Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D14BBF8614C11EF848AEA4F762E951A.roa
File: 9D14BBF8614C11EF848AEA4F762E951A.roa (raw, json)
Hash identifier: ehOg/80UDAFwoQN9KXU/yMuVvEkLbeVBkQazfn3fB/I=
Subject key identifier: 9B:F3:C3:0C:B6:0E:04:C8:AF:78:7A:53:C2:3F:13:E8:8D:B6:92:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E499
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D14BBF8614C11EF848AEA4F762E951A.roa
Signing time: Fri 23 Aug 2024 12:38:35 +0000
ROA not before: Fri 23 Aug 2024 12:38:32 +0000
ROA not after: Fri 19 Dec 2025 12:38:32 +0000
asID: 141190
IP address blocks: 154.211.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58521 (0xe499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 12:38:32 2024 GMT
Not After : Dec 19 12:38:32 2025 GMT
Subject: CN=66c882cb-79aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:0c:c1:09:8d:22:68:0a:85:9c:c2:58:29:
07:96:8e:4d:f8:bf:28:a9:ff:16:5b:e9:1e:4f:2a:
56:4d:e8:d7:9c:94:15:d7:da:8c:86:3e:73:c8:31:
b1:a2:50:ea:52:a9:3a:66:ff:d0:b0:09:8e:c3:ff:
8a:81:11:ae:d5:e3:b2:e2:91:51:40:fd:fa:20:23:
eb:2e:78:05:bf:bf:d6:b8:09:94:0e:bf:57:ff:8f:
57:6e:c7:bf:89:71:74:f1:77:2a:51:fa:b7:ff:09:
b0:3c:50:15:f8:fa:08:aa:35:e9:6d:7b:fc:d2:44:
ab:79:93:e0:48:c6:fd:91:5d:d0:d8:ad:58:12:39:
96:d6:da:10:fc:72:86:2a:a7:68:ee:93:00:d9:51:
72:a1:14:41:43:4d:06:ad:96:bb:83:82:9f:da:fe:
6c:cb:ea:64:d5:b7:dd:60:59:cd:b2:80:2f:48:ef:
9b:07:3d:fc:aa:ac:40:19:29:d3:a9:1d:03:ec:27:
b6:d0:97:9f:08:d2:d4:07:2d:7e:da:73:4e:32:de:
a0:d3:a3:f4:31:69:ba:48:e9:5d:53:4f:15:d5:e5:
3b:b1:9a:b1:1e:ab:93:26:fd:1f:b0:cb:04:68:84:
31:c4:3f:f4:d9:9a:58:b4:77:f2:77:60:fb:c0:17:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:C3:0C:B6:0E:04:C8:AF:78:7A:53:C2:3F:13:E8:8D:B6:92:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D14BBF8614C11EF848AEA4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.0.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:58:46:8f:b9:9d:0d:fe:19:32:e9:06:19:7a:59:8c:1c:07:
00:5f:16:49:0e:1a:a4:22:f6:c3:64:cc:bb:2d:49:ea:dc:ee:
60:1d:98:a3:91:ab:7d:b5:be:ff:8c:f7:f3:c1:be:b2:30:a8:
9e:48:c3:e6:55:1b:5a:4f:3c:c7:ed:ac:be:67:71:a6:1d:28:
43:58:1f:a1:0f:af:8e:47:aa:b7:51:53:e7:4d:f4:2d:63:ce:
5b:60:04:11:2d:04:1c:a7:5d:e5:bb:27:e8:2a:71:2b:76:0f:
f7:97:bf:20:40:20:87:e3:ec:c3:d5:a8:90:26:91:53:a9:0e:
51:e7:8b:81:a8:c0:c5:25:a3:7a:72:eb:98:e6:19:51:eb:94:
f7:a6:ab:fe:51:6f:b1:1a:28:c1:ea:76:fd:a1:b3:3f:5e:3a:
7d:c3:2b:39:4c:27:b7:eb:bf:1b:00:f3:59:87:cb:87:df:c0:
c6:4a:75:66:17:3e:24:e5:c3:ad:61:f8:7d:8f:38:9b:a4:65:
34:47:34:a7:13:9d:2b:87:d5:9e:f7:88:08:8a:89:e3:8a:6e:
22:85:b6:9c:be:de:87:fb:a9:6a:1f:f2:e6:42:f1:81:13:8b:
a9:8e:3a:48:83:f7:6b:3c:0f:92:86:53:00:6f:35:2b:a2:80:
82:2d:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org