Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FD57F28AA4311EF9E3EC4BA762E951A.roa
File: 8FD57F28AA4311EF9E3EC4BA762E951A.roa (raw, json)
Hash identifier: 7y4qZgNlK7n230XuNA3O2aAXlh1eOjXS0V0FK9nXytI=
Subject key identifier: 5B:FF:81:34:B0:FE:F5:3F:C8:A4:A2:BB:E9:9E:84:CB:CB:50:28:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011249
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FD57F28AA4311EF9E3EC4BA762E951A.roa
Signing time: Sun 24 Nov 2024 09:07:42 +0000
ROA not before: Sun 24 Nov 2024 09:07:39 +0000
ROA not after: Thu 26 Dec 2024 09:07:39 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70217 (0x11249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 09:07:39 2024 GMT
Not After : Dec 26 09:07:39 2024 GMT
Subject: CN=6742ecde-dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:fa:75:34:f4:88:15:66:7b:55:df:35:de:
72:e7:bf:17:82:2e:dd:e5:15:98:0c:85:ca:e5:5d:
a0:21:b9:4a:a0:dc:97:86:af:62:90:75:1c:13:a6:
78:d1:64:41:1b:64:60:5d:1c:20:e0:6f:04:a7:d9:
91:d6:f6:3a:4d:80:fb:f0:34:69:2a:62:ff:53:69:
01:fa:f7:56:45:3d:03:d3:97:a4:2d:a2:c4:db:2e:
05:aa:29:59:fc:da:6a:88:90:d6:41:69:16:94:ab:
66:76:e8:2d:e1:fc:30:84:7f:66:d9:50:a8:26:39:
d3:22:c3:72:3b:99:f3:e5:de:87:70:5b:27:d0:41:
d4:1f:11:c9:95:98:d6:82:f9:3b:65:b6:0b:c1:fa:
ad:08:6e:0e:79:f3:35:c8:a8:35:ca:01:a0:25:9a:
8e:cb:98:ef:ae:8a:b5:ed:08:c6:cf:85:86:de:05:
16:f2:f5:87:51:65:36:68:dc:ac:19:22:45:93:79:
2e:83:f9:f5:e1:f8:13:96:f4:bb:08:10:6c:f7:14:
f5:1c:45:de:30:26:92:fc:47:82:c0:3f:12:de:67:
e4:37:c7:dd:4b:2b:c4:01:c8:1c:f9:8c:6d:82:bf:
aa:a7:d2:5a:c3:0a:e8:61:31:a9:e6:5d:0b:c3:bf:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:81:34:B0:FE:F5:3F:C8:A4:A2:BB:E9:9E:84:CB:CB:50:28:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FD57F28AA4311EF9E3EC4BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
71:6f:84:ac:82:1b:0b:ed:e0:da:6c:4f:91:36:a8:1e:2b:b8:
06:4c:64:f2:ad:41:8b:a0:94:cd:69:2a:2a:71:cf:60:26:b4:
a8:7a:94:8d:44:56:fe:bc:d3:ea:53:e6:fb:97:fe:f7:1b:fd:
22:46:91:d4:42:2f:6e:da:02:7a:e6:9f:35:28:61:5c:d8:fc:
bc:bc:67:ea:69:54:35:0b:96:81:1f:a4:1e:d8:29:09:77:32:
84:75:ba:c7:c8:82:b5:d8:53:96:01:3d:26:d1:6c:ee:df:49:
c0:a8:d7:29:94:1f:94:2b:97:03:85:f5:f2:5e:eb:8d:39:6c:
e9:f2:36:49:53:c7:a0:53:74:32:35:65:25:57:e5:a6:c6:dc:
31:1e:3a:2f:92:a2:c7:20:80:a7:f2:79:ae:18:f8:f3:67:7d:
09:5b:c0:9e:2f:9b:ca:0e:83:b3:98:20:a5:05:25:5a:fa:ed:
53:dc:02:84:89:31:9b:09:43:49:5b:95:d2:79:51:3d:67:2c:
75:91:ec:f2:35:06:9e:ad:5c:8e:46:4c:ed:cd:df:bf:e1:79:
7b:e0:7f:c7:ba:9d:fe:b6:c5:cb:ac:f0:07:55:c9:a0:7e:81:
eb:96:df:b9:72:37:43:1c:fe:70:20:e2:c6:51:64:62:f7:4b:
eb:73:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:43 2024 by rpki-client on console-ams.rpki-client.org