identifier: B0:FF:3A:2E:2F:41:09:18:82:9E:58:EC:F7:19:1E:1B:C3:09:8D:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F004
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7864295274CE11EFB10E2A4D762E951A.roa
Signing time: Tue 17 Sep 2024 08:26:01 +0000
ROA not before: Tue 17 Sep 2024 08:25:57 +0000
ROA not after: Sat 30 Nov 2024 08:25:57 +0000
asID: 136970
IP address blocks: 154.197.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61444 (0xf004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:25:57 2024 GMT
Not After : Nov 30 08:25:57 2024 GMT
Subject: CN=66e93d18-ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:f8:e5:62:c6:2a:4f:89:aa:d2:79:d8:e6:
26:c0:9c:8a:3c:65:24:36:7c:1a:13:f4:dd:07:80:
c7:ab:e9:3a:bb:1f:38:19:1d:5c:10:8a:05:12:75:
c1:ed:61:1a:41:a0:d3:ac:4d:30:1b:f5:01:41:eb:
32:a2:5d:df:f6:13:cf:09:66:58:3d:be:9a:20:3d:
31:1b:a9:4d:d5:68:7e:a7:f8:1d:1d:ec:b1:25:3a:
a7:bd:37:45:c1:bb:76:04:03:63:f0:03:49:16:6c:
9e:40:59:f9:37:32:4e:0d:ba:a8:f7:3f:49:d9:4a:
d8:be:88:ab:2a:98:ec:3d:d6:6f:66:ce:8f:c3:3b:
07:30:f6:00:e2:e1:45:36:bc:5e:ee:b7:d2:f1:6e:
4c:58:a8:27:cc:cf:75:3c:22:15:b7:9d:e3:9c:1d:
c1:f6:d0:99:8d:f1:37:32:fd:cf:1e:99:f9:ec:7e:
6a:50:b2:be:97:9c:2a:89:1f:a1:42:2c:b9:e6:01:
fd:4d:c5:97:a4:a1:0e:c4:1c:cb:21:4e:32:28:66:
da:30:29:a9:5f:5f:86:71:55:80:16:9f:9b:8d:fd:
b8:2f:46:91:49:6c:7d:55:e5:74:0e:f3:f0:3e:46:
bf:01:11:cc:88:43:27:36:8b:1a:9f:6c:aa:e1:a0:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:3A:2E:2F:41:09:18:82:9E:58:EC:F7:19:1E:1B:C3:09:8D:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7864295274CE11EFB10E2A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.5.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ec:83:3a:a2:ca:46:0e:5d:dc:5a:5f:4a:c0:9f:90:14:aa:
c5:7f:da:4f:27:04:8d:4b:d2:29:b8:53:e5:d5:ba:0b:14:10:
9c:90:d1:25:0e:96:f0:00:a4:56:82:7b:57:80:df:8e:6c:a3:
cc:8c:16:39:97:5e:a1:7f:eb:bd:b7:e8:db:0c:63:96:e4:a5:
6e:84:c5:1f:07:a6:7f:a4:13:83:5b:d5:58:38:db:23:2c:0a:
e0:d3:f4:fa:0e:27:9b:f8:b0:75:1f:cb:c1:68:ed:e3:42:f3:
d8:d8:c6:97:fc:5d:d1:02:cb:ea:10:fa:ca:ae:ce:97:3e:7e:
36:5c:2b:2b:a6:c4:5d:92:3c:da:46:d6:62:c9:cd:83:18:3c:
0e:b1:26:2e:2f:f8:e7:e2:66:6c:4a:c9:60:58:4b:1f:46:f5:
3a:3e:fc:43:ac:c9:a8:67:16:68:0f:72:d3:2f:a2:8a:dd:d0:
3d:07:a1:30:48:3a:f5:b3:ee:4c:63:cd:73:e9:25:ac:e4:99:
fb:9a:29:0a:c3:e6:ca:48:39:2f:ca:64:d2:9c:c4:f0:c9:66:
f3:43:4f:3b:ee:f1:0e:06:1b:d5:ad:3c:98:f5:bf:8f:02:ed:
66:38:be:28:9a:66:e6:64:44:9d:73:40:35:c3:ff:e0:69:53:
eb:90:0f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:10 2024 by rpki-client on console-ams.rpki-client.org