Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/886D3E44A27111EFB136727D762E951A.roa
File: 886D3E44A27111EFB136727D762E951A.roa (raw, json)
Hash identifier: 0HqUhqOq4lVQPgxKX/AGc83RvXEkygvx4ovREIzyKg0=
Subject key identifier: 29:8F:F3:EA:59:DB:E4:AA:91:7C:D0:0F:EA:9C:F5:5C:E7:2B:42:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/886D3E44A27111EFB136727D762E951A.roa
Signing time: Thu 14 Nov 2024 10:16:38 +0000
ROA not before: Thu 14 Nov 2024 10:16:34 +0000
ROA not after: Sun 24 Nov 2024 10:16:34 +0000
asID: 139880
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68898 (0x10d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 10:16:34 2024 GMT
Not After : Nov 24 10:16:34 2024 GMT
Subject: CN=6735ce05-6e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:e3:61:d4:68:a4:cf:fa:b9:b9:23:2b:11:
10:80:98:b8:8a:ad:1e:63:e0:02:f6:e7:ea:68:0b:
30:99:03:c8:1c:70:ec:59:ba:47:f5:a4:9a:8c:76:
24:8f:07:4d:b8:d2:18:53:5e:82:bf:1c:f5:90:18:
0c:ea:87:1a:bb:87:df:57:b4:e9:6c:01:37:c7:99:
b6:6d:87:5a:df:6f:ba:c7:51:54:03:cf:04:bd:2b:
6a:30:15:2c:9c:5f:8c:de:13:17:0d:e2:d9:f0:2f:
8a:d9:84:92:0e:ca:48:76:00:e2:0c:e5:a8:80:f3:
d7:81:ad:48:cb:98:2e:d8:10:04:d1:b9:46:20:e6:
60:2f:a6:ec:48:43:b7:d0:c4:72:e6:25:9e:42:0c:
4c:ec:09:d6:49:25:71:93:a4:76:05:72:4a:94:f6:
c8:ed:9c:78:bd:dc:ff:7a:4c:23:22:d9:3e:9a:22:
2d:5c:cd:28:99:61:a8:a4:ba:05:6b:a1:69:4d:d5:
91:3d:cc:2e:ac:78:8b:97:40:e9:e5:8f:89:14:22:
12:9a:dc:f8:6e:cc:ae:2c:95:6c:9d:d1:92:ae:f7:
8f:d7:b5:3c:5e:b5:6a:00:7d:47:d1:0c:6a:ff:a0:
d1:58:be:b5:26:55:09:d2:e8:8c:dd:68:92:b7:3f:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:F3:EA:59:DB:E4:AA:91:7C:D0:0F:EA:9C:F5:5C:E7:2B:42:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/886D3E44A27111EFB136727D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9c:8b:93:d9:3d:ed:e5:de:74:22:e0:02:41:1f:f2:45:0b:9e:
9f:b3:eb:21:38:6d:6a:3d:28:8e:ce:a6:a6:7c:6a:72:9b:4d:
3b:81:21:0d:b0:36:c0:f9:2d:6c:33:4f:1e:3d:26:21:8c:34:
08:f3:03:ea:ad:9e:6e:b9:ec:e4:16:ac:5a:55:17:ae:5d:79:
0d:c5:71:49:b7:2c:1e:ae:40:8c:1e:ef:59:30:85:b8:67:a0:
b4:a8:15:6a:58:ff:96:0f:58:96:9e:72:b8:f3:a5:61:42:14:
a8:e9:09:bf:b0:1c:69:4c:37:51:8e:1d:b8:70:ea:df:6b:aa:
74:d3:ba:e1:68:d9:ef:1f:72:6f:78:10:41:c9:0a:94:8c:fb:
01:e0:a8:32:b5:b9:70:1c:0a:5b:8e:8b:62:7f:82:bf:7b:5e:
72:10:f7:e1:9e:29:26:4a:ae:52:a6:9a:b0:da:84:07:c3:15:
ae:c0:ba:6f:8f:1f:0f:3d:85:c7:7f:46:8c:4f:9f:70:4a:0d:
5e:28:8c:e0:e4:de:a9:96:a1:e2:b8:ec:9f:47:fd:4b:95:f2:
6b:b4:31:b0:12:f1:c7:1b:6c:bb:0a:9d:3e:a1:ab:a2:fb:28:
3c:d7:5b:b5:f8:2b:e4:fa:9b:1b:4c:c4:e6:84:1c:1d:c1:ac:
e9:a5:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:32 2024 by rpki-client on console-ams.rpki-client.org