Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A319C6487F0F11EFA1D36D55762E951A.roa
File: A319C6487F0F11EFA1D36D55762E951A.roa (raw, json)
Hash identifier: 0QWetfHf+Hczn/gxYFG6ZRfgNEdQa3lqF3D6IucMT3Q=
Subject key identifier: 0F:E9:52:4B:FB:6C:FC:FA:3D:AD:61:18:5C:AC:DD:60:AA:1E:DF:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A319C6487F0F11EFA1D36D55762E951A.roa
Signing time: Mon 30 Sep 2024 09:37:41 +0000
ROA not before: Mon 30 Sep 2024 09:37:37 +0000
ROA not after: Sat 30 Nov 2024 09:37:37 +0000
asID: 138915
IP address blocks: 154.93.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62904 (0xf5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:37:37 2024 GMT
Not After : Nov 30 09:37:37 2024 GMT
Subject: CN=66fa7165-8d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:63:83:8c:c7:57:ba:5f:23:5f:af:9c:07:
de:66:a1:3e:19:82:ff:a1:c5:f7:e0:f0:f0:97:2c:
1d:3e:00:b0:9b:4f:f9:d0:f9:ef:37:89:12:cf:22:
ef:48:2d:d9:14:41:96:0c:cb:2a:fe:62:70:79:a3:
23:24:4d:33:60:9a:27:8f:47:f4:32:61:f8:96:db:
74:db:4f:f8:48:1f:2c:f9:6c:28:f2:66:ed:4f:28:
11:0f:42:c5:b2:1e:f0:f0:5d:a7:54:7b:b5:41:9d:
c9:69:f3:31:db:98:9c:eb:93:86:5d:d2:b8:b8:90:
fc:1e:67:fa:96:47:c5:41:9a:70:39:44:f3:99:52:
a9:be:70:6d:04:65:15:23:97:d5:ca:28:b5:6d:7a:
74:da:33:27:a6:9c:9e:c3:9f:f8:dd:7e:29:4b:86:
5d:23:ce:c9:82:30:a7:81:b2:2b:ee:3e:31:2f:24:
cc:75:47:b1:86:47:34:7b:15:cf:ac:21:41:7c:8e:
29:49:3b:a7:7d:d0:16:c0:a0:ff:12:27:d1:d7:11:
93:5b:a8:a7:33:02:c6:11:18:f2:6a:cc:d2:d1:2d:
d1:77:6e:8f:c9:61:7d:dd:d2:78:c0:85:c8:71:a0:
4f:ac:ff:0d:95:96:d8:9d:59:4d:c0:f7:e8:ed:a6:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:52:4B:FB:6C:FC:FA:3D:AD:61:18:5C:AC:DD:60:AA:1E:DF:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A319C6487F0F11EFA1D36D55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1d:c5:6b:0e:19:79:f4:5f:ba:b3:ef:c1:41:33:3d:0e:79:
6d:a2:7e:8f:d1:0b:ca:88:95:01:d3:b5:97:e8:ab:80:a1:13:
82:e8:f4:1e:8f:7f:e7:f0:b4:60:d0:2f:72:d4:cd:cb:bc:44:
46:31:e3:d8:70:a4:8e:4a:f6:9c:48:d2:ac:8f:d8:60:94:0a:
c7:cf:7e:9d:44:63:83:36:d1:3e:d4:3f:30:d8:0a:97:8c:17:
13:e2:2c:df:2d:19:79:c8:76:ea:6c:2f:83:0f:56:01:e6:f4:
ae:bc:2a:39:7b:66:63:7a:04:86:76:89:fc:fa:f6:f6:8d:ee:
e1:bc:be:42:61:aa:96:13:b2:05:11:85:e4:d9:48:da:84:60:
c6:50:04:51:58:78:1a:87:9f:53:ea:ac:2e:ea:36:5d:18:6d:
b9:fd:92:bc:e7:a6:4c:f6:48:59:e6:f5:66:a7:08:58:ae:e2:
6d:55:89:b7:78:19:65:46:36:a7:07:34:64:41:1d:ff:32:33:
c4:2c:c1:19:0b:b9:6a:18:1f:b1:ad:13:ba:64:7f:41:91:31:
ab:a6:07:94:01:47:3c:65:44:3a:10:54:ce:d3:25:ff:7c:9d:
ef:c7:8a:71:6a:59:04:1d:83:15:ad:71:33:28:9c:ae:d3:99:
23:c0:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:27 2024 by rpki-client on console-ams.rpki-client.org