Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2C9D8A8EB11EFB1C32DBF762E951A.roa
File: A3F2C9D8A8EB11EFB1C32DBF762E951A.roa (raw, json)
Hash identifier: vmZJzrm0oyRYmCwfHmuFoTNcjvKRJirLP/tkP1IGw0o=
Subject key identifier: C9:BF:A7:6B:FA:60:24:55:04:20:5A:CB:E2:16:C2:22:27:E2:1A:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011113
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2C9D8A8EB11EFB1C32DBF762E951A.roa
Signing time: Fri 22 Nov 2024 16:05:49 +0000
ROA not before: Fri 22 Nov 2024 16:05:46 +0000
ROA not after: Tue 03 Dec 2024 16:05:46 +0000
asID: 62240
IP address blocks: 154.195.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69907 (0x11113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:05:46 2024 GMT
Not After : Dec 3 16:05:46 2024 GMT
Subject: CN=6740abdd-1d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:94:52:5a:42:68:7f:97:cd:f2:d7:83:0a:
ed:47:f7:8a:d8:23:43:54:0d:46:dd:58:7b:10:c0:
96:2b:e5:3d:20:67:c7:85:57:d7:33:dc:ef:b2:b0:
22:3b:d2:c6:9d:6f:75:4c:7d:78:b2:25:72:c5:15:
66:91:c1:70:57:4f:c2:9e:eb:4f:00:9f:80:c1:f9:
f6:ee:0d:82:f9:8b:10:98:a6:c0:36:07:0a:f3:c4:
00:29:1b:dd:c3:a1:ba:92:02:a3:d7:a4:7b:44:23:
81:0c:bc:16:a1:6b:26:a9:96:1a:d4:bd:ca:dd:c2:
32:2d:3b:8a:43:3d:e4:ea:5f:5c:17:42:d6:db:d4:
78:1a:0d:d0:53:63:46:b1:cd:80:b8:49:ad:1f:3c:
ec:d6:ab:99:d8:0e:1d:4e:f4:03:e7:be:a3:61:e1:
c6:90:4a:e9:0b:a2:2c:32:a5:2d:b5:f3:25:2f:97:
2c:ab:bf:28:00:7e:a3:cd:49:7d:dc:90:d1:9e:36:
71:1b:8c:35:d8:af:ae:20:f9:50:5d:a4:ab:20:1b:
9c:6c:b2:f4:c5:a1:c3:ad:f2:3f:cb:64:1d:01:35:
56:59:15:df:e0:ee:d3:73:8e:f8:57:57:0b:42:eb:
0e:f1:32:8f:76:21:0e:44:d5:2c:db:48:4d:8f:52:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:A7:6B:FA:60:24:55:04:20:5A:CB:E2:16:C2:22:27:E2:1A:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3F2C9D8A8EB11EFB1C32DBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4a:7b:f2:e4:94:5a:31:ed:d6:91:36:96:32:4f:64:67:50:
78:f5:47:10:fc:61:e2:23:45:60:4e:7a:d3:78:ac:f3:1e:c1:
7a:e9:ab:32:5d:c8:1a:15:08:95:31:2c:16:76:79:bc:4e:d2:
cb:51:f5:cb:99:6a:1d:ef:0c:45:4c:4e:77:e3:b8:b5:a9:80:
30:4d:53:5a:13:30:77:94:03:30:1c:a8:43:e6:ea:36:ca:2c:
73:a6:d2:65:86:94:9a:69:f6:1d:13:60:bd:b4:b4:8f:d5:bc:
bc:92:02:2e:4d:dd:1f:7f:c0:c9:f4:a8:4a:37:4a:d8:7f:c9:
cf:e3:08:3e:4d:a2:bf:78:9e:fd:3f:48:78:8c:da:95:36:f6:
9c:5e:dc:7f:53:79:e8:a3:55:5b:53:ea:48:9a:54:04:e5:d9:
c7:12:e1:97:76:49:5d:89:04:b8:09:b9:e2:93:49:3d:9b:6b:
67:f9:07:f7:26:4a:ec:8c:72:06:22:37:45:d3:89:25:48:b9:
b0:bc:b7:75:58:70:53:26:1d:f1:d8:bf:d1:45:a7:35:03:cf:
d2:39:9d:bd:94:15:a3:eb:58:15:85:b2:96:9e:ed:19:85:df:
c6:87:bd:e4:66:83:53:0f:19:38:c2:b6:72:85:a5:3a:73:f7:
88:df:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:27 2024 by rpki-client on console-ams.rpki-client.org