Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9C71BE6A6B11EFADE3AC9E762E951A.roa
File: 8A9C71BE6A6B11EFADE3AC9E762E951A.roa (raw, json)
Hash identifier: Dlx2Xr/hYGeJrn6mFYBGm0LYq9bPl8HGOf+dt3Xm22k=
Subject key identifier: FA:BF:D4:EB:24:A0:B4:32:6E:DF:AD:63:5F:E4:80:52:D8:83:74:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9C71BE6A6B11EFADE3AC9E762E951A.roa
Signing time: Wed 04 Sep 2024 03:12:39 +0000
ROA not before: Wed 04 Sep 2024 03:12:36 +0000
ROA not after: Mon 30 Dec 2024 03:12:36 +0000
asID: 17561
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59917 (0xea0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 03:12:36 2024 GMT
Not After : Dec 30 03:12:36 2024 GMT
Subject: CN=66d7d027-a94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:f7:ef:91:36:7a:85:72:9e:fa:67:4f:1a:
be:55:4d:38:55:c4:8a:22:15:21:5c:e4:44:69:6f:
29:0d:c3:3b:66:48:b7:64:68:91:14:bc:be:90:55:
e7:5a:df:1b:ae:eb:4f:e7:8b:53:ea:9c:7d:62:9d:
4d:03:24:06:8c:5f:60:d2:52:eb:32:65:1c:67:c7:
b1:a6:ae:b6:8a:f6:b8:43:38:98:5e:05:6d:89:e2:
25:dd:d9:9d:a0:a0:36:ff:ba:1f:6c:6f:8b:d8:f1:
64:32:a9:2a:0f:6c:17:8a:d5:e2:df:23:cf:8e:c3:
59:af:dc:a6:4a:61:4a:9c:69:e3:08:1a:e1:22:80:
89:1f:a4:eb:e3:f1:d2:ad:8f:cc:f3:83:d6:f0:3b:
19:30:b7:61:f1:c6:c1:0f:9e:00:31:0a:40:8d:ba:
f4:d5:c2:47:95:69:44:a6:d2:b2:09:f9:34:1b:18:
2f:b1:23:a0:87:3c:c6:e6:f2:a7:43:5c:52:3b:f6:
f7:fc:48:45:1d:09:ca:3a:34:28:a9:be:25:5d:7d:
6e:6a:ef:ae:aa:e9:cb:db:88:3f:f9:64:95:75:a0:
54:c6:8a:32:8e:90:9e:36:f5:1b:e8:4c:a6:e8:49:
97:26:06:0a:8c:45:02:92:25:17:6a:75:da:ce:e3:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:D4:EB:24:A0:B4:32:6E:DF:AD:63:5F:E4:80:52:D8:83:74:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A9C71BE6A6B11EFADE3AC9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:54:5c:c7:f5:1f:7a:fa:c1:2f:26:f8:17:21:e8:85:c2:c3:
dd:b4:af:9e:f0:64:60:f3:12:df:bb:fa:59:4c:a5:39:4c:24:
49:be:56:95:10:a5:c2:4b:81:f4:c7:42:63:9a:9c:85:bb:b4:
50:79:7b:7f:89:9e:9d:da:7c:d1:4e:ab:7b:6f:46:c6:ee:f5:
9f:05:9b:a9:bf:b9:a8:6b:56:ff:59:51:0c:ee:11:07:d9:16:
1d:6e:9b:57:8f:eb:84:7e:8b:a1:93:3a:6d:39:ca:5f:ce:c8:
ab:d9:53:33:77:c8:b4:2b:29:6c:f4:42:5a:aa:e4:8b:e8:52:
cd:4e:24:1b:ea:94:d3:dc:6f:fb:2a:20:92:96:a5:f3:d5:01:
a0:d9:07:f2:00:18:99:81:cb:48:63:fc:38:ca:f8:54:57:62:
06:0d:88:a5:94:e9:4d:f5:05:9c:17:3f:a2:83:43:86:a6:44:
b2:14:bd:03:77:ab:eb:60:81:fc:73:16:00:bb:5d:3d:02:22:
a0:19:f0:3d:3f:a1:6f:ca:ff:7b:d9:e5:45:cc:61:f4:63:63:
ce:2a:38:8c:9e:30:0d:bf:1f:0e:04:a1:b7:94:e5:46:8f:2d:
f4:a3:47:a9:53:e2:2a:40:29:80:e7:fd:92:ba:69:d7:df:15:
15:c1:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org