Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9165BE12A26311EFA114D1A5762E951A.roa
File: 9165BE12A26311EFA114D1A5762E951A.roa (raw, json)
Hash identifier: p6Yajm3V0UVYbSt3yZN9RAawafQI0diWjsTk/9bAe0k=
Subject key identifier: ED:48:7C:88:57:93:AA:CE:64:D6:8C:DA:F2:0D:7A:FE:C2:E4:12:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9165BE12A26311EFA114D1A5762E951A.roa
Signing time: Thu 14 Nov 2024 08:36:40 +0000
ROA not before: Thu 14 Nov 2024 08:36:36 +0000
ROA not after: Fri 13 Dec 2024 08:36:36 +0000
asID: 138915
IP address blocks: 154.206.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68862 (0x10cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:36:36 2024 GMT
Not After : Dec 13 08:36:36 2024 GMT
Subject: CN=6735b698-c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:e2:18:df:e9:52:45:d2:37:2f:aa:6b:f0:
1b:f1:dd:e8:a0:3a:e5:5a:5f:c6:ff:8c:58:b5:d7:
e2:0c:8d:22:c4:f5:34:c3:a7:8c:c9:61:af:6c:ad:
df:13:72:34:2e:5e:8e:6a:cb:a8:8e:9b:16:6a:3c:
47:4a:b9:27:81:0a:16:a8:7b:f9:cc:ce:ff:32:a1:
37:92:40:b5:bb:78:00:44:8f:09:29:66:5f:1f:76:
6c:f3:62:f5:a9:00:2f:dd:37:34:33:75:c9:5f:45:
15:7e:f0:6f:ea:66:79:f9:14:2c:a8:b6:98:1e:d9:
25:14:3b:1f:ff:f1:45:ad:46:0c:24:e8:09:1b:e7:
d0:a8:24:4b:68:ce:63:89:13:24:e8:1d:76:e8:83:
1b:36:09:36:16:fe:3a:74:52:dd:d4:27:b7:86:fc:
3c:6f:e7:24:14:df:b5:ae:26:d8:c5:46:59:fc:da:
5a:67:90:be:d4:c5:6a:3b:cf:65:2e:da:79:e5:0d:
1d:6a:63:a7:3d:a9:00:70:e8:f8:34:ba:9d:56:ea:
e7:2e:75:5d:be:59:ee:f8:0c:c0:e1:97:0e:2a:36:
7e:56:c0:73:f2:d8:38:34:7b:6e:6e:84:34:98:cc:
03:1c:8b:9c:40:ac:1c:f8:20:88:3a:04:44:ee:12:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:7C:88:57:93:AA:CE:64:D6:8C:DA:F2:0D:7A:FE:C2:E4:12:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9165BE12A26311EFA114D1A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
be:54:dc:45:71:42:b4:a8:52:65:88:02:47:70:f2:9e:7f:29:
11:38:2b:52:5c:c5:2a:9e:87:21:ea:46:53:36:8a:c2:a1:66:
f2:b4:d4:b0:00:ae:0c:4c:6d:6b:60:e0:c5:2c:70:0b:c1:b1:
84:d4:13:53:25:6e:fe:1c:b5:20:76:7f:47:ca:e4:9c:dc:d6:
6e:a2:80:71:bd:f7:8f:a4:73:76:8d:70:74:81:a9:61:68:b1:
03:ef:91:75:42:1d:51:f3:5b:ea:d8:aa:52:df:07:70:71:4e:
5a:1a:df:4a:c2:3e:f8:bb:c8:95:a9:43:34:3d:43:0b:d2:bd:
bf:b8:1d:98:36:c6:d8:88:3d:80:8e:77:53:a3:4c:e9:00:5c:
11:67:d3:31:87:dd:4c:05:54:1f:f2:b6:41:91:f4:f4:57:6d:
7a:b1:5c:a2:e2:a3:48:36:35:93:d9:92:26:c8:62:20:eb:e8:
a6:b7:9b:d9:54:2c:48:94:01:c0:16:01:bc:f9:8b:1c:c9:5e:
4a:a3:b6:62:90:5b:39:ee:b7:7a:9f:29:b8:9c:af:f5:79:49:
82:a4:12:9d:36:c4:20:4a:8b:9f:91:d4:dc:93:57:99:05:18:
6e:3c:55:f5:09:ea:3a:aa:52:02:80:32:31:ec:10:08:77:6b:
ce:70:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:23 2024 by rpki-client on console-ams.rpki-client.org