Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78A98CA27011EF8B741F77762E951A.roa
File: 9D78A98CA27011EF8B741F77762E951A.roa (raw, json)
Hash identifier: B42NMsj8GKuXGO7R6zx++SbKLHgsfspRSasE9c2/B5Q=
Subject key identifier: EA:56:7E:C2:88:30:EE:E6:A7:AA:DA:38:F4:AA:67:5B:3C:CB:B5:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78A98CA27011EF8B741F77762E951A.roa
Signing time: Thu 14 Nov 2024 10:10:03 +0000
ROA not before: Thu 14 Nov 2024 10:10:00 +0000
ROA not after: Sun 24 Nov 2024 10:10:00 +0000
asID: 151800
IP address blocks: 154.197.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68886 (0x10d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 10:10:00 2024 GMT
Not After : Nov 24 10:10:00 2024 GMT
Subject: CN=6735cc7b-b51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:a0:ff:8d:59:41:0f:04:95:e7:a7:18:b8:
93:5e:96:ea:f1:f9:25:c5:23:d2:49:4b:b0:5f:9a:
07:1b:fd:9c:74:b2:73:04:2a:82:7a:ee:3f:4d:dd:
40:e1:6d:21:c2:7a:b7:23:d6:61:11:22:e5:c2:7d:
2e:95:b2:7a:62:eb:9b:17:e8:af:a1:13:fa:10:b1:
51:40:b9:36:e0:49:0e:a3:41:bd:d8:08:54:4c:8a:
f5:f3:ac:e8:16:bc:e0:46:a2:ea:b7:45:29:d1:96:
96:90:98:02:37:2e:a8:2c:69:2f:eb:59:84:79:8d:
cd:df:c5:84:f0:3a:0e:2d:2d:eb:48:7b:ca:5d:6d:
d1:e7:70:e9:23:8b:77:e5:95:8d:39:ab:a2:b1:2b:
a8:2b:1d:87:ad:de:01:e8:7f:3b:86:df:17:be:62:
6d:29:d9:31:ab:a2:b8:3e:51:db:93:ff:5b:27:3a:
ac:d1:46:ff:23:a0:69:8f:d9:e5:3e:ff:eb:cd:bd:
b4:00:6c:82:86:58:14:b4:40:a6:60:83:a9:d1:58:
8d:dd:7d:c5:21:32:5c:ac:85:0e:a8:79:60:f9:fe:
84:a1:57:47:40:32:ca:2f:1e:25:2a:da:ab:35:73:
23:0e:45:88:87:eb:8e:20:17:b0:d5:4a:6e:c6:a4:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:56:7E:C2:88:30:EE:E6:A7:AA:DA:38:F4:AA:67:5B:3C:CB:B5:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78A98CA27011EF8B741F77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.96.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c7:03:f2:2b:02:9e:33:e5:ff:62:32:1a:5f:19:31:d4:c4:
ad:bb:bb:2b:2e:94:b9:c9:c0:b7:66:e6:59:fa:03:84:97:27:
7d:68:c2:1d:02:ec:b6:ee:6f:be:ba:95:fa:6e:c1:2e:f9:b7:
b6:80:18:06:1c:28:9c:ba:bc:a9:0a:35:4b:e5:bc:13:23:bb:
d6:4d:b4:1c:f9:e1:49:5c:6a:bf:89:ab:bc:1c:af:c1:ea:de:
41:78:7f:1f:fc:47:ec:7f:a2:6a:10:c6:aa:c2:85:09:8b:03:
76:4e:c8:9f:ca:7c:e9:6e:25:8a:2c:c1:8f:f4:8c:7e:66:63:
3f:2a:89:42:0a:28:68:ff:c2:2c:d5:94:8c:c8:92:df:d6:e2:
6e:c9:ec:2b:f8:38:42:84:de:1c:cb:48:21:db:30:3c:11:be:
b0:d6:c3:7b:d3:f2:69:be:da:fd:91:dd:b5:01:da:b9:39:20:
0c:b2:2c:d5:85:7d:a7:92:f9:82:2a:c2:6a:66:4c:3f:35:a6:
07:80:b2:fc:32:a8:87:76:9a:33:be:ae:49:07:62:49:df:80:
7f:39:13:28:0d:d9:13:b5:67:9d:ec:32:ea:20:75:3b:4a:00:
9a:a6:58:9a:3a:03:50:29:28:dd:1c:72:fc:df:75:7e:16:4e:
b3:e3:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org