Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E9A1C48BA111EFBC5B8197762E951A.roa
File: 82E9A1C48BA111EFBC5B8197762E951A.roa (raw, json)
Hash identifier: RAfQ7bI9Ii6CGbsBj4D0inom1RR+q/Zn8LqTWYWxE/Q=
Subject key identifier: A5:D0:75:75:07:01:4C:FD:B7:41:3B:9B:D4:E6:56:12:07:F0:B7:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FEB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E9A1C48BA111EFBC5B8197762E951A.roa
Signing time: Wed 16 Oct 2024 09:32:07 +0000
ROA not before: Wed 16 Oct 2024 09:32:04 +0000
ROA not after: Wed 27 Nov 2024 09:32:04 +0000
asID: 210542
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65203 (0xfeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 16 09:32:04 2024 GMT
Not After : Nov 27 09:32:04 2024 GMT
Subject: CN=670f8817-b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:e5:eb:ad:a4:26:87:3b:24:5b:2a:30:5a:
ff:d3:1e:49:51:fc:ce:8d:f4:94:6a:10:70:28:15:
45:1e:2d:2f:88:6d:2c:67:3a:fc:cd:3b:b1:76:d2:
29:23:4d:0e:d2:61:c4:85:11:ef:e6:8f:44:d8:4a:
95:d4:63:9a:cb:a4:d2:5f:92:b3:74:b4:02:9d:7d:
d7:82:87:8e:37:a2:6a:64:11:10:56:97:12:22:24:
90:4a:76:18:c0:2f:5a:3d:2c:ec:67:80:96:ee:37:
6c:ed:1f:f4:08:be:c7:10:b5:3d:65:64:8a:b4:92:
ea:70:75:ec:7d:0d:ba:09:61:21:b5:8d:96:88:e0:
83:28:e1:b0:3f:7a:33:7a:45:4e:58:99:f9:0b:aa:
a5:68:bd:bb:59:b8:6c:3c:c2:62:f2:e5:fa:dd:44:
d5:dd:73:b2:1f:ad:49:bd:fe:00:70:ba:18:00:c4:
b1:d6:4e:23:3c:4a:df:e2:94:c2:f1:f4:e4:b4:65:
e6:03:73:68:6c:7a:1a:63:46:bc:df:c0:ed:72:08:
85:3e:cc:83:25:9f:9a:f8:e3:72:b5:2b:43:0d:51:
1f:bd:7f:52:fa:5c:68:82:9b:2b:4c:8a:b6:3a:6d:
2e:e4:88:c0:32:d1:e3:66:44:96:d8:56:91:f9:b8:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:75:75:07:01:4C:FD:B7:41:3B:9B:D4:E6:56:12:07:F0:B7:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82E9A1C48BA111EFBC5B8197762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
59:90:99:2c:d4:a1:cf:e1:99:87:63:a7:61:9e:05:16:17:ab:
89:4b:d4:66:86:9e:60:52:21:10:44:e8:48:55:b3:20:2e:e4:
6c:1c:cc:c4:64:7f:68:7c:c2:81:87:7d:e3:fa:f0:31:f4:7f:
fb:5c:62:37:b6:cf:30:7b:bf:ea:d1:77:26:14:e6:70:bb:6c:
6d:0b:68:b1:07:5a:64:8c:41:3a:2b:a1:ca:db:5e:51:7e:bf:
54:df:cb:6a:c1:a1:6f:fd:67:71:85:6d:f8:da:43:c0:4b:bb:
40:07:69:d5:a0:e1:bb:aa:2c:ad:1f:f3:72:40:d1:4d:51:68:
0d:b5:59:e9:24:67:54:c1:5e:da:22:7a:5e:93:fd:60:b2:4e:
08:d1:5b:83:46:52:87:25:73:c8:14:38:ca:6f:54:ba:21:0b:
d8:46:09:ac:76:d8:4b:9b:a0:14:80:9d:a4:79:be:0e:a6:06:
d8:c3:6d:bd:64:22:3b:48:e3:8e:61:32:ed:70:7b:3c:ec:18:
b4:3f:28:3a:32:f2:79:ec:9c:45:2f:ca:c3:52:88:63:5c:f6:
21:7a:66:d1:18:87:37:ed:d8:99:35:c0:89:4e:df:71:f1:6c:
ee:e7:bc:8a:ef:f8:f2:f0:b6:3d:43:b5:87:a4:8c:33:f2:8f:
cf:07:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org