Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817C7A7E9C1C11EFADE5C780762E951A.roa
File: 817C7A7E9C1C11EFADE5C780762E951A.roa (raw, json)
Hash identifier: wgtHmz2mVQTooW2KabaCVYvQR0XP3FvxAKuJuPlQFa0=
Subject key identifier: FC:D0:8E:FE:68:3B:1B:B4:86:D9:7A:8D:B7:BB:C7:0B:73:FE:1A:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010870
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817C7A7E9C1C11EFADE5C780762E951A.roa
Signing time: Wed 06 Nov 2024 08:52:52 +0000
ROA not before: Wed 06 Nov 2024 08:52:48 +0000
ROA not after: Mon 30 Dec 2024 08:52:48 +0000
asID: 63139
IP address blocks: 154.94.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67696 (0x10870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:52:48 2024 GMT
Not After : Dec 30 08:52:48 2024 GMT
Subject: CN=672b2e64-59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:6f:ab:62:90:87:e7:84:77:0c:21:bf:7f:
2b:5d:5f:8a:3f:5f:ab:26:eb:ff:20:fa:31:b8:2b:
4b:75:b7:d7:3e:dc:d9:7f:a6:f6:77:d7:10:cd:56:
be:8b:df:48:af:56:47:fe:ff:da:0d:54:ba:68:36:
66:99:40:31:51:a3:5b:6c:fb:81:f7:50:de:b6:ca:
77:38:b1:8b:38:f8:8d:76:2a:c0:73:c9:3e:66:39:
56:84:b4:01:73:69:bc:60:e9:85:11:45:c2:96:38:
00:35:3a:0d:ca:8d:92:27:c3:5a:5f:5d:b3:ba:d4:
ec:1a:d4:68:46:6e:b1:82:53:46:6c:5e:ed:e2:b3:
05:23:ef:c5:17:a1:10:c8:8b:c5:d3:9b:5e:e4:20:
77:1f:41:80:6e:01:4e:da:bf:1a:e4:82:17:7b:32:
75:b0:cd:de:e8:06:42:32:87:32:58:e6:17:b0:64:
71:8b:cf:cc:ea:dd:d3:02:41:31:a7:bb:9b:5b:62:
44:aa:c0:a2:36:80:3e:26:32:22:28:fb:4c:f6:c7:
e2:16:55:b8:76:0d:e7:0e:d9:35:89:d8:7b:77:6c:
90:9e:5a:d3:ca:1d:5d:d2:9b:16:6a:09:ba:04:93:
6b:d9:77:3b:2b:57:74:33:14:b4:7a:60:2d:b2:d1:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:8E:FE:68:3B:1B:B4:86:D9:7A:8D:B7:BB:C7:0B:73:FE:1A:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/817C7A7E9C1C11EFADE5C780762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/18
Signature Algorithm: sha256WithRSAEncryption
37:79:6e:3f:62:a3:59:d1:ec:39:75:93:92:52:a4:2e:18:24:
28:a5:54:da:5c:52:26:e8:13:bd:59:57:33:c7:4b:e7:48:aa:
49:6a:d1:86:7e:97:08:7e:c0:a2:40:e8:c6:a9:cf:09:ca:43:
52:e6:aa:4b:70:88:a2:11:56:b0:43:21:28:90:b7:45:e5:d3:
1e:b7:4b:57:4b:87:cc:71:19:6e:53:c8:42:0a:ce:7b:be:82:
a4:14:ae:8e:36:dd:cf:98:e2:fb:72:32:6b:d8:3b:c2:f5:09:
5b:13:09:ad:02:80:c5:28:3a:c0:26:03:1e:d1:c0:e5:4a:2d:
f1:6a:2d:1d:66:88:ca:3c:a8:8b:bb:ec:5a:3e:c2:39:06:bc:
3c:2a:19:54:01:75:e2:f9:0f:78:46:c9:e7:52:09:f5:23:c1:
ea:8a:f4:b5:7e:8f:90:37:99:e5:dd:b4:a1:b4:5d:3c:ec:74:
80:a4:25:6d:b9:96:c4:c2:54:9e:26:78:dd:95:74:74:49:91:
f0:28:e6:ee:6a:2c:d4:71:b0:69:ff:db:fe:fe:a5:3b:66:d7:
17:8e:be:3f:7e:fb:8f:de:83:d6:ea:66:ba:92:26:50:e3:3b:
00:86:ea:f3:88:e5:ce:c4:e4:b0:96:31:2f:ca:a3:76:87:b9:
cb:70:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org