Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDEF79AA8EC11EFB7BA3045762E951A.roa
File: 7BDEF79AA8EC11EFB7BA3045762E951A.roa (raw, json)
Hash identifier: rJIDXMe/eBuAY9PX0h/SJIC5mI++BG/B+hsiGdtGAfo=
Subject key identifier: 78:25:6C:BB:7A:81:98:59:9F:EA:E9:21:2F:A1:F6:5F:FE:C1:0D:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01111D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDEF79AA8EC11EFB7BA3045762E951A.roa
Signing time: Fri 22 Nov 2024 16:11:52 +0000
ROA not before: Fri 22 Nov 2024 16:11:48 +0000
ROA not after: Tue 03 Dec 2024 16:11:48 +0000
asID: 62240
IP address blocks: 154.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69917 (0x1111d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:11:48 2024 GMT
Not After : Dec 3 16:11:48 2024 GMT
Subject: CN=6740ad47-7bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:29:9a:ab:69:a2:4a:10:fb:7b:ce:98:16:
d7:a4:25:e8:8d:40:73:82:1a:4e:92:3a:b9:08:5e:
9b:90:2c:f2:21:09:48:c1:f2:16:56:1c:a4:52:50:
ef:4d:60:b9:c6:1c:54:81:f9:ff:a0:28:d5:98:04:
13:0c:d2:61:d6:9b:71:2c:91:c8:2a:65:cb:e9:1b:
fe:ea:62:38:f6:fe:cd:96:8b:3d:8e:52:0c:de:15:
49:eb:2d:42:a6:07:a1:b1:3a:9d:8c:1a:9b:29:b6:
d5:87:1e:7d:93:69:89:99:c2:26:10:48:42:be:6c:
f2:10:17:df:49:f7:28:39:68:a1:1f:3b:25:c9:04:
1c:56:61:c5:8a:71:1e:bd:ea:66:d9:03:16:3d:05:
6f:f6:5b:7d:b2:c3:09:c5:f7:6b:ee:52:50:0a:5b:
2b:cb:e2:5e:df:fe:61:b7:6a:b4:01:4b:42:b2:cd:
2a:a5:f8:f6:57:cd:39:c9:6f:2f:d3:62:80:06:a9:
fa:67:04:8e:31:d1:e2:7a:df:89:03:3e:05:bc:42:
0b:f0:66:56:48:4b:1e:39:93:cf:8f:bb:e4:82:08:
46:2e:03:b5:29:09:32:db:97:46:df:81:82:5f:70:
64:9d:0a:13:c3:25:5b:9b:fd:7a:6d:45:ab:dd:dc:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:6C:BB:7A:81:98:59:9F:EA:E9:21:2F:A1:F6:5F:FE:C1:0D:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BDEF79AA8EC11EFB7BA3045762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e4:a2:26:ba:57:a8:87:b4:d2:11:87:fa:21:51:1b:c9:a7:
6e:d7:d3:7f:97:c6:43:89:62:34:04:a5:cd:8a:ac:d6:5e:e7:
a7:bc:80:83:7f:83:6a:2b:c6:4e:ab:f4:64:a4:cd:fc:89:26:
64:5a:9f:21:f0:d3:29:e4:4c:cc:c7:5a:4e:cf:79:df:72:9f:
bf:15:85:d4:1b:f0:ce:50:25:51:f1:53:eb:33:07:33:ea:b1:
37:96:38:41:2a:9c:b6:68:f0:50:ff:a9:c4:17:44:ad:f3:59:
82:08:63:22:8b:53:af:67:00:da:40:4c:31:65:60:01:fe:57:
59:46:ef:1f:65:d8:5a:53:3f:63:6a:d9:24:01:e6:1d:4a:0e:
c0:d5:a5:23:be:d2:a7:89:d6:fb:00:82:0d:43:fe:e6:8b:53:
be:32:e2:62:e1:fd:84:e4:25:57:8e:6e:ec:d1:21:33:47:12:
25:3d:f6:34:99:de:e4:ff:38:e4:26:f4:cf:d7:9e:3b:18:6d:
01:40:00:60:63:78:11:5a:ce:06:df:2b:2e:12:e9:1e:4a:3d:
89:3f:75:79:b5:15:fe:8e:66:7a:32:b5:8f:ee:b3:e8:c3:e5:
d9:84:29:35:49:a5:07:08:a5:83:bb:8b:5a:49:4c:77:f7:9d:
42:9e:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org