Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FA680AA4211EF8E1B5CB6762E951A.roa
File: 910FA680AA4211EF8E1B5CB6762E951A.roa (raw, json)
Hash identifier: r2Yn7NcUsjR90HXYv8LSUyKcx7iZ9ZXBfBX6bMwAu/A=
Subject key identifier: EA:75:C0:1C:E2:4F:C4:AC:C1:91:91:D3:65:3C:BE:BE:F6:C4:7E:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01123F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FA680AA4211EF8E1B5CB6762E951A.roa
Signing time: Sun 24 Nov 2024 09:00:35 +0000
ROA not before: Sun 24 Nov 2024 09:00:31 +0000
ROA not after: Thu 26 Dec 2024 09:00:31 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 Nov 2024 00:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70207 (0x1123f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 09:00:31 2024 GMT
Not After : Dec 26 09:00:31 2024 GMT
Subject: CN=6742eb33-a048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:2e:66:f1:00:bb:84:4f:c9:32:80:00:14:
84:96:8e:6a:72:ad:dc:d0:06:0c:1b:86:5d:ce:a8:
b7:63:f1:6f:58:cb:fa:6e:dd:86:b6:73:fa:58:e9:
0a:81:a2:a4:84:a1:b6:90:ed:7e:92:a6:ff:3b:e6:
bf:34:62:0b:07:43:f0:c4:77:7a:97:47:03:44:bf:
6f:fa:82:2d:84:03:58:dd:31:1b:b1:f0:11:de:70:
63:9d:39:97:97:8b:be:b6:de:f3:8a:3a:ad:86:8d:
ea:14:8d:ba:ab:d7:64:05:01:97:eb:a7:bf:8d:2e:
39:cc:62:f4:f1:4b:4d:af:e6:3e:20:85:5a:a6:6f:
d2:d6:2f:8d:1a:36:c7:69:47:ff:d3:f1:8b:e0:bc:
2d:cb:ed:d9:73:4a:7a:a2:96:fc:c8:01:d6:9c:09:
79:72:16:a3:82:f0:4d:af:e2:6c:89:d2:c0:38:8c:
17:38:8c:a6:c4:6c:ad:92:30:87:fa:4a:80:3d:dd:
3c:5d:9d:5d:26:43:84:f6:f3:e9:6c:13:98:f0:94:
1b:e8:02:01:46:7e:94:ed:85:f1:35:11:47:46:1a:
33:5e:3d:b4:90:0a:60:c5:5f:af:2d:54:2b:3d:5f:
45:5d:3b:73:c8:c0:f5:94:03:88:60:66:0b:b4:d1:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:C0:1C:E2:4F:C4:AC:C1:91:91:D3:65:3C:BE:BE:F6:C4:7E:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/910FA680AA4211EF8E1B5CB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:8e:f5:27:cb:4c:be:db:e7:88:fc:d9:dc:cc:11:10:a9:f2:
51:24:e9:9f:23:1f:b9:5f:4e:01:f7:58:54:a9:d8:24:41:2c:
04:2a:5c:f4:f4:e5:bc:2e:9e:98:72:29:cd:0d:d2:79:25:d9:
7b:5e:2a:24:68:03:77:fb:c8:7d:32:53:29:bb:97:dc:84:f4:
87:2b:6c:b7:e2:dc:f1:a7:08:38:40:06:79:c4:15:f6:da:4a:
f7:70:1f:99:6c:61:29:63:40:87:fc:a5:0d:6e:c4:00:88:00:
49:20:0b:84:89:fb:2a:5c:5a:d7:0b:3d:50:70:b9:8a:13:06:
fd:03:37:d2:0e:93:78:75:e6:34:59:2a:dd:4e:77:2b:db:1f:
b3:3c:7c:76:bf:84:7f:df:5c:2a:c8:6f:7b:c5:e4:eb:3f:33:
d4:9a:88:fe:2d:4f:da:4f:2c:ee:ea:6d:77:2f:cf:72:71:73:
d0:82:22:75:8e:d3:80:c9:a0:84:c6:6d:42:b9:b4:5d:00:80:
8a:9b:72:a2:72:0c:48:bb:d7:8b:84:e1:d1:23:22:ff:99:9a:
0a:6e:2b:38:ca:27:42:35:72:31:8d:f4:f2:8d:12:a1:0e:1d:
38:cd:89:fd:29:60:32:96:4c:45:01:21:d6:38:95:a7:b8:22:
76:1c:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:54:01 2024 by rpki-client on console-ams.rpki-client.org