Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C45E88C7B2011EF839B609A762E951A.roa
File: 7C45E88C7B2011EF839B609A762E951A.roa (raw, json)
Hash identifier: mwLcZnTxaAbY1IFmi0rTf+KUvQ/grN/wCN3WElmIuX0=
Subject key identifier: 45:9A:2C:43:15:F0:C8:DE:8D:D4:02:EE:52:C7:82:C3:71:0F:CC:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F348
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C45E88C7B2011EF839B609A762E951A.roa
Signing time: Wed 25 Sep 2024 09:28:13 +0000
ROA not before: Wed 25 Sep 2024 09:28:09 +0000
ROA not after: Wed 18 Dec 2024 09:28:09 +0000
asID: 47890
IP address blocks: 154.214.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62280 (0xf348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:28:09 2024 GMT
Not After : Dec 18 09:28:09 2024 GMT
Subject: CN=66f3d7ac-0ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:76:04:8c:37:56:6b:48:95:dd:ff:cf:e6:
fb:a1:ec:80:6b:dc:18:46:c5:b3:9b:76:f7:d3:fd:
48:86:00:48:16:82:12:62:39:9b:67:3f:2c:01:e8:
d5:fa:c1:3c:92:e9:b0:3e:9e:2c:5e:37:4e:95:52:
b0:48:5c:52:cb:f3:ec:22:cc:b1:82:35:1a:fb:b0:
dd:95:7a:08:e5:28:2e:f9:a3:6c:65:f1:78:27:70:
a0:90:12:f3:6c:4d:3e:e7:df:70:f6:54:bd:77:86:
64:77:cc:56:c2:00:74:fe:ac:0d:9f:02:d0:0b:c9:
16:39:84:0e:80:d3:d9:9a:d8:2b:9f:85:b6:ac:70:
1d:5f:8e:23:8a:52:d9:d8:fd:b4:fc:1e:c3:7d:26:
d8:02:6b:66:7c:ab:3d:16:8d:6c:f2:07:65:9d:4c:
39:c3:35:65:56:98:ce:bb:d6:b5:a8:4d:88:75:34:
f1:5b:2a:5b:0b:f9:08:4a:d1:19:55:ad:c1:08:bd:
50:b0:bc:fd:47:de:18:4e:c5:a9:ae:07:dd:db:96:
ee:80:1f:da:90:b6:f1:9f:fa:1d:1b:9a:45:d6:ee:
8c:53:3f:76:8c:88:df:75:95:b2:39:f7:fd:4d:66:
f0:a4:32:62:77:ed:26:d5:ae:f4:a6:0a:eb:27:7e:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:2C:43:15:F0:C8:DE:8D:D4:02:EE:52:C7:82:C3:71:0F:CC:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C45E88C7B2011EF839B609A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:98:8c:90:1c:1c:54:ac:e2:bc:a9:15:7f:dd:e4:99:b2:b0:
1b:59:13:e3:36:a9:cc:51:d0:17:a1:cb:f3:0b:af:a7:95:1c:
ed:62:fc:15:9d:91:83:2f:85:18:17:23:b7:b2:68:ec:ee:cb:
ad:fc:c2:16:a7:7d:0f:8f:62:ae:16:ea:41:69:c2:77:2d:06:
87:77:36:5f:9f:92:68:42:34:9a:ff:d7:54:68:f4:be:38:11:
55:f8:f7:74:ae:c3:8b:6b:b2:1a:72:35:36:00:53:90:83:92:
0e:7d:4d:bf:2e:2e:af:5f:9d:a2:d7:42:44:ee:51:d1:af:47:
b2:44:c5:48:e1:84:c7:19:e6:97:b1:21:dc:bb:23:03:83:44:
da:7d:05:d9:3c:4f:9d:13:df:b6:cd:f3:ba:d4:61:e9:ca:ac:
04:36:85:08:bf:bd:6b:af:33:d1:c8:6e:7c:f0:aa:50:2a:f4:
f9:55:2c:24:86:ba:37:33:b2:7e:4d:d8:c5:17:7c:18:f5:0d:
ec:1f:04:c2:5c:92:04:7a:ed:f2:f2:64:c8:e7:60:e4:8a:98:
bb:a5:f5:29:22:5e:fb:83:30:a2:bd:a8:34:2a:d0:11:fb:3f:
19:62:38:d1:3f:19:35:b4:d4:a1:15:9e:9f:40:a6:4d:8c:30:
25:78:dd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:57 2024 by rpki-client on console-ams.rpki-client.org