Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8536AC10A4BF11EFA3AAB089762E951A.roa
File: 8536AC10A4BF11EFA3AAB089762E951A.roa (raw, json)
Hash identifier: KulpWuIsgTlcod69GdFRkhMTR/3TwVmUNLuM9tENKFw=
Subject key identifier: 21:3A:39:43:FB:7D:EF:7B:71:83:9F:6C:B0:AA:7C:0A:67:E7:8D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8536AC10A4BF11EFA3AAB089762E951A.roa
Signing time: Sun 17 Nov 2024 08:39:55 +0000
ROA not before: Sun 17 Nov 2024 08:39:52 +0000
ROA not after: Wed 19 Nov 2025 08:39:52 +0000
asID: 9123
IP address blocks: 154.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69224 (0x10e68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 08:39:52 2024 GMT
Not After : Nov 19 08:39:52 2025 GMT
Subject: CN=6739abdb-30d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:82:0e:d4:17:35:b0:31:23:e9:06:cd:4f:
8f:9f:f2:6c:86:a2:be:c3:22:eb:1e:11:71:a8:80:
4d:03:de:b7:0f:31:a1:38:72:cc:b6:4a:2f:14:dd:
a2:94:45:84:7f:09:7d:38:b5:1e:2f:09:46:b6:4d:
63:0c:64:62:e1:d6:1f:f0:65:01:38:76:f6:cf:e9:
c2:59:a2:e4:41:84:43:2e:fb:7c:45:69:98:a9:b8:
a7:f4:6f:2f:fa:d6:d7:2e:8c:22:47:c2:73:8d:c2:
30:b9:06:67:f0:4c:f8:7a:58:a2:a3:3a:f2:47:99:
1f:51:25:ad:0d:0e:9d:fd:a1:90:e6:a2:18:3b:87:
02:85:c9:d5:58:53:e4:27:8c:4f:87:a8:b5:52:45:
64:60:0b:c0:b2:58:36:81:8e:a6:1c:b3:47:46:8d:
76:02:f8:13:fb:08:2b:f5:1f:46:f2:27:38:c9:ef:
f5:79:f6:38:2a:f7:68:30:a5:90:09:8d:14:62:17:
99:f3:70:45:e8:aa:59:46:11:b2:87:78:c9:fe:bb:
74:ff:f5:70:bc:0a:6e:93:0d:a7:52:41:c7:ea:cc:
84:44:27:9b:a6:df:c9:ae:21:90:0d:0a:ee:f4:ae:
52:cf:53:fa:43:86:a2:0b:84:16:60:03:88:6c:52:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3A:39:43:FB:7D:EF:7B:71:83:9F:6C:B0:AA:7C:0A:67:E7:8D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8536AC10A4BF11EFA3AAB089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0a:3c:8a:2e:62:b3:9a:e6:e4:fa:d0:81:b2:ba:96:74:9c:
9e:a4:f3:b6:41:a7:6d:21:d2:43:13:36:23:14:b4:15:60:d5:
e3:9e:dd:cf:3b:34:ab:af:73:77:92:05:80:73:fe:ac:96:eb:
9b:af:aa:68:3f:95:c1:55:73:69:13:3a:39:de:49:93:b6:35:
c6:e8:0f:c6:29:96:91:4f:2f:92:38:42:d5:9b:ea:b8:f5:7d:
f7:43:fc:a7:9e:1d:63:5b:f4:35:9c:a8:a5:4d:50:8d:f5:29:
56:a3:9b:de:24:9c:f3:6d:16:1e:8f:06:7b:ab:ae:a5:51:26:
0d:27:1f:f6:4a:06:f7:b6:0c:74:4f:20:8a:c4:75:10:25:d2:
6d:aa:46:15:8c:97:cc:9a:6c:29:bc:bf:14:e2:cb:b8:c5:c0:
5f:a3:1a:32:8e:f8:1a:5c:12:25:cf:72:c4:82:26:a9:1f:67:
94:86:9b:79:5e:ae:c0:6a:f0:7c:1b:43:dc:bc:ae:7d:1c:be:
43:66:d2:cc:5c:67:e4:56:a3:e3:82:18:6a:17:d4:30:db:17:
d0:86:03:10:24:1d:70:ad:3f:b1:22:02:4a:ab:59:54:52:29:
3a:eb:91:55:8f:81:48:dd:ff:e9:79:a0:d0:08:a2:19:b7:76:
0b:79:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:32 2024 by rpki-client on console-ams.rpki-client.org