Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADF6264A0C811EF9E32FE65762E951A.roa
File: 9ADF6264A0C811EF9E32FE65762E951A.roa (raw, json)
Hash identifier: WAND6aQshLJBEB1QscNPma+SuCVgBVkPJhmcdVls/64=
Subject key identifier: B3:AA:6D:CB:3E:B8:4A:87:7B:73:16:3C:95:65:16:9B:2A:2A:C9:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADF6264A0C811EF9E32FE65762E951A.roa
Signing time: Tue 12 Nov 2024 07:34:52 +0000
ROA not before: Tue 12 Nov 2024 07:34:49 +0000
ROA not after: Mon 02 Dec 2024 07:34:49 +0000
asID: 21859
IP address blocks: 154.83.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68590 (0x10bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 07:34:49 2024 GMT
Not After : Dec 2 07:34:49 2024 GMT
Subject: CN=6733051c-a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:ee:a2:54:62:db:ee:af:66:39:ce:ef:d7:
5c:33:93:af:a1:e7:12:c1:cf:a9:6e:51:6c:e5:48:
c9:03:69:56:f3:c7:e4:2e:86:21:7d:aa:15:2d:18:
d9:6c:c0:4d:42:ee:ab:40:41:0b:71:fb:4c:dd:d7:
4f:ed:86:cc:b2:2d:ac:9c:79:c1:26:84:40:4f:60:
36:0b:53:69:fb:77:c8:ca:9d:ae:ca:b1:88:90:38:
0b:ec:e9:c5:74:ca:ab:20:ab:b7:3d:e6:d9:22:d4:
47:ed:f5:5d:e3:d0:7b:d1:31:da:08:92:87:69:e6:
57:b0:44:ed:eb:23:c5:76:70:17:cc:d8:b6:f2:15:
9c:5e:a3:d4:2f:15:35:5e:40:87:8c:37:f1:14:49:
10:24:71:4a:0a:fc:38:ad:c5:56:f6:a8:cf:0b:21:
84:da:38:e0:a0:27:b6:cd:85:2f:3e:cd:56:0b:f7:
44:52:8e:98:f6:4d:f0:d4:42:97:6b:7b:61:ea:b4:
14:7e:e0:40:70:c9:ed:b0:76:29:03:a1:e2:a8:a6:
5f:8f:f7:01:26:ec:9f:33:79:50:d4:95:78:26:a2:
3e:6b:dd:40:03:92:e1:1a:08:e2:2a:ec:ba:22:73:
ec:81:b2:d7:4d:fa:3a:8a:1f:7f:de:2f:8a:05:92:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:6D:CB:3E:B8:4A:87:7B:73:16:3C:95:65:16:9B:2A:2A:C9:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ADF6264A0C811EF9E32FE65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:16:b1:ea:f1:21:74:6a:f4:6a:0c:dc:5d:a6:f8:d5:2b:a1:
1a:68:0e:a6:43:a8:25:76:bc:67:8d:03:07:d6:62:b2:62:0c:
57:d9:53:59:a2:e6:34:26:16:3c:66:7c:e6:f1:b6:c7:51:f0:
ee:20:2d:f3:18:61:52:d0:01:51:54:35:07:31:80:f3:17:68:
2c:4e:bf:05:3c:e1:3b:c7:48:54:0e:23:b8:7f:2c:d4:a6:ef:
e5:ea:9e:36:8e:64:53:8c:6c:1d:72:ab:d0:65:81:6c:ae:3c:
32:ba:19:a9:8e:bc:2e:3b:e4:f5:71:86:8d:25:2f:16:6c:2f:
60:61:a7:1c:76:f6:5f:93:09:1e:af:77:cb:87:0e:4d:a4:70:
9b:1a:bc:3e:b6:d0:0e:d1:fd:ce:12:8e:0c:25:1f:41:0b:8a:
9f:c5:18:a0:6b:0b:a6:ee:d6:af:d0:a6:42:b3:2b:41:a1:8e:
5f:e8:7a:b1:e8:76:81:c0:fd:18:6d:03:aa:c5:f5:61:1d:bf:
82:b0:76:c6:e8:07:f8:7b:e4:e4:0e:2a:a4:29:d6:a8:5c:c5:
d5:a5:89:4d:72:bc:fb:34:ee:51:81:50:74:65:b2:6e:ad:34:
b3:77:cc:db:37:2b:7b:11:32:f6:1e:29:c7:44:49:c8:4b:58:
f4:32:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:53 2024 by rpki-client on console-ams.rpki-client.org