Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D3B83CA72311EF9D0B2B8B762E951A.roa
File: 80D3B83CA72311EF9D0B2B8B762E951A.roa (raw, json)
Hash identifier: r1g5Ta7ALd8+wt8iul+/x0oPF5K4bYYjpJCDn4qp4KE=
Subject key identifier: A4:68:97:D0:CA:A6:97:FB:5E:97:D3:21:02:89:FC:04:C8:77:14:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D3B83CA72311EF9D0B2B8B762E951A.roa
Signing time: Wed 20 Nov 2024 09:40:40 +0000
ROA not before: Wed 20 Nov 2024 09:40:36 +0000
ROA not after: Mon 02 Dec 2024 09:40:36 +0000
asID: 39600
IP address blocks: 154.90.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69489 (0x10f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:40:36 2024 GMT
Not After : Dec 2 09:40:36 2024 GMT
Subject: CN=673dae98-8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:8b:86:b4:a4:0e:79:82:15:17:1c:b1:04:
b0:cc:ec:47:4a:2b:c5:11:4c:5e:50:7c:59:ba:69:
3f:76:56:40:fd:42:86:c8:19:b9:dc:03:74:f3:95:
33:98:f3:23:1d:fa:92:76:1b:01:40:77:03:9c:71:
5b:72:8c:32:0f:46:bd:24:f3:8b:07:30:5e:a3:c5:
2d:ef:44:c2:45:24:05:ae:f5:ab:54:23:4a:83:57:
80:af:77:e1:68:c5:86:cf:f3:53:68:ee:60:47:cf:
cb:d7:49:dd:52:f4:aa:8b:7d:7e:c0:24:45:75:d5:
d2:53:2e:44:fc:02:e6:8e:fa:20:b6:3d:46:76:1b:
7d:1e:4e:38:6e:88:59:ef:fe:b1:d9:a8:c1:8e:95:
57:32:b0:9e:ae:4e:96:b5:3e:bc:2c:52:b4:38:ae:
26:ed:9e:ec:76:31:7b:94:37:24:d8:77:a7:8a:24:
b4:3a:13:f9:67:b8:16:05:ed:2c:b1:43:f6:49:cc:
43:9c:06:87:57:8a:89:61:cd:0d:ce:18:d9:70:69:
93:2a:db:c2:3d:3c:63:5d:64:25:92:47:1d:13:1b:
c1:e3:01:73:77:27:5d:15:77:d4:75:54:62:7b:1e:
34:ab:a5:b7:5f:ba:0a:c3:05:d4:26:9d:38:41:5c:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:97:D0:CA:A6:97:FB:5E:97:D3:21:02:89:FC:04:C8:77:14:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D3B83CA72311EF9D0B2B8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:f6:ac:c6:13:82:b6:6f:23:1d:c8:84:2f:87:7d:e5:74:f4:
bb:60:81:02:07:6a:19:0c:54:72:7e:58:16:e8:5b:11:74:4f:
9b:61:12:bb:11:ae:fb:0e:08:4c:67:b7:96:c7:d0:54:a9:03:
72:79:2f:e6:01:b0:86:1c:e8:6a:6c:a5:aa:aa:59:de:42:1b:
06:ee:d4:da:c0:29:94:29:a5:b8:72:79:2d:96:54:3c:a6:c3:
51:42:8c:51:5f:5a:23:0a:44:fb:83:6e:80:9d:c2:88:8f:00:
15:04:68:54:86:2b:8c:be:57:cf:0a:8a:39:f5:26:5d:b3:57:
60:13:e7:49:bd:72:0a:0f:02:c1:62:b0:c4:0a:b7:f1:bc:f5:
97:ce:1c:b2:14:37:2b:6d:d1:35:2b:1b:67:21:bc:97:a0:6d:
a8:8c:00:20:aa:35:55:42:b7:ed:e9:75:93:8d:83:27:c5:8d:
99:73:01:fd:03:95:82:35:d2:77:25:a0:ca:4e:26:11:81:a8:
38:49:6a:ab:6a:ca:3f:67:f2:cb:a4:98:46:5b:ff:80:72:85:
d5:93:eb:22:fa:cc:2f:51:10:75:b1:ea:83:f2:a9:4f:a5:d6:
e6:23:0a:6a:9c:5b:2c:b0:06:3c:b4:30:89:48:9a:61:27:3b:
b4:a0:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org