Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3C44DAA73811EF8FF2B28C762E951A.roa
File: 7E3C44DAA73811EF8FF2B28C762E951A.roa (raw, json)
Hash identifier: vPt0zR0V2tybsfBU5KASU5cffE4mHp+ZCqUreV4jl/0=
Subject key identifier: 4C:33:F5:F8:B8:8E:2C:6C:74:42:1E:F3:60:C7:9F:FA:CA:43:E1:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3C44DAA73811EF8FF2B28C762E951A.roa
Signing time: Wed 20 Nov 2024 12:10:55 +0000
ROA not before: Wed 20 Nov 2024 12:10:51 +0000
ROA not after: Tue 13 May 2025 12:10:51 +0000
asID: 137951
IP address blocks: 154.215.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69513 (0x10f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:10:51 2024 GMT
Not After : May 13 12:10:51 2025 GMT
Subject: CN=673dd1cf-8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:b6:67:18:03:ed:09:cd:76:05:a6:d1:0c:
62:48:e6:02:5d:4d:94:c5:e2:f5:3d:46:2b:b3:f0:
ac:71:fb:25:be:ea:90:08:ea:fd:8b:24:a4:57:09:
78:7e:4e:d5:7d:f4:98:b2:c1:83:13:37:ee:c0:fc:
fa:e9:90:ad:2f:c1:4f:a8:e3:b1:72:96:ed:7e:f8:
05:2f:98:32:a8:fb:a9:57:56:48:d8:d1:6f:54:f3:
9f:b9:cd:2a:a7:07:ca:92:c7:ca:3b:5d:7e:30:7d:
41:ba:5b:32:77:10:87:c7:93:06:77:c6:b9:c2:ce:
87:a1:30:d0:3c:3e:b5:d5:92:e6:fd:6e:76:97:c8:
c1:af:85:dd:9f:82:88:ad:31:15:da:6e:06:a9:57:
1d:b3:a6:00:59:e6:ce:59:25:a1:19:1b:5c:36:98:
c5:6d:0c:f6:1a:5d:d4:cc:ed:ed:26:a3:1c:3e:5f:
7b:a0:62:f6:54:0c:9a:42:04:66:5a:ad:77:e2:60:
cd:2d:7f:0b:da:6f:e5:a5:46:2f:91:c4:91:b0:11:
7b:28:ad:38:67:7a:8e:f8:07:25:4a:6c:14:db:ed:
40:22:e6:ad:76:f5:ac:27:1c:0e:fa:44:f6:28:5b:
1f:c1:07:7d:e2:7f:46:9c:01:2a:55:11:13:bc:87:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:F5:F8:B8:8E:2C:6C:74:42:1E:F3:60:C7:9F:FA:CA:43:E1:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3C44DAA73811EF8FF2B28C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.4.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ad:54:4e:0e:28:d6:23:2b:54:17:22:25:d9:98:40:74:3b:
1f:aa:6d:2f:6b:c5:f5:57:0b:be:bd:d2:dc:df:1c:fc:d6:b3:
70:cb:cb:df:c7:43:84:20:1e:00:67:95:56:a8:c2:19:7b:3d:
f7:7f:ea:ff:20:7b:97:cf:cb:b5:d3:da:07:b2:1f:c2:0c:55:
74:1d:00:9f:4e:85:80:d1:72:cd:ea:7e:4d:56:33:2f:e8:70:
cd:15:15:a6:a9:f6:16:cc:31:cc:13:11:11:99:b4:31:08:d7:
76:e5:e2:19:37:69:c3:47:37:5b:5b:da:01:4b:e4:13:44:de:
53:8b:bd:d0:fd:ad:e9:c7:2f:4b:50:a9:9d:22:0e:bf:b6:5f:
95:97:5d:42:e9:d4:89:7a:1c:d6:26:5c:6a:f4:9c:d8:c0:cc:
a8:ab:4b:76:7e:16:e6:8f:b1:19:88:18:24:3b:a6:50:54:21:
d6:ed:4f:f7:32:13:be:81:43:d1:02:0e:b6:bb:fd:87:5a:01:
07:34:48:e2:0b:4c:ef:bc:72:6a:1a:d2:3a:bd:b9:94:0b:5d:
a4:00:07:c8:96:d7:74:e4:a5:c2:6e:2b:d6:fa:74:d1:ef:af:
3e:6b:ff:f4:1e:8f:18:3a:04:ad:f2:83:4f:71:f0:2b:e9:10:
64:10:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org