Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1B5E06A73B11EF8E84A79F762E951A.roa
File: 8E1B5E06A73B11EF8E84A79F762E951A.roa (raw, json)
Hash identifier: k342dj32AdL8YfZiaT6dc7QiQ/9cl0clu4YtJUpwFSc=
Subject key identifier: 01:69:1D:AF:0B:74:0E:92:12:F9:01:55:01:7A:2D:53:6F:9C:B5:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1B5E06A73B11EF8E84A79F762E951A.roa
Signing time: Wed 20 Nov 2024 12:32:50 +0000
ROA not before: Wed 20 Nov 2024 12:32:46 +0000
ROA not after: Sat 30 Nov 2024 12:32:46 +0000
asID: 139471
IP address blocks: 154.215.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69537 (0x10fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:32:46 2024 GMT
Not After : Nov 30 12:32:46 2024 GMT
Subject: CN=673dd6f2-4d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:53:a8:97:c1:bf:3e:89:0e:42:69:d3:3f:68:
85:f1:94:1f:d0:52:a3:54:4f:86:38:17:7c:2e:8c:
2e:d8:7c:6f:c9:59:06:bf:fb:eb:35:c6:8f:b5:43:
ed:ad:94:ff:7b:e6:94:24:02:c9:96:e1:6b:a9:d5:
b9:9d:8d:ad:d1:38:a0:8d:b2:1c:81:81:84:fe:f7:
85:77:db:5a:34:7e:d9:f5:94:56:aa:59:3c:b2:33:
ca:66:2b:d2:92:f5:9f:43:db:0b:63:c4:f2:8e:f5:
21:74:86:fe:48:03:9c:15:6f:c0:1e:e7:85:25:59:
35:8f:79:d5:24:0f:39:bd:ee:d3:6d:62:ae:f5:d6:
e8:fd:7a:0e:9e:ff:36:46:f1:67:53:0a:d2:76:f7:
8b:3d:b1:4a:91:41:63:d9:1e:07:86:6e:70:2a:6d:
3b:ec:ed:8e:8e:78:26:fa:f5:39:94:71:f4:7b:99:
f4:b2:f8:65:b7:c1:7b:da:37:0e:c1:57:f7:84:b3:
53:7c:8a:c3:11:c4:b6:42:ad:6a:f3:d8:bd:b1:47:
3f:61:ea:11:49:aa:e4:f0:e1:30:f7:e1:70:d7:16:
b9:aa:09:7a:cd:aa:9f:ff:7d:96:5c:c7:5c:57:68:
6b:60:82:e2:b2:9c:ce:da:41:6f:ed:6f:36:cc:ee:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:1D:AF:0B:74:0E:92:12:F9:01:55:01:7A:2D:53:6F:9C:B5:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E1B5E06A73B11EF8E84A79F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:56:33:a2:5a:21:1b:20:03:d7:72:67:54:90:43:7c:b1:03:
71:5c:ef:49:40:af:90:ac:09:34:d4:87:12:93:b5:8f:c3:e6:
98:0e:bd:6c:5b:08:ef:5b:99:5a:36:8c:43:c4:e9:be:8e:88:
a8:66:32:b8:47:0f:3f:88:a3:cf:ca:51:49:c0:0b:84:ad:b8:
bd:3c:08:05:f2:f7:db:64:2e:35:9c:8d:09:9c:a4:cf:bf:27:
14:37:2c:93:56:91:13:22:b7:9a:d9:f9:dc:b2:67:4f:1f:c1:
73:fc:df:de:f8:7c:e4:11:2c:15:fc:12:f6:a5:2a:70:a0:78:
17:27:7a:d2:95:d6:fb:c4:96:f2:6f:7e:60:fc:33:b7:21:61:
9d:47:a3:83:bf:b6:05:5c:e4:ae:b4:d0:2f:49:d4:dd:b3:96:
db:28:61:3d:0b:cb:5d:26:da:c7:0f:0e:a9:dc:86:25:64:2b:
86:4c:9c:75:ec:c7:4d:fd:56:74:49:f9:9c:af:b7:ec:cd:70:
e3:3d:6a:51:fd:54:52:78:c2:48:fe:21:67:3b:ee:ca:07:dd:
8a:ac:4d:54:90:94:58:d8:88:c3:b9:74:99:8c:d5:22:ab:cf:
1b:b9:bf:36:6a:9f:43:5f:06:f2:6e:87:0f:13:f9:76:2f:c3:
3a:52:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:34 2024 by rpki-client on console-ams.rpki-client.org