Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8C647A9B8111EF90EE7BA9762E951A.roa
File: 8B8C647A9B8111EF90EE7BA9762E951A.roa (raw, json)
Hash identifier: kmQVaxU1MttiW5uwy3d3NwvdHPGoXFrNEf9ax0eoGQI=
Subject key identifier: 93:44:B5:C2:95:8A:61:B6:01:85:DA:09:26:F9:5D:A2:D1:CF:40:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8C647A9B8111EF90EE7BA9762E951A.roa
Signing time: Tue 05 Nov 2024 14:23:37 +0000
ROA not before: Tue 05 Nov 2024 14:23:31 +0000
ROA not after: Mon 20 Jan 2025 14:23:31 +0000
asID: 135097
IP address blocks: 154.220.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67567 (0x107ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:23:31 2024 GMT
Not After : Jan 20 14:23:31 2025 GMT
Subject: CN=672a2a69-ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:9f:92:de:25:b9:6e:01:f6:24:a0:13:49:
9e:25:b0:00:9c:be:1b:0d:ca:7e:44:5c:14:a5:06:
a9:b8:e8:b8:a7:1b:6f:45:2f:5e:ad:7f:82:27:b6:
78:40:d1:03:60:94:a4:5a:74:be:31:bc:54:de:72:
a5:8e:f0:96:96:13:09:a3:78:9a:84:24:84:5b:e7:
46:eb:fb:d6:40:ab:61:7d:19:6a:5a:c0:67:3e:3b:
35:94:b8:d2:0d:2f:83:45:a4:69:1e:a3:88:f4:74:
c0:39:aa:2f:18:97:d8:91:1e:6d:1c:f8:6f:36:39:
37:14:2f:af:e9:f5:a8:52:3b:fe:de:2e:e1:d7:68:
d5:db:fb:dc:c9:b4:8e:78:00:06:ec:e2:28:b5:06:
e2:c4:ec:50:f1:81:21:0d:cc:a6:eb:c4:6f:eb:52:
c7:d8:98:e6:ef:55:ab:44:98:09:87:68:0e:99:f5:
4d:47:99:05:3d:0b:58:10:94:5c:95:59:60:9a:a7:
f9:9a:c5:3c:9d:a9:0b:51:03:00:56:cf:c7:33:d9:
d5:f5:bd:e3:2c:8d:36:05:77:8b:33:fd:c6:f8:ba:
bb:52:4a:9b:b0:30:c1:56:e8:07:07:9d:37:24:79:
c3:21:1d:be:74:77:72:1c:72:6b:de:61:8f:8c:9c:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:B5:C2:95:8A:61:B6:01:85:DA:09:26:F9:5D:A2:D1:CF:40:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B8C647A9B8111EF90EE7BA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:c6:bd:71:64:0b:63:c4:8e:fc:b1:78:8a:21:88:99:60:c6:
18:65:2d:bf:e5:fd:2b:32:9a:54:42:cd:e1:a2:21:37:a1:07:
8d:e9:b3:08:ac:c8:88:0f:bf:d7:c8:2c:a6:80:68:32:14:fd:
50:e8:f1:04:92:d5:ed:b8:52:6b:b3:00:ff:b7:e9:7d:16:8e:
b5:c8:d8:d5:dd:e2:a9:39:d8:9c:33:94:b6:a0:17:58:02:d3:
5f:8b:37:26:67:19:ac:e9:e3:7c:78:42:56:23:b0:8b:5f:cf:
46:39:d6:aa:de:b2:b8:47:1a:40:a8:1e:d8:25:17:fc:1a:b4:
24:9a:1a:62:c3:6f:94:f3:fa:5e:3a:8e:b3:8e:b6:62:55:b8:
73:57:28:e9:54:86:37:40:75:63:fd:29:12:58:86:33:87:9b:
76:be:3b:7a:e4:69:bd:2a:3f:7d:f1:7a:a5:41:00:13:9d:c3:
6a:e2:75:bd:d0:cf:3d:11:87:cc:8f:d9:bb:64:98:f6:ff:a2:
ff:a0:d6:7f:be:e0:8b:f1:43:12:55:a5:1b:fb:89:77:5d:61:
04:ad:c2:1e:a5:72:fc:61:8b:3c:95:74:9b:2c:6b:b0:c6:88:
16:86:14:26:44:83:ff:90:ca:69:f0:6f:d2:75:7e:53:38:f6:
4e:21:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org