Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADF1E9C92E111EF8997BC45762E951A.roa
File: AADF1E9C92E111EF8997BC45762E951A.roa (raw, json)
Hash identifier: 1WSHKCvDjbveOLqqjqOZLt/1oEEwo8niLT8PIOQxJkQ=
Subject key identifier: 04:BA:87:3B:35:1D:40:B1:6D:55:C2:98:5B:A8:8B:D1:8E:22:BE:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010256
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADF1E9C92E111EF8997BC45762E951A.roa
Signing time: Fri 25 Oct 2024 14:59:01 +0000
ROA not before: Fri 25 Oct 2024 14:58:55 +0000
ROA not after: Sun 01 Dec 2024 14:58:55 +0000
asID: 49505
IP address blocks: 154.209.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66134 (0x10256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:58:55 2024 GMT
Not After : Dec 1 14:58:55 2024 GMT
Subject: CN=671bb234-31fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:80:be:a7:53:6d:23:47:ef:21:04:87:b5:
e4:34:b6:44:38:4e:91:73:86:3d:f1:69:27:b4:ff:
14:b3:74:10:5f:49:61:74:96:cb:c4:b1:84:14:45:
f0:50:16:2a:f1:9e:d2:1e:de:e4:69:66:be:42:1b:
ba:78:ee:97:88:e4:38:34:ac:02:49:a8:3f:7e:c4:
07:ef:ab:6b:6c:a6:7f:9d:e3:de:ba:1a:78:20:84:
fc:f4:a8:5a:15:8a:2c:a2:b4:7e:dd:f8:19:11:fa:
a1:a5:c2:b2:76:99:1b:e0:d1:df:8f:78:02:4b:bb:
5a:d8:53:52:9c:8d:f1:cc:6e:52:66:8d:2d:30:90:
46:71:b9:28:46:58:87:66:63:c0:2a:ee:1d:2a:7e:
9d:a8:38:b2:ce:3c:3f:5f:ad:13:4c:db:62:24:e7:
df:ea:41:03:26:a9:85:ab:ea:92:da:f2:1f:10:97:
f8:c9:e3:28:e7:ae:26:af:bb:2d:70:96:b1:80:de:
ca:81:46:e5:ba:dd:dd:23:e4:83:0a:29:b7:dd:80:
3c:b5:8c:5c:b3:d0:ca:9e:c5:af:07:51:0f:9e:3a:
4e:e5:77:e7:bf:8f:e8:05:b9:5b:dc:6a:0e:e0:5a:
ba:ad:7d:be:07:fb:ca:cb:2a:7b:de:1d:c5:ce:a2:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BA:87:3B:35:1D:40:B1:6D:55:C2:98:5B:A8:8B:D1:8E:22:BE:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AADF1E9C92E111EF8997BC45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:de:23:4d:b0:12:7e:02:f8:d7:b8:81:a0:6f:68:ab:2d:2b:
0f:5a:eb:7a:b9:11:47:36:5d:43:cc:bb:fe:a3:f0:99:ca:58:
0c:ce:7e:eb:3e:31:f1:76:47:70:a6:33:69:8c:0f:a5:c7:a1:
4d:d5:2b:43:ee:85:b2:9e:e4:b9:7f:e4:73:b4:4a:eb:d2:18:
1d:70:33:86:f5:f7:3d:44:16:a4:54:5a:8d:10:85:15:77:1f:
9e:3f:74:93:51:d7:7c:e2:f4:c7:9e:8f:3d:7d:16:6c:4b:b3:
50:39:ac:a4:e6:1a:12:81:6a:cf:02:69:7f:f9:b8:59:9e:d8:
24:00:2d:7f:ac:ed:2e:17:d8:75:f3:67:1a:ec:fc:c0:fe:95:
62:3a:0f:40:86:39:0d:38:29:f2:ee:a5:ac:c6:2d:54:ae:1d:
a1:84:5a:13:cd:d5:56:5c:00:88:09:5b:ad:4e:d4:2c:f6:6a:
18:50:7e:ab:6a:a6:68:78:cc:c6:ae:18:58:68:77:03:3a:96:
ae:42:ad:f2:73:bd:09:08:15:9d:fe:a1:7a:4d:a4:11:e6:d5:
a3:a2:fb:c8:97:39:28:b2:e9:d3:46:eb:e1:a8:6c:5e:9b:74:
cf:fd:cf:ca:2d:ff:94:6f:8a:97:bf:4c:6d:09:29:07:3a:9d:
50:b3:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:28 2024 by rpki-client on console-ams.rpki-client.org