Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97DE5C62A8CC11EF9BAA247C762E951A.roa
File: 97DE5C62A8CC11EF9BAA247C762E951A.roa (raw, json)
Hash identifier: poldUYhlETp2CsmOjQjDwPpddIKzQTinSbNeyJceh04=
Subject key identifier: B0:25:D7:B3:DC:31:24:01:5C:3A:A5:04:F8:1C:9D:D8:39:80:58:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01100B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97DE5C62A8CC11EF9BAA247C762E951A.roa
Signing time: Fri 22 Nov 2024 12:23:35 +0000
ROA not before: Fri 22 Nov 2024 12:23:31 +0000
ROA not after: Sat 30 Nov 2024 12:23:31 +0000
asID: 137443
IP address blocks: 154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69643 (0x1100b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:23:31 2024 GMT
Not After : Nov 30 12:23:31 2024 GMT
Subject: CN=674077c7-ad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:29:68:03:d9:78:83:ae:e5:61:1f:1a:6c:
65:4a:a7:78:b5:35:2e:37:00:30:1b:b7:83:e2:0f:
35:19:94:b1:dd:de:c4:c3:a8:21:70:f6:7e:e7:16:
f8:87:5c:a9:d6:93:9d:fd:7e:44:50:59:50:7f:e7:
1e:a0:76:e7:1b:6e:8d:12:fd:74:25:eb:d9:bd:80:
58:10:b0:fc:b4:60:11:44:ce:85:e5:d9:e0:dc:e6:
56:7d:96:46:55:2e:32:7a:a4:50:bd:db:5d:cd:73:
0d:89:10:98:6c:c4:9b:16:9a:24:59:e6:7a:51:5a:
f7:d5:89:b7:4a:1b:fb:c2:f8:a7:17:57:1c:cb:62:
bc:45:24:fd:52:cb:6a:e9:f9:74:40:99:26:6a:a2:
7e:67:08:0f:3b:91:e2:ff:fb:34:10:76:d3:66:f8:
b0:fb:64:c9:64:48:e8:92:b4:83:ae:d9:70:82:7c:
1b:0b:99:90:83:53:ac:65:4e:a8:df:bd:cc:a3:8d:
b3:5e:58:61:6a:87:27:2a:59:ad:ba:cd:cc:67:a3:
64:ea:79:2a:ec:99:80:04:ff:99:37:4c:de:b7:66:
33:4d:3c:fb:03:aa:30:35:e0:7c:76:ed:d9:36:0b:
b4:f8:ae:68:e6:5d:46:29:87:a2:b9:74:c9:e0:4a:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:D7:B3:DC:31:24:01:5C:3A:A5:04:F8:1C:9D:D8:39:80:58:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97DE5C62A8CC11EF9BAA247C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b1:31:0e:2e:6e:a4:31:78:21:21:2e:e1:7b:a7:42:1a:4d:
b2:10:fe:93:dc:bd:4f:a7:2d:22:84:17:67:10:75:76:ce:31:
68:e3:94:a0:1e:84:88:43:52:5c:dc:18:c8:d6:a2:cf:aa:5e:
87:65:9b:cb:6c:bd:86:22:13:49:28:e5:b2:3b:9e:24:5e:e1:
0c:b8:ca:3d:c2:17:d8:b3:bb:64:18:22:c9:59:75:50:c3:56:
aa:a0:fb:d0:aa:6e:9d:1f:a1:42:9f:c4:8f:be:fa:5e:09:a4:
4e:57:ac:43:9f:36:13:bd:d3:71:04:fa:98:6a:a0:55:65:b2:
f1:53:c2:51:a1:68:e5:94:57:1b:19:18:ab:4c:c4:6d:2b:b4:
6e:64:49:73:14:b4:81:a8:82:57:cc:e9:8d:d6:88:ac:4f:71:
17:83:69:d1:68:06:ba:3b:3a:35:bf:ff:36:c2:23:b9:44:c4:
31:4f:e2:64:af:60:94:08:71:05:22:66:19:f2:7a:5a:5b:e6:
28:98:17:28:19:89:d5:52:c5:89:1e:86:18:3f:6b:e5:40:0d:
6c:d4:9a:8e:bb:ce:8a:60:52:fd:85:06:b7:9d:e5:22:0d:57:
15:ad:f2:e4:2a:d2:ca:27:d7:2b:24:2e:43:cb:cc:ea:74:1f:
77:92:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:25 2024 by rpki-client on console-ams.rpki-client.org