Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0AB8EAA8C011EFB86377AF762E951A.roa
File: 7F0AB8EAA8C011EFB86377AF762E951A.roa (raw, json)
Hash identifier: Y9ZVZZBjA/rA3g+2oWJrBWtsJ24N+MrLdDj8/kfXwxw=
Subject key identifier: 05:94:25:0D:DB:B5:54:39:46:DB:E6:43:A3:42:2D:CD:35:03:21:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011005
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0AB8EAA8C011EFB86377AF762E951A.roa
Signing time: Fri 22 Nov 2024 10:56:59 +0000
ROA not before: Fri 22 Nov 2024 10:56:55 +0000
ROA not after: Sat 30 Nov 2024 10:56:55 +0000
asID: 149014
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69637 (0x11005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 10:56:55 2024 GMT
Not After : Nov 30 10:56:55 2024 GMT
Subject: CN=6740637b-121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:3b:13:ee:6c:38:5d:36:a0:ec:f8:ff:aa:
1d:1e:e4:c3:f5:ef:87:46:6c:43:3c:4b:35:38:db:
26:6d:4e:5f:15:e4:48:1c:d5:5c:0e:06:77:56:52:
f4:cc:1e:ff:37:40:8c:d8:b5:24:06:fb:98:17:00:
6b:6d:05:09:e3:c6:26:9d:3e:05:f3:90:b1:4a:01:
9e:68:f6:dc:eb:f5:aa:dd:ff:9d:82:35:5a:60:52:
4a:0c:1f:a3:d4:a5:ea:5d:ec:32:1b:68:b1:6d:a1:
45:b7:8c:f3:8c:ea:69:0e:d1:cd:6b:e6:8a:86:ee:
e9:c0:39:ab:49:b9:14:d8:42:7c:31:26:bd:f5:cf:
24:b1:3b:a1:24:86:56:df:b1:7b:ce:f7:a9:dd:4e:
d8:66:74:76:9a:40:ab:0e:ea:a7:7d:5e:44:f4:a7:
07:d7:bb:f0:16:bd:73:39:d9:7a:66:a9:47:d2:91:
1f:48:92:b5:b6:8f:71:25:da:ab:a8:cb:9c:52:c8:
3e:1a:0d:98:b9:b8:02:a1:52:26:25:13:0f:67:df:
89:17:4e:64:0f:c8:07:13:04:cd:c1:4a:2b:e1:6b:
e2:6b:34:b0:d1:9e:06:cb:96:ed:dd:2b:b3:dc:5c:
14:90:11:b6:38:4f:86:20:0d:69:61:e7:29:fa:30:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:25:0D:DB:B5:54:39:46:DB:E6:43:A3:42:2D:CD:35:03:21:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F0AB8EAA8C011EFB86377AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
57:fc:5e:78:b0:76:16:22:49:9b:69:40:08:93:ab:e5:17:b3:
f3:3c:a4:1b:5b:7c:19:09:e9:36:e9:a5:5c:29:d3:00:72:de:
e5:12:aa:f6:8f:5c:86:22:a6:83:99:cf:96:1d:4e:06:3b:d0:
57:95:0b:cf:56:98:b5:b2:b2:c3:43:05:9b:bc:92:be:06:9a:
ef:4b:65:b8:ba:5a:78:00:8e:f7:b0:8a:4c:d5:56:7a:7f:4b:
4e:9a:3c:5d:b4:33:35:3d:ef:55:55:17:2b:7f:dd:a5:e0:47:
de:9e:5f:17:65:76:4f:51:c4:53:88:58:37:c1:9f:8e:90:0d:
88:87:19:9b:2d:8f:84:04:dd:fb:a8:db:8e:36:e8:f9:c4:c7:
b2:c0:17:d6:5c:4d:ea:7f:f9:e0:52:26:f8:18:3a:05:56:f2:
a8:ef:17:b9:d9:25:70:5a:94:9e:7b:bb:e6:df:5a:59:22:f2:
00:8d:7a:95:1a:1c:8f:c6:87:ee:05:8b:6e:c7:b2:90:38:cf:
c3:29:d6:f2:b0:06:9c:dc:83:10:de:70:34:9b:4c:08:42:e0:
2d:72:27:be:ab:b0:27:a0:3b:f5:66:9f:d7:96:05:f6:0e:58:
fc:66:3d:c9:06:b7:90:ac:e5:8e:64:d7:50:9a:47:83:3b:e7:
45:d1:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:20 2024 by rpki-client on console-ams.rpki-client.org