Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF19662A9AD11EFB6771984762E951A.roa
File: 9AF19662A9AD11EFB6771984762E951A.roa (raw, json)
Hash identifier: N6HWDpFol1W6QvdrRvaERF6wGl6jgNu6Uei5H+TPetQ=
Subject key identifier: 9B:B2:CC:08:89:F2:5D:0F:4D:93:9F:A2:F2:E2:CD:D0:66:37:62:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011186
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF19662A9AD11EFB6771984762E951A.roa
Signing time: Sat 23 Nov 2024 15:14:17 +0000
ROA not before: Sat 23 Nov 2024 15:14:13 +0000
ROA not after: Wed 25 Dec 2024 15:14:13 +0000
asID: 135983
IP address blocks: 154.200.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70022 (0x11186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:14:13 2024 GMT
Not After : Dec 25 15:14:13 2024 GMT
Subject: CN=6741f148-eed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:c7:14:2f:59:1d:7b:4b:bb:b8:9a:36:a6:
3c:60:50:a5:0a:30:e1:a8:30:18:89:78:e1:0e:6d:
33:5b:45:74:70:80:9a:e9:84:8b:4e:b1:ed:b7:1a:
ec:0d:ab:42:b3:69:9c:63:af:7e:e1:99:75:a1:75:
8b:2d:d9:28:ab:00:d5:0e:a9:3d:96:42:96:73:5a:
78:ee:8a:86:4c:17:6f:cb:4e:10:1c:8b:d6:62:ed:
df:79:88:b0:62:06:0c:16:51:75:78:d3:b7:7b:72:
06:f4:d9:63:31:e1:67:46:de:0b:9b:9e:62:83:e5:
ec:4c:a8:ae:ac:d8:2f:11:b9:04:1e:71:3a:d7:e2:
72:d8:b4:5d:e4:75:2e:20:e5:a0:9b:bf:fa:f8:5f:
a0:8d:42:ce:62:b3:ae:2c:63:5b:ca:f4:e8:65:0c:
ef:d4:87:e6:4c:bb:9c:13:5a:2f:ee:28:0a:d3:ed:
d6:fb:7b:f5:49:8b:c5:06:bc:cb:1c:1f:eb:45:d7:
14:63:62:e3:c4:23:e8:8a:63:6a:ab:02:ba:3c:f1:
f5:a1:8f:29:37:7c:a8:39:c9:35:a2:a2:ba:6d:e6:
0e:ea:c7:59:41:9f:02:29:8d:b1:47:6b:89:8d:6a:
80:ff:e2:2d:48:30:d1:7e:01:c4:d8:9b:17:03:cf:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:CC:08:89:F2:5D:0F:4D:93:9F:A2:F2:E2:CD:D0:66:37:62:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AF19662A9AD11EFB6771984762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.35.0/24
Signature Algorithm: sha256WithRSAEncryption
08:77:89:b3:bf:5c:b3:bd:9e:cd:ee:99:98:b4:9f:73:81:7d:
45:17:44:37:fd:54:f4:59:92:60:b7:35:4c:37:cb:2c:77:1a:
c2:23:3c:fa:2a:1c:1c:56:6f:e6:c3:15:f8:de:bd:69:b2:87:
aa:51:f5:a4:2c:cc:d2:20:5f:96:39:40:e1:44:2d:8b:90:62:
05:cf:54:74:10:f6:88:36:2c:07:43:1b:a5:7b:89:1b:63:5b:
61:21:34:50:7d:72:ce:6d:57:2c:5d:6e:77:7a:f3:f4:2d:e0:
61:05:cb:50:5f:45:b8:73:26:f1:5b:bd:7b:98:7c:1e:69:e1:
6f:5a:fd:d2:de:12:86:9d:f4:96:6b:3f:ec:36:7c:f3:8c:28:
c7:7b:db:eb:a7:5e:87:93:36:a5:31:a5:c7:75:c2:ea:67:89:
83:ce:ac:86:87:13:06:45:24:29:c5:8f:da:2a:ff:21:c0:83:
d1:d8:28:11:f4:da:b3:fb:a9:fa:46:6f:b9:49:94:7b:33:1c:
b2:d4:26:81:bd:05:cb:3a:79:61:e3:db:f1:5e:37:45:77:f2:
18:d4:bb:08:cb:bf:2e:ee:c3:b3:89:c5:42:f1:94:2f:d7:6d:
58:a4:c6:eb:bd:aa:07:c8:6c:94:f6:b5:4a:9a:e8:02:26:a7:
59:43:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:25 2024 by rpki-client on console-ams.rpki-client.org