Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EDEF0E4A8E111EF91CB8A7F762E951A.roa
File: 8EDEF0E4A8E111EF91CB8A7F762E951A.roa (raw, json)
Hash identifier: AnaMLCntFqVsg5k7biY9J1dAl3dQTjWw6swciMgUGAY=
Subject key identifier: 0E:3E:F5:96:E5:89:2E:BF:97:15:3D:47:19:FF:9E:77:C0:3E:6C:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EDEF0E4A8E111EF91CB8A7F762E951A.roa
Signing time: Fri 22 Nov 2024 14:53:39 +0000
ROA not before: Fri 22 Nov 2024 14:53:35 +0000
ROA not after: Tue 03 Dec 2024 14:53:35 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69785 (0x11099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:53:35 2024 GMT
Not After : Dec 3 14:53:35 2024 GMT
Subject: CN=67409af3-3094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:5b:81:b8:21:4f:f4:60:ed:bf:60:7f:ad:
1d:79:6e:aa:c4:7a:d7:e6:55:63:87:c6:92:27:7b:
9c:ce:d6:89:63:7a:f7:e8:a8:2b:ca:45:61:86:30:
ac:35:61:56:27:38:90:91:ba:7e:b1:7d:08:09:02:
b1:ce:dd:a1:ae:69:44:8e:fe:9a:08:65:b0:6e:b8:
3b:ca:a2:b2:1d:05:ee:b3:66:74:5f:0c:20:f2:7c:
98:bf:25:33:6e:1a:01:af:9a:ee:69:fa:68:a7:35:
94:b8:90:e6:e7:d4:b3:27:45:c5:40:58:f8:7d:96:
2b:30:32:bf:ab:08:73:9e:03:75:e6:b4:38:ae:62:
33:a9:58:e7:c8:7f:4e:c0:bc:34:19:a9:ec:45:16:
15:60:b4:26:26:4a:1f:6e:e8:56:91:64:fe:a5:8e:
02:a9:b0:73:70:f7:3e:90:16:8d:d7:35:89:e4:98:
70:0c:a6:a3:5b:33:c2:d3:23:40:c8:8f:84:63:ec:
98:37:f8:66:76:47:53:39:4a:f8:4d:0c:6b:1a:b4:
15:ad:61:40:46:85:f3:d8:82:bf:a1:fa:f7:0d:92:
90:c0:58:29:18:c5:8c:4d:f7:59:9a:50:d2:01:b3:
30:a7:0c:18:a9:12:3b:3b:f8:93:3a:89:ac:86:90:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:F5:96:E5:89:2E:BF:97:15:3D:47:19:FF:9E:77:C0:3E:6C:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EDEF0E4A8E111EF91CB8A7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
Signature Algorithm: sha256WithRSAEncryption
19:43:aa:2c:17:16:c7:9c:02:01:98:50:ad:f7:79:11:de:86:
ab:ea:a6:69:42:61:84:ed:15:11:b4:ac:f5:86:aa:78:5a:2b:
8b:87:ce:c8:7f:3d:8a:24:94:ef:55:76:3a:f6:10:6f:2f:cc:
a1:48:d7:8a:8c:26:cc:04:68:b5:8f:70:53:c6:35:12:25:ce:
73:1d:f9:18:47:0a:71:2b:fa:0e:7c:45:7a:8d:29:e4:a0:a4:
0e:d6:d2:93:5a:73:3d:a7:e3:7f:7a:bf:c7:51:b5:64:dd:41:
19:df:34:a2:60:51:1b:28:06:a1:16:a5:83:18:54:b4:74:3a:
82:c6:dd:12:c2:58:f0:44:0f:c1:d6:3f:a7:fc:c8:f0:f2:ba:
7c:b5:5b:00:a1:00:21:5c:87:50:08:3d:d8:07:ac:84:49:d4:
54:6e:90:f8:69:4c:29:fc:41:37:31:9c:9d:e6:07:36:57:ce:
f3:1f:8e:e4:3f:74:6f:76:25:72:79:46:ec:e0:2a:e3:71:59:
fc:3d:71:0c:13:32:80:70:e5:3a:ed:b6:96:41:66:cf:1e:76:
8a:67:55:ff:d0:1f:87:17:79:6f:52:fd:ea:c2:af:b6:97:42:
d7:15:80:04:bc:df:9c:20:b9:c0:71:e2:d7:55:56:6e:6a:2f:
00:67:46:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:23 2024 by rpki-client on console-ams.rpki-client.org