Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D03A4CEA9D011EF946E5D5E762E951A.roa
File: 7D03A4CEA9D011EF946E5D5E762E951A.roa (raw, json)
Hash identifier: WohY0Irb0OdYJNiz4fdzALAo7b88S8T8RaN1Ja4frLg=
Subject key identifier: B2:A5:99:4F:4A:B9:5C:D5:9A:04:82:A2:A9:C7:3F:5C:BC:BA:3C:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011216
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D03A4CEA9D011EF946E5D5E762E951A.roa
Signing time: Sat 23 Nov 2024 19:23:59 +0000
ROA not before: Sat 23 Nov 2024 19:23:55 +0000
ROA not after: Tue 03 Dec 2024 19:23:55 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70166 (0x11216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:23:55 2024 GMT
Not After : Dec 3 19:23:55 2024 GMT
Subject: CN=67422bcf-7235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:41:fa:80:6c:63:98:8d:0b:09:6e:e2:38:
c0:b9:bc:97:42:36:96:e4:4f:cc:72:55:95:6c:9b:
6b:00:13:c6:ea:30:bc:88:1d:b9:75:14:4c:7e:81:
00:31:31:92:27:14:ae:58:88:b6:33:e8:8b:0d:73:
59:8e:3e:a7:42:9b:65:b4:ca:77:fb:cd:96:36:61:
b0:4a:56:67:b7:c5:da:f0:e7:c6:db:14:60:af:e2:
66:79:02:61:1d:6e:0c:f4:81:f9:c8:4f:85:fa:cf:
c5:6e:44:21:70:65:10:8c:bd:9c:51:cc:0d:df:b7:
d4:ed:2e:10:5d:17:0c:55:14:a0:18:3c:4f:34:9d:
5f:eb:4e:5c:6c:01:ba:b8:3d:83:aa:13:2e:7f:86:
e7:7f:88:ba:52:a9:c8:49:13:bf:6d:6a:ae:54:5a:
84:4f:fa:a6:c6:11:cb:ed:6d:dd:0d:d1:05:51:9b:
5a:70:d7:03:c8:d1:14:00:51:6f:4f:a2:96:4a:80:
9c:5e:60:85:0a:23:d8:72:48:e9:dd:f6:cc:42:94:
eb:1a:ea:63:01:b5:28:c4:bb:7d:df:03:8c:38:8d:
44:d5:f1:22:f2:4d:ce:48:2b:ea:ef:21:20:c6:ac:
cb:6e:de:1d:55:9b:7b:1a:17:fe:82:24:b3:87:de:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:99:4F:4A:B9:5C:D5:9A:04:82:A2:A9:C7:3F:5C:BC:BA:3C:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D03A4CEA9D011EF946E5D5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3a:c1:a3:81:dd:48:95:24:a1:7e:61:0c:30:71:a3:34:d4:
b4:42:97:f7:df:4a:8c:e9:f9:44:a2:5b:6a:54:37:eb:da:74:
33:c4:7b:dc:61:34:af:0b:6a:e1:b8:d2:34:31:4d:37:c1:eb:
66:97:0e:8e:c0:c6:e4:db:93:40:37:a5:43:87:ad:1b:b3:be:
54:dc:da:f4:aa:72:7c:94:9c:6d:33:de:58:21:69:79:25:a2:
1c:e3:fe:d6:ab:97:7c:48:91:0a:96:d1:32:8b:a4:c3:35:66:
43:24:26:70:87:52:82:11:6e:94:db:e9:95:6c:ad:30:57:8d:
10:bb:bb:dc:43:5e:35:04:5d:b3:7f:da:c8:de:9a:5d:14:6d:
4c:36:25:97:6b:b0:86:f9:db:e0:c6:56:bf:ad:b1:cb:a8:5b:
04:a6:be:41:04:9e:ff:32:18:93:71:d8:0c:ed:f9:64:29:2e:
55:b5:bd:17:66:b7:4a:c5:2a:15:cc:02:57:b5:09:8c:4f:9b:
99:ad:8a:46:41:2b:9a:41:be:03:59:29:cf:fa:98:80:40:a0:
7b:ac:1b:96:ba:58:f7:07:61:63:b1:b0:13:75:2b:54:c1:e0:
85:5a:59:ac:13:26:05:6c:1f:a1:07:2b:ec:5f:af:0e:ce:09:
8c:1d:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org