Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F4ED0FE985E11EFAB52B75F762E951A.roa
File: 9F4ED0FE985E11EFAB52B75F762E951A.roa (raw, json)
Hash identifier: 6WgCHm2RCItH+NoqV5Cr8AfOSD+/5xNtiqP6wl+fISg=
Subject key identifier: F3:AA:71:BE:40:F9:75:21:16:CA:80:25:FA:63:CC:CD:8E:75:CC:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F4ED0FE985E11EFAB52B75F762E951A.roa
Signing time: Fri 01 Nov 2024 14:36:04 +0000
ROA not before: Fri 01 Nov 2024 14:36:00 +0000
ROA not after: Tue 03 Dec 2024 14:36:00 +0000
asID: 203020
IP address blocks: 154.204.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66771 (0x104d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:36:00 2024 GMT
Not After : Dec 3 14:36:00 2024 GMT
Subject: CN=6724e754-21a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:a7:0a:39:db:20:b7:c0:90:92:f7:f1:dd:
be:2b:59:80:ad:85:b7:55:5b:8d:54:98:d1:fc:94:
73:be:12:cf:5b:96:04:9d:64:e7:c4:63:a0:e9:04:
a3:28:45:67:a7:ac:73:1e:32:84:8d:ed:9e:16:b6:
b3:08:eb:f0:68:b7:43:ed:bd:2e:b4:d3:56:c1:b3:
1a:95:e9:93:d7:82:d6:a2:69:93:ba:97:a2:00:86:
0e:39:25:ff:1a:d2:3d:53:ab:4b:fa:a6:13:7f:fb:
a6:be:31:b9:c2:db:f5:99:f9:86:fd:f5:1c:55:5d:
bb:a9:c4:dc:34:a6:bc:0e:03:c4:3c:82:f0:2b:60:
a8:5c:9a:b5:19:a0:ff:5f:67:b3:ee:f2:0b:e4:87:
a7:ea:43:35:20:2f:e6:81:3f:d6:ce:f8:5f:85:f0:
91:44:b4:fb:cc:67:11:54:3c:54:7d:ed:f3:4f:07:
29:56:88:3a:c1:28:45:7e:52:3b:15:72:fb:c7:90:
be:36:fa:c3:5c:0a:22:ca:48:b8:af:d9:a4:e7:32:
27:ba:aa:2a:d7:9b:96:a5:cb:5b:43:05:5a:c2:2d:
34:33:44:17:04:c4:bf:86:17:5b:7b:e3:9b:29:01:
46:02:4f:5d:05:11:e2:a9:da:7b:d9:6f:bd:ef:21:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:71:BE:40:F9:75:21:16:CA:80:25:FA:63:CC:CD:8E:75:CC:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F4ED0FE985E11EFAB52B75F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:03:de:95:95:68:1d:7b:ee:56:a4:15:89:f6:9a:e1:8d:0d:
f8:fc:d1:c0:8a:e1:56:5e:3e:9d:21:8f:a0:16:14:6e:66:8a:
ff:99:2f:fe:e1:00:42:09:87:d7:99:5a:09:98:c1:0f:7d:97:
9a:d3:07:d2:35:c1:ce:c9:82:e9:2b:e5:ca:36:94:4c:b6:c4:
2b:d6:20:b0:02:e7:35:87:c7:67:95:aa:80:ab:eb:19:7f:de:
73:5f:f3:99:ea:1b:7f:44:81:c2:aa:a3:d0:ee:9f:2f:03:48:
4f:9b:5c:d4:35:79:81:ae:44:34:c6:84:df:c2:40:64:2d:62:
01:11:ce:1a:ae:20:f7:1c:0f:02:87:54:b9:73:57:1e:2f:e0:
25:2d:38:d0:e3:bf:6f:81:36:db:ac:32:3a:1c:3b:0a:0d:d2:
58:a9:09:22:fe:9e:ca:37:87:ba:49:ab:86:a5:0a:06:01:dd:
9f:68:6e:4d:46:d7:12:1c:66:e4:f5:76:dd:7d:b3:f7:43:1c:
39:49:2d:c0:c4:a8:90:7b:ba:8c:02:e0:c4:e6:b7:1d:63:5f:
ae:47:a6:ff:17:64:c4:ff:b8:12:8a:fd:1a:36:06:61:ff:62:
d1:a8:44:51:c9:5b:06:30:93:12:ee:f5:a9:51:58:ad:41:29:
f1:78:dc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org