Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85695A9232BA11EF8882CFA8762E951A.roa
File: 85695A9232BA11EF8882CFA8762E951A.roa (raw, json)
Hash identifier: QGl1a3HO/sTLPegcGNOPNNdScdH6NNos19EQJ970B2Y=
Subject key identifier: EB:04:52:E8:E1:42:08:AE:B2:9D:C1:72:46:4F:24:9F:73:FC:EE:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C64D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85695A9232BA11EF8882CFA8762E951A.roa
Signing time: Tue 25 Jun 2024 06:16:55 +0000
ROA not before: Tue 25 Jun 2024 06:16:52 +0000
ROA not after: Fri 03 Jan 2025 06:16:52 +0000
asID: 40065
IP address blocks: 154.212.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50765 (0xc64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:16:52 2024 GMT
Not After : Jan 3 06:16:52 2025 GMT
Subject: CN=667a60d7-d14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:37:8c:5a:fd:0e:b5:2e:27:9b:fe:5e:38:
8d:63:2d:dd:0a:54:6a:a7:45:82:83:e5:84:59:00:
d5:27:96:2e:55:1b:8f:e8:12:f3:9a:4b:f0:c0:8b:
d7:9c:e6:eb:d0:e9:a7:53:84:2d:f7:c0:9c:6c:fb:
48:89:c0:47:a2:f3:29:8e:14:bc:3f:db:9f:78:8d:
be:5b:4f:2e:a0:d5:b4:d6:b0:85:67:20:14:c8:a6:
bb:52:10:3e:8a:48:78:dd:fd:1a:e5:1a:7d:83:f9:
fc:ef:fa:65:21:d9:b1:a9:c0:16:96:0b:c9:a5:e2:
58:4c:07:f0:4d:55:a9:21:a1:bd:59:3f:34:e7:99:
dd:b2:22:19:c5:52:66:f6:86:6d:b4:2d:c2:89:20:
35:98:58:2b:36:4e:b5:a1:8b:c6:9f:a8:fd:b0:b0:
cd:26:82:09:01:b7:78:20:d0:be:79:77:7a:19:f9:
14:2e:30:60:ee:9f:28:dd:94:2d:00:f8:fc:66:28:
d7:0a:5c:44:07:83:49:83:69:2d:57:21:42:f8:9d:
5e:c0:b5:45:e8:fd:2d:4f:63:da:bd:87:2f:35:b2:
5c:2b:b6:3b:6f:b1:83:9e:a5:2e:70:20:d2:e5:a2:
da:66:5b:ef:56:41:b1:2e:d2:33:52:b8:f8:af:87:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:52:E8:E1:42:08:AE:B2:9D:C1:72:46:4F:24:9F:73:FC:EE:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85695A9232BA11EF8882CFA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.2.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b1:e2:8f:73:db:61:9f:58:00:ba:f6:ad:34:ec:b8:09:df:
80:10:3d:ab:a8:ff:2a:15:20:50:3a:28:f2:ca:0e:bc:e1:fd:
86:d9:82:39:1c:02:3e:15:bf:a3:d8:7f:8b:81:0b:c1:57:95:
7e:d6:fa:30:a2:3c:e6:f9:b9:9a:34:4a:cc:1d:36:99:a3:b4:
5a:e2:d8:f2:a6:b5:67:e9:06:eb:6c:cb:55:b7:2d:d4:e3:8b:
81:d9:e3:8b:28:e2:3c:1a:5f:dc:7d:48:3e:60:26:f2:0f:58:
a9:2e:22:93:45:05:a6:56:d9:2c:1b:b6:bb:6a:f4:50:e7:49:
87:13:42:2f:1f:d6:f0:67:c1:20:74:d0:71:3f:b5:f0:8b:2c:
3e:5b:44:cb:37:8a:26:7e:21:12:47:09:db:a8:72:9c:81:d2:
31:91:c4:45:97:97:64:ac:c0:7d:bb:b3:fc:66:25:af:fe:9e:
c1:9e:6f:9c:ba:c7:13:96:12:95:d0:d4:7e:4c:88:01:0e:46:
63:29:5f:30:c1:ad:2a:4f:3f:db:24:18:2a:09:d4:8d:14:7c:
62:b4:36:65:d4:65:fb:aa:67:63:1b:7d:49:83:6c:28:74:55:
22:c4:0d:aa:82:b6:07:01:84:3b:1b:dc:08:1b:65:fe:c0:a3:
87:ac:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:21 2024 by rpki-client on console-ams.rpki-client.org