Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E92D520A64C11EF8FFE9946762E951A.roa
File: 8E92D520A64C11EF8FFE9946762E951A.roa (raw, json)
Hash identifier: a/c0JNj2uKDRqgPL8u8k4SlX0ORoUECH1Kp50m/Xcr0=
Subject key identifier: EF:7A:15:03:F6:F1:8B:AE:B5:1C:6C:9B:DA:BD:D5:3A:54:CA:3D:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E92D520A64C11EF8FFE9946762E951A.roa
Signing time: Tue 19 Nov 2024 08:02:01 +0000
ROA not before: Tue 19 Nov 2024 08:01:57 +0000
ROA not after: Sun 15 Dec 2024 08:01:57 +0000
asID: 214497
IP address blocks: 154.213.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69384 (0x10f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:01:57 2024 GMT
Not After : Dec 15 08:01:57 2024 GMT
Subject: CN=673c45f9-a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:ee:cd:81:dd:e1:45:01:40:f4:ae:6b:f4:
c2:4f:15:a8:5b:0a:37:d9:2c:a2:d9:00:87:ce:cd:
85:bf:aa:a4:cc:ad:77:23:f1:f8:b0:f9:e9:bf:29:
ba:5a:4c:de:13:db:b7:b7:8d:5c:b2:7f:58:84:7a:
cb:1c:6d:37:8f:a8:ed:60:9b:82:ed:91:90:b2:4d:
58:66:e0:ac:c2:fd:a2:5b:2c:e9:f2:fa:60:08:e0:
2f:97:87:23:d2:87:56:8c:af:b2:66:b9:0f:b1:e4:
64:95:f5:8e:2c:a8:6b:e8:f6:89:8d:d1:0f:8f:19:
de:0a:3f:9a:a3:5f:7d:9d:61:63:8e:8b:82:b7:56:
90:56:36:3d:5b:05:82:5d:98:60:4e:e6:57:01:5d:
6a:8f:2a:71:8e:5a:38:f0:a3:dc:62:b9:96:a5:92:
d4:ac:08:84:0d:e7:4a:c7:66:09:f2:b8:4e:2f:31:
8e:98:df:35:6a:c8:f5:70:49:52:0b:97:64:45:63:
23:f9:49:cd:14:7a:23:e8:69:84:d8:42:ef:b9:3d:
81:64:5c:1e:62:7e:04:7a:d2:99:8d:2b:56:e5:4d:
53:bd:f5:06:aa:96:26:34:ba:8d:0f:43:b7:c1:c7:
4a:c1:ca:21:1b:08:81:fd:f7:4a:09:7c:d8:f3:38:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:15:03:F6:F1:8B:AE:B5:1C:6C:9B:DA:BD:D5:3A:54:CA:3D:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E92D520A64C11EF8FFE9946762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fc:06:01:2d:bb:05:bb:59:01:cb:8b:df:45:f4:aa:52:27:
f4:46:57:e9:a5:7b:cb:63:7a:8f:a6:77:ab:77:8b:09:ff:db:
6e:b7:54:5c:4a:1e:72:dd:9d:9a:eb:54:0a:7a:e7:b2:6e:60:
ee:92:c0:c0:f3:78:37:3b:c6:bb:1a:d4:00:b1:2d:cd:26:6a:
30:f5:7b:23:5b:90:69:72:ed:f2:fd:15:cc:5e:9a:4e:ff:68:
bf:da:df:12:c9:88:cc:aa:bb:89:31:0a:77:85:86:af:68:75:
15:ea:55:ba:fc:59:f1:a6:de:6c:c8:0d:84:42:c7:ea:2c:2a:
a9:e3:2f:be:2a:f0:18:4f:6f:e4:d2:58:ef:91:c9:da:8d:e6:
22:81:a7:f0:1f:f1:73:84:ce:16:af:fa:3a:75:be:a1:4a:fb:
d0:e3:02:e3:0a:15:2e:96:32:ce:dc:14:f4:2b:4a:60:43:77:
ff:81:76:cf:8e:9e:ee:26:b0:24:0b:fe:00:57:2a:1a:5c:e0:
85:84:4d:b8:be:7e:29:3f:74:3e:90:b8:2d:dc:55:41:97:d2:
e7:d1:f8:fd:a8:35:e8:81:2f:7e:9b:cf:7c:b9:70:84:b7:6c:
b1:bb:8c:98:9a:9d:6b:4b:f9:84:68:5b:a7:ba:56:c8:1d:4b:
4f:8b:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:23 2024 by rpki-client on console-ams.rpki-client.org