Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4DAA7E74CA11EFB2BE7EB3762E951A.roa
File: 9A4DAA7E74CA11EFB2BE7EB3762E951A.roa (raw, json)
Hash identifier: QrhcPjGLSN4OYABdrek13yMjezbWbw9TQzX9TQB2iP4=
Subject key identifier: 56:E7:51:11:C5:9D:D4:3A:50:5B:8A:4E:F5:02:75:6D:E1:4C:E5:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4DAA7E74CA11EFB2BE7EB3762E951A.roa
Signing time: Tue 17 Sep 2024 07:58:19 +0000
ROA not before: Tue 17 Sep 2024 07:58:16 +0000
ROA not after: Sat 30 Nov 2024 07:58:16 +0000
asID: 142403
IP address blocks: 154.221.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61396 (0xefd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 07:58:16 2024 GMT
Not After : Nov 30 07:58:16 2024 GMT
Subject: CN=66e9369b-1aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:59:fb:85:56:39:ba:f2:55:14:2c:23:71:
8c:94:e5:3b:fd:37:f1:f7:56:73:6e:f3:16:62:1a:
48:2a:0d:34:31:30:18:2b:1b:67:d5:af:2a:62:f9:
c7:ba:9c:a5:ae:c8:29:cd:d2:eb:23:7c:70:71:a5:
8e:84:86:fa:20:e6:0b:71:20:fe:4b:96:1e:1c:c5:
aa:30:53:e7:e5:22:09:5e:be:f3:44:a6:2f:e6:f4:
6d:62:df:19:60:83:66:af:85:3d:d3:e8:12:55:54:
dc:71:5e:a3:ce:da:53:3f:ee:3a:2f:99:82:01:f8:
db:da:d4:0b:c5:af:c2:bb:b5:81:5c:1e:da:f9:04:
17:ed:97:4f:29:1b:6f:67:b9:06:70:1f:58:e2:2b:
df:d4:38:a1:d4:85:ef:04:3b:df:ac:51:1d:d0:df:
ea:ec:97:0f:eb:c1:61:28:8c:c0:84:74:15:1c:24:
b7:3e:e4:24:3c:15:ee:be:e4:3b:05:d8:a5:48:f8:
ad:d1:f5:c8:68:97:bd:ec:6a:e7:59:c0:f6:17:1f:
22:0a:92:db:30:42:c5:2e:ed:82:2a:72:2e:c8:aa:
22:ed:4b:c5:f7:66:df:1a:de:5c:c0:47:51:96:73:
05:95:04:4c:af:10:1e:99:cf:bb:b7:74:34:4a:09:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:51:11:C5:9D:D4:3A:50:5B:8A:4E:F5:02:75:6D:E1:4C:E5:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A4DAA7E74CA11EFB2BE7EB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.31.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9b:df:7e:73:7b:f0:25:e1:e2:1f:53:f8:ab:08:15:cc:c2:
71:45:20:38:78:6d:02:ff:17:5c:ad:0c:5c:c3:e0:ea:0c:95:
62:b2:41:1a:35:07:2c:b5:09:53:ec:2f:b3:37:af:96:7d:f3:
c3:af:f0:e6:5f:bd:e3:81:b3:23:73:5b:20:7d:89:29:a4:0b:
a0:fb:80:55:d6:f0:2e:54:43:f0:57:4b:c6:b8:74:cf:66:1d:
7e:69:a1:28:d5:88:b6:79:72:7f:5d:84:f8:b8:b1:bb:0e:34:
28:ca:04:e9:ec:dc:1b:8f:8c:07:61:03:fb:56:ca:13:41:f7:
16:fe:2d:91:78:2b:75:7d:a2:7a:19:f6:53:a8:f9:19:43:0a:
ce:d0:27:b7:80:74:4d:82:9d:1c:a2:55:f0:3c:4b:85:4b:0b:
a3:c5:a1:ab:30:88:c5:91:74:84:7b:52:c2:ec:76:4f:2a:29:
f4:18:77:ac:66:39:5c:e5:c1:17:a1:2a:55:c8:e3:7a:f4:3d:
77:32:32:4c:ef:05:f6:1c:af:e4:51:1f:47:d3:97:d8:0f:7e:
a1:ae:4b:d5:63:aa:83:ab:b1:94:31:ca:70:d8:f6:9e:7f:1a:
b9:e6:49:f4:5f:c4:ad:47:33:ff:6c:3d:fb:ee:e7:0e:e8:b8:
e5:7a:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:19 2024 by rpki-client on console-ams.rpki-client.org