Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945889529C1D11EF8AC48888762E951A.roa
File: 945889529C1D11EF8AC48888762E951A.roa (raw, json)
Hash identifier: dorbPHEdjitUeFZpU1/afwMAfsPHep+Itq7O/jN1tk8=
Subject key identifier: A2:71:DA:BC:53:27:72:B7:7E:D3:CE:17:7D:6D:3A:AF:03:B9:2E:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010876
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945889529C1D11EF8AC48888762E951A.roa
Signing time: Wed 06 Nov 2024 09:00:33 +0000
ROA not before: Wed 06 Nov 2024 09:00:29 +0000
ROA not after: Sun 07 Dec 2025 09:00:29 +0000
asID: 46071
IP address blocks: 154.84.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67702 (0x10876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 09:00:29 2024 GMT
Not After : Dec 7 09:00:29 2025 GMT
Subject: CN=672b3031-f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:5c:e1:57:5c:96:39:95:b8:ae:8d:56:29:
20:96:6e:f1:4f:ac:79:98:60:71:9a:16:10:91:b2:
fd:7f:eb:67:7a:6d:cf:3a:0b:4e:9d:24:37:75:95:
f9:f2:95:c8:85:58:33:ac:57:6e:9d:49:3c:13:21:
fc:6c:36:3d:12:0e:f5:77:0c:8d:e3:e4:4f:8d:16:
6d:07:db:de:56:a2:55:a6:d4:16:91:51:f7:17:d7:
a0:43:a4:3d:4f:11:ff:3b:5a:3e:4c:98:0a:58:de:
d5:0f:be:24:ec:21:12:5f:56:6c:fd:01:e5:01:f9:
30:06:c9:f6:75:71:f0:f4:20:d4:28:6a:e0:dc:bf:
2d:de:c3:5e:db:ed:d5:27:50:2d:a0:06:73:93:7a:
4c:bf:3b:eb:64:6d:f8:18:b0:25:2f:12:f3:7c:da:
b6:61:78:b0:bf:13:4f:12:f5:e4:80:50:4a:a5:5d:
16:43:51:10:95:c6:98:18:f8:c4:3d:29:bc:93:4b:
df:7f:bb:c3:79:16:19:69:87:39:92:b6:51:6a:19:
2b:39:4a:85:80:46:b2:73:95:0a:df:84:a5:3b:3a:
da:e2:03:6a:aa:f6:2f:d8:da:e9:20:38:29:8c:3e:
f5:33:5a:ee:24:0f:33:7c:86:d5:7f:48:b8:23:34:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:DA:BC:53:27:72:B7:7E:D3:CE:17:7D:6D:3A:AF:03:B9:2E:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/945889529C1D11EF8AC48888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:58:56:46:d6:db:7a:0e:49:48:19:5f:17:e2:52:96:e5:24:
07:dd:ae:72:f3:44:29:d7:7e:5e:5e:fd:f6:17:75:ea:6c:34:
af:f4:d1:dd:4f:d4:d5:ed:47:0b:04:09:fc:9a:56:7a:81:4c:
a5:ce:d4:5f:38:a3:1f:c1:ae:0c:82:b4:d1:cc:58:81:f2:65:
9c:a5:d5:a9:75:20:55:38:e8:ff:84:f7:f7:61:8b:0e:30:6c:
aa:42:80:f5:dd:d7:59:05:36:36:02:9f:1a:ec:42:e4:88:73:
1c:91:0a:94:d7:2d:34:76:45:1d:dd:a5:8f:6a:b3:5b:c0:ac:
ec:44:b1:af:b3:c0:3f:d7:55:2e:fd:46:fb:fd:37:14:4a:e7:
0c:30:26:29:43:0b:20:ba:80:d7:3a:c4:c3:6c:1f:fd:5f:b7:
ed:d1:a1:fc:cb:8a:3f:f0:d8:29:10:ed:e5:b3:1a:a5:ab:58:
83:ef:30:4a:11:74:45:01:10:ec:d4:34:e0:ea:69:02:ce:6d:
76:d1:8f:20:ee:6f:e4:0e:53:63:9f:e2:c0:48:bc:a9:d4:dc:
d3:00:c1:5f:5b:6f:71:7c:e0:cf:d1:a1:39:e1:54:7e:1f:af:
22:4e:43:d2:32:5f:1c:57:f8:bc:8d:84:74:64:e2:7d:03:d0:
d7:d0:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:24 2024 by rpki-client on console-ams.rpki-client.org