Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883E2A7EA44B11EFBC6CD2A4762E951A.roa
File: 883E2A7EA44B11EFBC6CD2A4762E951A.roa (raw, json)
Hash identifier: l86kCez66EFSYkG9JIgBQctQtwrqHT+ggC3wYTp60Gw=
Subject key identifier: 8C:B0:EB:7B:EE:BA:AF:AB:C2:32:C3:10:DE:F2:8E:14:44:F5:BD:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883E2A7EA44B11EFBC6CD2A4762E951A.roa
Signing time: Sat 16 Nov 2024 18:49:39 +0000
ROA not before: Sat 16 Nov 2024 18:49:35 +0000
ROA not after: Mon 25 Nov 2024 18:49:35 +0000
asID: 5650
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69107 (0x10df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:49:35 2024 GMT
Not After : Nov 25 18:49:35 2024 GMT
Subject: CN=6738e943-564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:ed:7e:be:0b:3a:36:b9:62:8f:e8:2e:2a:
72:15:28:23:69:4a:38:d4:0c:2f:13:1e:eb:c7:fb:
1a:d4:d3:66:dc:4d:5d:09:ba:65:33:51:11:0a:d9:
e2:a8:85:16:ca:23:bd:c4:99:74:7a:a0:06:d3:5b:
7a:e1:6d:d9:37:bd:46:8f:69:43:d2:7c:88:16:aa:
87:ef:4c:7c:64:bd:6e:ee:4e:41:ee:65:ea:34:3c:
de:2f:0f:bc:10:2f:fa:75:4a:6a:c5:c4:19:78:20:
18:0b:e5:11:46:e8:55:f3:74:e3:85:90:98:5a:83:
19:98:89:95:5b:05:4e:c3:d0:ab:6e:35:1d:37:5d:
f8:b5:f5:ed:d9:f3:8a:ca:e3:dc:af:22:be:77:7b:
d6:2d:2a:40:6e:83:81:60:cb:ab:3d:3b:fc:3e:ff:
ab:7b:fe:91:57:5e:df:7b:ce:2b:cf:f9:19:ea:b6:
cc:c6:00:4a:1a:ba:4d:79:71:1e:8f:7d:2e:f6:86:
dc:0c:14:15:01:33:95:bd:8d:39:4a:a3:fa:a0:c6:
9f:a8:07:ce:f5:7c:93:e7:20:85:7b:25:43:2d:e7:
a3:34:dd:cc:5f:25:7d:34:e0:ad:9f:2b:6e:4a:8d:
65:a3:f4:a7:d0:64:cc:7f:de:2a:80:ca:12:4d:4c:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B0:EB:7B:EE:BA:AF:AB:C2:32:C3:10:DE:F2:8E:14:44:F5:BD:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883E2A7EA44B11EFBC6CD2A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
53:5d:69:60:84:e9:79:ec:3d:27:bf:5e:78:e3:0e:c6:dd:6e:
19:44:ee:77:bf:3e:88:be:2d:83:a1:b0:53:4d:9e:07:40:53:
e8:34:31:9d:64:d2:8d:df:9b:f8:5d:43:fe:9d:9f:d8:80:2e:
fe:0e:2e:f5:a6:0c:f4:bf:c4:dd:f5:e9:0c:ac:5c:2f:ad:82:
50:f0:c2:96:ca:cc:03:ba:e5:da:d9:fc:2b:fb:c0:f5:17:8b:
2a:16:a5:09:73:db:04:bb:b6:d2:f5:15:35:74:4a:cd:18:f6:
86:8f:c3:a8:7c:0a:da:c3:4a:16:17:23:cc:c2:fa:38:1b:2a:
9d:71:d8:af:02:70:40:c7:d1:91:3b:cb:72:b4:e0:d0:e4:c2:
45:aa:23:17:62:93:8a:8b:87:25:9e:a9:7a:6b:b6:95:60:f4:
c3:fe:0f:2c:68:f0:8a:09:8e:8c:ca:b2:2d:19:d6:74:ca:44:
61:8c:ef:ee:5b:be:f8:95:03:71:70:41:e1:7b:bc:ff:09:47:
e5:a9:82:7b:81:c3:79:6d:3f:ec:35:91:0b:84:fe:bb:68:49:
c4:10:83:ca:72:89:13:12:26:ad:2c:bc:6d:fb:a7:3f:2d:33:
5f:b7:54:6d:2d:9a:11:cf:7e:bc:ca:ff:e4:90:0a:0b:90:05:
43:d5:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org