Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83113B0E4D7F11EF9AFB4EBC762E951A.roa
File: 83113B0E4D7F11EF9AFB4EBC762E951A.roa (raw, json)
Hash identifier: oY9epvLDmnO/Np8EMgCYpFgAU4vE4B/sORaa3L1Isfk=
Subject key identifier: 0E:C2:D5:00:A3:DF:D7:C6:8C:0E:53:41:8F:3E:46:33:36:B8:AF:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D7D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83113B0E4D7F11EF9AFB4EBC762E951A.roa
Signing time: Mon 29 Jul 2024 07:52:33 +0000
ROA not before: Mon 29 Jul 2024 07:52:29 +0000
ROA not after: Tue 29 Jul 2025 07:52:29 +0000
asID: 38638
IP address blocks: 154.215.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55250 (0xd7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 07:52:29 2024 GMT
Not After : Jul 29 07:52:29 2025 GMT
Subject: CN=66a74a41-a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:31:b5:85:4f:09:0d:e5:ac:35:36:57:23:
14:3c:81:bc:10:78:0d:bc:3d:1a:78:8e:4f:71:e7:
07:9f:3d:7a:cb:03:14:23:f1:98:e5:cb:ee:cd:33:
a4:ab:54:65:07:ae:ce:b8:f6:bd:61:58:60:a5:a4:
6c:a9:89:9e:63:35:9e:78:36:99:35:18:f6:37:cf:
af:22:1e:50:29:ed:64:cc:f4:19:49:4d:83:fa:a0:
ca:5f:74:03:1a:13:46:a5:86:15:40:19:25:7e:c2:
b8:7a:df:34:2a:6e:8b:db:f5:4b:5f:be:9e:5f:e3:
0a:7d:18:27:cc:dd:1d:c1:68:26:ba:57:a1:13:34:
a3:d0:ec:1d:a3:de:a3:07:12:cd:ce:6d:66:b5:bc:
14:68:62:7c:b2:8d:a9:98:ba:8f:c1:1c:7f:2b:10:
d6:4a:fe:ce:c0:0f:dc:a9:ae:43:99:34:c5:2d:6a:
bd:e2:54:c7:f4:c1:6e:fa:dd:b3:ad:ba:d8:1e:f2:
18:0f:79:14:03:3c:1c:5e:01:b5:ff:f6:a9:1a:e7:
48:03:ae:d9:28:67:97:4d:f3:a8:1f:11:ef:2d:65:
d6:c5:bd:c4:67:a1:21:1f:83:03:e3:03:c8:26:af:
b0:99:6c:90:89:26:c0:fc:19:b7:6a:82:c0:8f:dd:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C2:D5:00:A3:DF:D7:C6:8C:0E:53:41:8F:3E:46:33:36:B8:AF:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83113B0E4D7F11EF9AFB4EBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bd:f9:b3:36:dd:40:62:21:7a:fc:f8:d6:46:01:35:62:d1:
34:a2:71:79:a0:cc:b2:b9:8a:50:44:95:cc:b4:13:c6:de:aa:
b2:d8:14:f0:b0:69:0d:cb:21:89:61:12:de:2d:4d:fb:a9:84:
3f:93:33:21:3f:48:cd:e1:38:36:14:6a:97:2e:47:f7:64:40:
04:7a:48:5b:63:45:97:d7:12:01:43:7f:7a:c5:93:ad:eb:79:
f9:4f:aa:7b:03:05:75:86:0e:32:48:a1:58:50:35:77:1f:aa:
e0:03:c3:02:0a:19:64:fe:59:fd:12:31:6c:56:74:d8:bf:31:
82:6e:84:71:27:09:11:13:a4:a4:42:1b:e6:8b:6d:9e:8b:76:
d0:9d:20:97:c3:55:b6:a1:97:65:18:ef:a4:3e:19:a4:65:cc:
fd:7e:4b:7b:60:0b:71:ce:0b:e6:7c:a2:87:97:bf:3f:a5:e0:
a2:e0:00:de:8c:95:0a:e1:f5:8f:99:92:de:fe:50:82:24:8f:
d0:a8:8b:d1:a1:a9:e3:01:d3:a1:7d:78:03:3e:b3:9d:b0:d1:
4c:a4:3c:a9:06:65:14:ca:cf:1c:91:d5:be:70:f5:50:ac:da:
79:ba:f9:e9:1a:3b:1d:59:d5:73:c9:0e:72:26:cc:80:81:69:
7b:24:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:20 2024 by rpki-client on console-ams.rpki-client.org