Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F45D52A9CB11EF8A2277BE762E951A.roa
File: A4F45D52A9CB11EF8A2277BE762E951A.roa (raw, json)
Hash identifier: 1Y/UJRd+h/rDKd+bMzeiVrk4V8tB3RHhqtQYokxdZ+A=
Subject key identifier: 26:4B:BB:A1:87:5C:C6:09:4B:48:83:D2:84:F8:C2:12:00:A1:C2:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F45D52A9CB11EF8A2277BE762E951A.roa
Signing time: Sat 23 Nov 2024 18:49:18 +0000
ROA not before: Sat 23 Nov 2024 18:49:15 +0000
ROA not after: Mon 02 Dec 2024 18:49:15 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70132 (0x111f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 18:49:15 2024 GMT
Not After : Dec 2 18:49:15 2024 GMT
Subject: CN=674223ae-906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:58:19:d9:2d:3d:05:90:9e:34:17:00:f9:
a7:5c:64:37:2e:bd:0f:a2:46:59:51:89:6a:60:23:
c3:1d:08:bb:69:7e:d3:c2:bf:28:63:0b:9d:aa:ae:
e5:c7:30:6a:56:8d:40:1c:11:08:41:48:93:de:dc:
25:6a:3e:44:04:a3:ff:6d:b4:75:de:46:1b:83:ad:
5c:d8:eb:07:0f:c6:32:41:5e:1d:05:dd:16:77:6b:
bb:5d:e9:6b:c4:18:2f:e6:27:9e:af:3d:10:43:20:
2e:e2:25:20:62:b4:a3:8b:f7:f0:29:7d:af:b6:fa:
1c:6b:48:8b:75:1f:7e:b8:4e:a3:b7:f5:2c:a6:63:
cf:0a:e0:5a:86:d0:34:e8:fe:96:31:c5:07:0e:39:
10:ed:96:f8:a7:b0:07:25:54:d9:c1:c9:d8:a7:cc:
e4:73:9d:08:05:27:35:9a:a7:6b:b9:92:b6:7d:3f:
df:de:6c:b1:39:60:a6:a8:bf:38:72:f4:de:b5:58:
5a:60:37:ee:44:3e:2b:a6:e0:8f:2a:d0:e5:38:13:
94:d3:bb:a2:5f:69:c1:4d:a1:c4:5e:8c:fc:cb:76:
26:df:38:f7:a9:2c:87:90:4a:f4:47:47:60:f7:65:
58:06:c8:89:58:f4:9f:d3:df:e0:01:61:78:92:28:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:BB:A1:87:5C:C6:09:4B:48:83:D2:84:F8:C2:12:00:A1:C2:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F45D52A9CB11EF8A2277BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ac:73:70:8a:b3:69:3a:d5:c5:7f:ab:78:5a:c2:e5:63:66:
1c:fd:1e:52:51:ce:63:5e:1b:be:17:53:0b:0d:e3:61:a6:96:
ef:93:44:67:61:fc:9b:af:33:6c:f4:99:c6:5a:35:38:b3:4b:
9d:ef:4c:84:8e:c4:c7:e7:a3:e6:f0:74:88:c6:5c:a5:b4:ce:
26:ed:1c:d5:fa:05:6f:e4:22:aa:c2:70:6c:f0:ce:9c:03:e9:
dd:92:ed:97:3f:42:db:3b:fb:4b:fd:88:51:5a:c8:36:d1:30:
e6:b8:12:19:24:f5:66:11:22:d6:cf:ee:f0:cd:6e:90:79:f0:
e8:68:f3:31:e5:be:cb:6f:9d:4f:55:75:47:bd:49:b1:98:49:
00:88:ed:fa:14:fe:a2:f3:3e:69:95:19:ae:17:bc:a6:ee:89:
45:9a:93:52:d1:99:f2:50:c9:2c:e4:7b:ba:11:a2:3d:1c:60:
02:01:18:88:0d:98:a0:3a:10:bf:f5:61:57:92:1b:44:96:e3:
44:2b:45:73:79:e3:e8:7c:14:8f:f5:96:70:f6:57:6b:5d:e0:
f0:39:a9:ce:37:c3:62:f8:98:d1:32:40:43:06:67:0f:14:78:
37:cd:ea:66:cf:fa:4d:e9:16:e0:99:06:ce:af:e7:58:2f:ba:
38:ea:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:27 2024 by rpki-client on console-ams.rpki-client.org