Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB2817050CD11EF98A5C35E762E951A.roa
File: 9CB2817050CD11EF98A5C35E762E951A.roa (raw, json)
Hash identifier: xKjPM+mAppgVRQ7D2aZeuaM6tWwBdLaWbXROdWcnFtU=
Subject key identifier: 74:0B:6F:8A:F3:4F:91:AA:2A:03:9A:76:72:F1:78:15:44:69:DC:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: DB77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB2817050CD11EF98A5C35E762E951A.roa
Signing time: Fri 02 Aug 2024 12:49:10 +0000
ROA not before: Fri 02 Aug 2024 12:49:07 +0000
ROA not after: Thu 07 Aug 2025 12:49:07 +0000
asID: 137962
IP address blocks: 154.209.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56183 (0xdb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 12:49:07 2024 GMT
Not After : Aug 7 12:49:07 2025 GMT
Subject: CN=66acd5c6-6717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:14:31:fd:e1:bf:28:a7:6d:e4:ca:6a:b4:
77:d6:eb:f8:52:9c:19:d3:ad:2b:46:3b:9f:36:c5:
9c:a1:73:e9:8f:8d:f6:26:74:cb:af:7d:98:f9:5a:
5c:99:c3:fe:6e:10:c6:c3:98:2e:cc:f1:be:99:be:
ba:00:cf:ac:28:75:91:24:e8:37:b0:f7:7c:be:2e:
36:19:03:0d:38:9e:a4:02:57:94:96:83:20:1c:cb:
a2:37:ec:9e:75:cf:0d:eb:86:17:55:6f:d4:4f:1a:
64:fc:03:b8:97:7b:d4:2d:1f:c5:3b:0e:de:7c:f7:
3f:3d:99:69:af:0c:63:28:91:0f:7c:71:e8:20:f5:
3e:ba:46:42:73:a3:ed:47:20:fe:0f:a1:55:6b:b3:
83:03:d3:95:24:3e:5a:f8:c3:38:fe:58:3a:33:18:
c9:0c:db:8c:32:f9:f1:ec:65:1e:5a:5f:d8:4e:5f:
bc:2a:59:ee:db:32:61:ca:e6:67:81:73:26:7d:87:
86:18:6b:62:2f:de:f2:d3:5b:27:d3:45:30:ea:44:
7b:5f:da:0b:da:58:a4:da:ef:b1:67:2e:44:df:dc:
98:e3:6d:2d:65:71:ec:b4:54:c0:28:3c:cf:8b:41:
28:95:1f:08:8e:e9:72:ec:58:94:19:96:39:ab:17:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:6F:8A:F3:4F:91:AA:2A:03:9A:76:72:F1:78:15:44:69:DC:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CB2817050CD11EF98A5C35E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:fd:82:92:58:e9:b4:35:0e:57:d3:cc:f4:0f:1a:61:21:c9:
9b:ea:7a:79:52:68:b3:49:f7:87:c2:5e:94:c1:12:c1:08:d1:
ad:49:38:88:a7:3e:13:a8:12:39:04:c4:51:cd:7e:5d:ab:cd:
e9:ed:75:5c:97:0f:18:1f:28:b5:84:fb:56:d4:f2:f3:ab:29:
d5:35:c6:49:a4:ca:6e:ce:68:0c:83:a5:75:af:e8:09:90:3b:
fe:07:ec:57:64:95:56:7f:1c:51:7b:18:97:af:4b:ce:ec:be:
d9:fb:a7:76:7b:48:02:e2:6b:07:06:31:6d:50:49:5a:95:a4:
e3:11:ea:a9:f6:93:35:b4:87:0e:a2:92:b1:d6:6e:31:e5:92:
b4:f1:72:46:cf:35:95:35:a7:c3:26:e3:11:fb:5b:44:60:6c:
9e:3f:fb:8f:37:eb:f0:95:49:aa:df:b4:eb:48:a8:a5:be:74:
8b:2d:2d:62:dd:a8:28:45:b6:8e:f9:00:66:13:85:dc:33:05:
68:7b:6c:e1:60:4b:1c:66:7e:b6:69:a5:da:c7:e1:7f:5c:f4:
ef:7d:87:50:cc:cc:b0:bb:32:13:41:d2:a5:bc:ca:c8:db:fc:
19:85:44:18:fb:6b:85:00:c8:d0:26:fc:cc:b9:cb:57:a2:3b:
54:3a:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:25 2024 by rpki-client on console-ams.rpki-client.org