Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E31050E2E1711EF8CC72CB0762E951A.roa
File: 9E31050E2E1711EF8CC72CB0762E951A.roa (raw, json)
Hash identifier: /mySbyjsrMq7wjvwNinEfJD/ZNIvzFrTRwOLGroKQc8=
Subject key identifier: E4:D9:25:90:FC:C2:B7:C1:41:95:E5:5A:DC:C6:15:28:33:85:11:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C4B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E31050E2E1711EF8CC72CB0762E951A.roa
Signing time: Wed 19 Jun 2024 08:40:45 +0000
ROA not before: Wed 19 Jun 2024 08:40:41 +0000
ROA not after: Sat 21 Jun 2025 08:40:41 +0000
asID: 24875
IP address blocks: 154.85.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50355 (0xc4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 19 08:40:41 2024 GMT
Not After : Jun 21 08:40:41 2025 GMT
Subject: CN=6672998c-2e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:52:dd:de:d0:46:27:44:a2:c9:26:ce:87:
e1:7c:14:03:d5:b4:41:e2:58:8c:9d:e1:5a:74:4b:
3e:5b:89:7b:b3:3e:be:3b:f5:4b:32:ca:90:46:c1:
6b:a7:9f:fc:ec:c5:e7:22:9a:97:e4:f1:5d:b0:24:
8c:5d:df:28:ba:43:85:46:25:4f:5a:b5:e9:1a:e7:
27:a6:21:60:4f:7f:ca:02:18:a6:7d:18:69:a5:39:
92:02:24:66:f1:95:4e:df:51:1f:b6:b0:80:87:69:
10:92:19:eb:78:cc:ee:da:1d:74:c7:d2:13:f2:1d:
46:a5:87:97:ff:f2:a1:27:39:e8:a8:b7:2f:90:14:
e1:cf:7e:e5:d0:d4:47:cc:e1:65:a6:04:e1:49:ca:
90:ac:13:a1:f7:20:32:ff:27:64:01:5c:f9:74:6d:
41:0f:77:43:cc:41:56:42:e9:53:fe:22:c5:0f:64:
4e:39:e3:f2:5f:9b:3b:7f:b3:c3:70:68:52:68:94:
9f:37:6d:aa:df:17:32:1c:47:e4:c8:09:c7:48:8d:
7b:da:65:3b:1e:9b:f0:72:ab:84:16:d3:46:36:82:
c6:ba:d1:61:7c:ef:e3:2c:4c:7c:26:5f:0f:73:1b:
f4:68:1f:34:4c:c1:d5:ef:6d:5c:74:4e:16:90:d6:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:25:90:FC:C2:B7:C1:41:95:E5:5A:DC:C6:15:28:33:85:11:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E31050E2E1711EF8CC72CB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:cc:ab:f1:f8:22:04:60:12:de:b3:34:ac:e8:0b:c8:73:7a:
a6:d5:bf:13:4b:92:d2:49:05:c3:e9:a6:35:5a:bc:dc:fa:86:
60:cd:5d:58:5f:8b:b9:4f:f1:63:5d:3b:c8:33:9c:19:07:0f:
58:73:a7:c8:4b:a0:11:27:48:1f:d6:f2:3e:57:f6:a2:87:5e:
bc:1a:79:fe:a0:2f:fb:85:59:40:ab:f5:25:d6:6c:ed:5b:eb:
5b:83:14:ed:be:c0:74:60:26:63:26:58:b3:1e:e7:b1:cf:d7:
18:da:40:d0:54:f2:5d:d6:93:0f:1c:b5:71:9a:56:a5:20:23:
1a:dd:99:1a:d7:65:5b:ab:c9:e6:6d:0d:31:aa:04:0a:fa:80:
18:9c:f5:91:24:40:47:2f:b4:90:93:8c:de:3f:a4:f5:f4:30:
7c:36:d2:c2:a2:5d:9f:5f:eb:76:3a:26:d6:1e:79:27:31:5c:
c3:ee:e4:a5:9e:f7:be:9b:9a:4c:3e:fa:d0:17:3e:ca:06:b9:
6d:15:bd:47:32:14:ff:a6:16:99:c1:92:b0:08:7e:8f:fc:0f:
a6:61:8b:31:a3:12:7b:50:03:7d:fb:af:ba:95:94:fb:2a:75:
8b:26:1b:1d:6d:d5:86:f2:f2:d3:5a:d2:12:85:f1:4f:37:d0:
7a:ad:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:45 2024 by rpki-client on console-ams.rpki-client.org