Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1684B0A8D711EFB424F440762E951A.roa
File: 8E1684B0A8D711EFB424F440762E951A.roa (raw, json)
Hash identifier: J+ZkSSrmPRKiS+Va54ArfEBLn3u9aBNct/A2Kd8aGUk=
Subject key identifier: 58:66:2B:2A:FB:8A:F8:DC:01:CF:C0:CB:D1:49:4E:78:D3:8C:95:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1684B0A8D711EFB424F440762E951A.roa
Signing time: Fri 22 Nov 2024 13:42:03 +0000
ROA not before: Fri 22 Nov 2024 13:41:59 +0000
ROA not after: Sun 01 Dec 2024 13:41:59 +0000
asID: 55933
IP address blocks: 154.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69683 (0x11033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:41:59 2024 GMT
Not After : Dec 1 13:41:59 2024 GMT
Subject: CN=67408a2b-81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:c9:33:64:3a:4d:37:e8:a0:64:be:6a:b4:
c3:66:a2:35:fa:91:75:2b:7e:29:c9:ed:c9:37:d4:
31:e5:d0:e5:35:1f:80:46:d7:1d:03:dd:e8:fb:f9:
32:74:cf:24:82:f8:60:bf:2f:e8:e2:7b:7a:6e:63:
49:32:30:3b:8a:34:bd:a6:f5:86:53:7b:10:c9:d3:
87:03:b8:5e:28:2b:f1:a7:48:a1:31:8e:cf:6b:7c:
20:bc:a6:48:f8:72:e1:9d:e8:5d:1c:45:46:61:77:
92:2c:af:f0:8b:4a:85:b2:51:e2:a8:0a:55:77:25:
68:bc:c4:e6:37:11:39:d3:cb:2e:82:85:a0:a5:2f:
04:b5:a9:1c:2d:42:fd:07:6c:ed:4c:06:e1:7a:2e:
91:9e:07:2e:a4:2c:9e:d9:28:cb:16:ea:9f:c6:1f:
92:d7:7b:34:65:5e:fd:b2:67:26:e4:bd:cc:c4:cc:
1d:77:c0:4e:8c:71:da:c0:e4:d4:d5:18:8e:bf:62:
04:74:4e:47:1e:d9:22:21:09:d2:e6:a7:b7:e9:16:
17:b1:8f:ed:c7:ea:52:a8:42:e0:e3:e7:f8:1c:56:
a4:6b:5f:8f:20:1e:89:46:f0:aa:3c:85:4c:a8:e0:
cb:64:0e:75:d1:77:52:bd:25:12:02:62:83:f2:70:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:66:2B:2A:FB:8A:F8:DC:01:CF:C0:CB:D1:49:4E:78:D3:8C:95:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1684B0A8D711EFB424F440762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:3e:e2:3b:ae:4e:ab:86:57:d2:e8:8e:37:e8:5f:d6:74:e5:
39:07:d8:47:2f:3c:d4:d2:d0:4a:37:c9:53:e7:ef:3c:ba:08:
97:2a:03:4e:85:0d:a7:c3:10:1a:95:f7:8e:30:fa:23:12:a0:
68:a6:bd:f5:4d:cd:45:c2:46:d6:7d:9d:27:fc:1e:03:8b:f3:
bf:99:47:0e:77:dd:99:a3:c1:f5:37:02:cf:30:1d:44:62:e5:
38:7e:f2:22:70:a2:bb:fd:1c:04:9c:b9:40:3c:c1:18:88:47:
cc:a7:ce:bd:e8:e8:82:36:13:30:d6:36:2e:93:3f:5a:91:0d:
0c:0b:50:06:66:97:f9:af:68:e2:07:54:9f:1a:70:20:ec:67:
b0:52:86:e7:24:d8:7b:19:a1:c8:73:05:ba:b9:4e:0e:3c:c2:
5a:24:51:a4:a5:c8:45:17:6d:d9:c5:e7:38:76:a3:b5:f5:13:
48:e2:94:00:17:fe:e3:f9:cd:e6:6b:74:ff:29:98:4f:3f:72:
66:bf:c5:eb:94:95:ea:49:d7:92:f4:d8:bc:9a:6a:3c:13:d9:
7b:16:60:e1:e3:a0:76:dc:52:44:a6:ec:be:b6:1d:ac:81:64:
13:48:fb:fa:c3:d5:29:f1:3a:c7:6e:16:9e:18:9c:2b:e6:8d:
f9:22:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:23 2024 by rpki-client on console-ams.rpki-client.org