Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A9DA1B2A9CB11EFB2FF66BE762E951A.roa
File: 7A9DA1B2A9CB11EFB2FF66BE762E951A.roa (raw, json)
Hash identifier: 04/I2nnM0/3kJboU8ToJuivqiE1kt86GcUpQnupsYZc=
Subject key identifier: B2:E3:67:A4:37:04:7E:07:04:4A:C3:67:85:71:67:3F:D5:34:01:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A9DA1B2A9CB11EFB2FF66BE762E951A.roa
Signing time: Sat 23 Nov 2024 18:48:07 +0000
ROA not before: Sat 23 Nov 2024 18:48:03 +0000
ROA not after: Mon 02 Dec 2024 18:48:03 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70130 (0x111f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:48:03 2024 GMT
Not After : Dec 2 18:48:03 2024 GMT
Subject: CN=67422367-65c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:e8:1d:46:d9:30:91:ee:8d:a2:18:50:10:
ce:2a:39:1c:06:66:31:5b:27:45:1c:a2:8f:3d:41:
69:a4:29:be:49:27:52:65:88:d7:45:f5:f8:51:4f:
ee:3a:fa:d4:9b:2e:51:19:3c:b0:bb:ad:f8:46:c2:
37:d1:b1:06:31:0d:8b:b4:ee:14:c0:8b:db:a5:c1:
4f:d0:d1:26:ab:91:b3:7a:a5:63:e1:1c:f4:7b:cc:
75:fd:ba:f7:1e:f4:a5:b5:22:2b:99:05:c1:9d:22:
40:8d:af:81:78:51:86:5a:2f:fd:f4:6f:8a:f7:bf:
36:e1:71:4f:50:df:39:34:ac:cc:01:7c:b9:56:df:
aa:54:e0:b5:29:e9:c5:52:ba:44:b2:56:3b:2a:58:
14:31:14:aa:5c:6d:5a:76:68:29:cd:e0:48:d7:ed:
34:41:01:0c:64:77:18:97:95:94:b6:1b:99:b8:91:
9b:64:78:24:70:41:bb:7a:23:2f:c1:9f:fc:d2:6c:
1c:3b:ff:71:6b:be:2b:8e:f0:7c:5c:fd:72:21:ba:
5c:f6:ca:84:65:dc:d3:f0:a0:63:7f:7e:5c:d7:90:
f2:30:0e:c5:33:35:3a:f9:11:d4:40:69:f6:4b:b0:
0d:df:ec:07:a1:e5:c8:bd:51:c9:da:ec:23:e9:18:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:67:A4:37:04:7E:07:04:4A:C3:67:85:71:67:3F:D5:34:01:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A9DA1B2A9CB11EFB2FF66BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:77:9d:74:b3:f4:74:ba:47:2c:5d:5c:70:67:4b:79:16:97:
0e:ed:df:cb:bf:1e:1e:80:b0:43:fa:19:9d:74:ba:81:37:08:
ac:a2:c2:88:1b:a6:1a:f5:67:7f:79:71:b2:8f:48:e2:63:b2:
41:54:f9:da:7d:76:35:ed:02:8c:00:b2:de:cb:50:76:fc:87:
93:41:cf:cc:03:9e:a1:cc:82:f2:6a:1b:51:f7:4c:01:1d:1b:
9f:55:1d:7e:31:f4:5e:0c:1f:06:a8:fa:92:1c:65:84:43:8b:
e0:bb:8a:50:c6:5d:23:a2:45:42:42:e8:95:63:f2:c9:01:c7:
e3:34:79:68:30:52:c0:bd:76:50:fd:67:da:d9:cd:6e:09:a8:
ea:db:0f:19:be:32:8f:ed:71:5c:c9:25:32:9f:38:44:93:a0:
4e:62:c0:ba:d6:d7:64:d0:59:b8:26:8c:d0:b1:a0:3e:66:e4:
59:d8:3c:d2:a8:2b:b2:cf:9a:ec:3b:ee:03:1f:0d:f2:3c:83:
3f:81:af:cf:9c:78:1c:15:60:8d:71:44:4b:c9:42:13:5a:f5:
e3:62:30:bd:ba:b1:47:77:33:14:4f:75:56:21:b5:c4:c6:7e:
b1:04:d5:23:e4:35:72:a0:5b:fd:03:8c:b7:c9:ef:2d:e4:e4:
d9:19:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org