Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EA71409DA411EF99766EA9762E951A.roa
File: 94EA71409DA411EF99766EA9762E951A.roa (raw, json)
Hash identifier: 48INBvW4bq2Z4Z94/cUpMUJ+VKZFa9hB0kNdaThp8Io=
Subject key identifier: 8A:58:34:66:0A:9A:E6:2D:F3:DB:B2:C4:2F:56:61:9A:5F:FA:9D:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EA71409DA411EF99766EA9762E951A.roa
Signing time: Fri 08 Nov 2024 07:39:27 +0000
ROA not before: Fri 08 Nov 2024 07:39:23 +0000
ROA not after: Sat 30 Nov 2024 07:39:23 +0000
asID: 18229
IP address blocks: 154.210.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68048 (0x109d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:39:23 2024 GMT
Not After : Nov 30 07:39:23 2024 GMT
Subject: CN=672dc02f-55dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:b8:0d:ce:2e:84:14:bd:56:14:92:ac:53:
5d:85:5f:e7:7d:3f:3e:65:1a:be:aa:dd:cd:b6:0d:
ac:9d:ca:b7:61:b5:0c:0a:24:bd:b9:5d:30:7d:6d:
fe:7f:b9:86:b9:c0:df:fe:1b:ef:57:89:50:b1:29:
5a:19:e9:7e:3a:16:8a:35:e2:fc:de:92:ec:f4:21:
dd:63:d7:8c:8b:67:18:a1:d7:0d:d5:14:fa:43:ac:
35:3f:30:ac:c1:13:4e:a2:da:07:72:69:04:75:5f:
0e:63:08:68:04:ff:03:46:dc:51:76:88:8b:92:bf:
e3:c6:c7:7c:c0:19:06:72:74:8c:c8:7f:01:4e:22:
81:e4:8e:0e:e0:65:2d:3f:c8:33:0f:f1:c1:b4:63:
21:89:56:c9:03:b3:f4:21:0a:a7:c1:38:48:44:d8:
0f:e0:78:f6:85:e2:0f:b8:9c:17:0a:25:e2:5f:b5:
06:67:91:35:01:0f:e8:e4:36:bd:ea:8f:0c:76:92:
d9:b9:ef:63:bf:c8:00:57:4c:f3:76:57:ed:53:a1:
5b:f4:9c:86:54:cf:5e:a6:f8:cb:ec:7a:1e:21:54:
4e:b1:d8:f8:d8:40:9f:6a:db:16:ee:7b:49:a0:b2:
de:4d:5f:a6:2e:50:2d:c8:d4:f8:9a:10:14:f2:0f:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:34:66:0A:9A:E6:2D:F3:DB:B2:C4:2F:56:61:9A:5F:FA:9D:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EA71409DA411EF99766EA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c9:82:d4:1d:51:f3:c0:24:b5:a1:4e:1b:f5:1c:9d:24:0c:
38:ad:8a:d8:70:71:55:97:62:f7:ca:e0:5b:64:a1:49:55:a7:
12:d8:c6:a7:41:fc:5e:ca:eb:04:41:1b:d5:7f:01:19:48:29:
e8:2d:e0:8b:7b:04:c8:2e:fe:7a:29:df:c3:79:07:a3:46:e3:
06:0f:22:dc:07:72:96:12:c9:1b:12:ca:16:04:64:cd:9f:2f:
b6:c5:f9:fa:57:c1:29:fe:59:1d:44:fa:06:94:e7:23:05:f3:
dc:9b:4a:19:77:1c:58:34:5d:03:3d:4e:1c:96:39:d6:bf:71:
3a:bf:4f:ac:ad:c9:ea:00:79:58:5b:26:02:f1:ac:7b:e4:41:
b4:1e:4f:0c:49:a5:03:0b:42:03:b1:1e:df:dd:d1:45:c6:6b:
75:19:80:10:71:b6:d5:21:33:37:b7:d4:0d:c9:71:3d:a6:21:
ff:ba:f6:da:aa:87:08:b9:1d:fe:19:d8:3d:f5:b7:53:5b:93:
53:0d:ae:af:7e:2d:11:43:49:f1:92:0a:4c:1a:59:ff:eb:b9:
fa:c5:55:6d:dd:96:eb:77:c5:bc:89:9b:af:80:4e:f8:1c:c4:
06:6b:d5:a7:c4:f8:09:00:50:de:b9:3f:1e:fe:84:f2:8b:3b:
75:31:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:16 2024 by rpki-client on console-ams.rpki-client.org