Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F58CFA3AA411EFAC538F99762E951A.roa
File: 80F58CFA3AA411EFAC538F99762E951A.roa (raw, json)
Hash identifier: VSWFPUIlxN2hONvCkSiyh5DyDKbK2GAbNDGZ1l6tuX8=
Subject key identifier: 5C:D3:22:B7:26:24:65:31:A8:13:16:08:46:E5:FC:D5:D6:30:97:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CD94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F58CFA3AA411EFAC538F99762E951A.roa
Signing time: Fri 05 Jul 2024 07:59:28 +0000
ROA not before: Fri 05 Jul 2024 07:59:25 +0000
ROA not after: Tue 07 Jan 2025 07:59:25 +0000
asID: 63199
IP address blocks: 154.207.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52628 (0xcd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 07:59:25 2024 GMT
Not After : Jan 7 07:59:25 2025 GMT
Subject: CN=6687a7e0-f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:6c:49:4e:dc:29:41:ef:3e:d2:06:a5:62:
1d:ce:fa:40:f1:08:42:ab:6d:51:d7:31:4b:59:20:
3e:9c:c0:01:5b:8d:83:f1:4c:33:6d:82:b0:4e:e7:
f8:f7:9a:98:a5:17:f1:7c:d5:ac:00:ce:ae:16:01:
3b:a7:a9:c4:f3:d3:aa:b6:2b:1a:3a:96:8e:51:75:
60:06:a2:57:e4:2b:c9:9a:d5:5a:1c:d9:7f:4c:81:
44:07:30:4e:27:71:f3:ae:d7:83:59:c1:e1:00:9b:
b3:d9:db:96:ef:36:cf:94:12:8e:96:ee:ed:61:ee:
90:3d:7f:a3:ed:04:ca:40:a7:1f:f9:43:15:70:90:
2e:91:c4:a6:c9:eb:a1:f5:98:a4:86:af:24:44:c4:
fb:61:9c:90:53:29:44:d4:f6:f1:66:54:07:6e:c6:
06:0a:b4:09:c3:d5:3b:2a:ba:4c:a0:c8:ed:78:b9:
32:1f:d1:13:a1:a7:f0:8c:95:70:d2:b4:39:74:d5:
ee:00:ce:47:dc:cd:d0:20:1e:f5:00:8d:c9:b2:a0:
3b:0a:8c:b8:40:bb:de:75:58:1f:cd:30:b1:12:7b:
0c:af:e2:3e:a6:f6:ff:e8:2a:0a:75:46:e2:d8:60:
50:3d:3d:48:67:cb:df:1c:c1:02:c0:ba:fc:c2:fa:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:22:B7:26:24:65:31:A8:13:16:08:46:E5:FC:D5:D6:30:97:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80F58CFA3AA411EFAC538F99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.93.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:82:91:3b:f3:75:bb:44:35:49:0d:5a:fd:65:aa:09:e6:34:
f5:cc:45:25:d8:e6:99:01:2f:a2:1c:df:1d:ad:37:bb:48:81:
b7:c1:41:5a:7b:35:1e:5e:61:6f:95:c9:58:19:57:ac:b0:06:
57:ac:a0:44:3b:7f:7b:20:01:6e:dc:d2:ae:b0:c6:a7:ca:b0:
3b:5a:7f:20:56:2f:a4:69:f6:6c:88:9a:df:f6:53:dc:ff:54:
b3:e2:84:c3:0e:ff:13:91:a0:76:78:35:b0:21:cd:e5:16:0e:
e0:9a:98:70:94:41:73:f0:af:3c:0b:91:57:f1:9d:e3:45:d3:
6a:ed:18:80:48:c6:0c:aa:3e:a8:35:95:a3:c6:8e:0a:7c:f3:
f8:c3:74:c3:4f:70:e1:0e:47:25:95:08:4a:46:18:fe:6a:a0:
d9:fa:64:d2:96:12:35:91:c7:bb:e4:cc:0d:01:36:67:b6:5a:
5b:8a:09:70:b5:e3:b6:d9:9c:63:74:48:13:3c:0f:d3:7e:58:
af:83:7b:57:be:39:00:f7:1f:ac:90:be:0c:b6:23:ff:d9:6c:
51:f6:4d:c4:eb:e0:42:2a:95:c9:4d:d6:a5:1c:7f:da:21:0d:
97:be:cf:aa:45:e1:7d:6c:18:be:ff:11:cd:3e:8c:c6:ad:48:
c2:ce:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org