Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC35A87092B311EF84FA06A6762E951A.roa
File: AC35A87092B311EF84FA06A6762E951A.roa (raw, json)
Hash identifier: CaDvW1njEKoWx2A9fEWOqPc92m5vLkDufi/nr+e8k9w=
Subject key identifier: CB:45:A2:AF:F6:A6:1B:93:37:DC:30:22:B0:8D:6A:54:6E:E2:9B:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC35A87092B311EF84FA06A6762E951A.roa
Signing time: Fri 25 Oct 2024 09:29:46 +0000
ROA not before: Fri 25 Oct 2024 09:29:42 +0000
ROA not after: Wed 27 Nov 2024 09:29:42 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66018 (0x101e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:29:42 2024 GMT
Not After : Nov 27 09:29:42 2024 GMT
Subject: CN=671b650a-125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:64:32:1e:22:42:82:78:7a:46:7b:fc:c3:
69:09:c7:47:e1:9a:2c:b7:73:3d:bb:3f:99:47:d5:
88:c5:37:c0:79:0c:e3:1c:3a:9a:c4:02:d0:04:de:
4f:17:9f:51:05:52:ba:dc:5e:a4:a3:c5:be:49:ea:
b8:7e:20:07:d3:fa:21:6e:b0:7f:ca:8e:98:d6:16:
c7:50:5b:33:73:41:1c:07:d2:7c:50:92:bc:de:e6:
ce:7d:c5:e9:c3:cc:40:71:0c:d4:af:48:39:20:31:
2c:d1:46:45:b8:4e:52:c0:5a:46:22:a1:c0:fc:23:
d9:01:68:90:d4:64:2a:ff:67:da:3a:d8:85:a6:7a:
31:85:2e:18:1e:76:25:48:70:2d:1e:cf:57:7b:28:
9d:e1:3a:53:09:40:14:2a:4e:51:35:98:02:c5:a8:
50:b8:ee:90:99:a1:f0:76:c8:35:4d:d1:27:b3:84:
61:11:dc:1f:12:cc:84:f7:d3:58:18:55:18:c3:72:
50:9b:b5:c1:f2:44:01:a2:93:8a:7d:86:19:2f:77:
f6:06:79:c9:14:39:95:88:ab:df:89:7f:eb:d0:61:
23:13:9a:de:57:37:1f:87:09:1f:10:d0:7d:84:a1:
19:4c:93:62:f1:d9:0f:57:ab:08:23:db:e9:95:cc:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:A2:AF:F6:A6:1B:93:37:DC:30:22:B0:8D:6A:54:6E:E2:9B:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC35A87092B311EF84FA06A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:34:bc:34:76:3d:9a:93:70:20:47:d8:b7:e2:e7:01:2c:5f:
2b:ef:92:74:3c:bd:d6:0d:3c:fe:32:6f:7b:e4:4d:8a:e2:8b:
50:73:6d:21:01:c7:4e:6a:27:3c:44:aa:11:f3:e0:19:db:f6:
d1:41:18:ad:94:04:ce:cd:d2:17:9b:42:8e:13:a4:68:fe:cb:
44:44:15:bf:36:56:36:5e:53:d3:f2:19:a8:2e:32:e9:bd:e9:
8f:64:43:5a:01:aa:25:a8:bd:b3:8d:b0:de:7c:e1:9f:d1:06:
03:cf:ea:6c:23:77:8f:7e:0c:1c:7b:67:83:d7:91:3b:9e:3b:
d8:1e:a7:e1:91:45:a1:80:fd:8d:7a:38:90:90:83:67:3e:d8:
8d:57:99:62:14:2a:64:14:ef:77:f1:97:27:3b:a6:a7:62:3c:
7f:b6:37:50:12:d2:8b:7d:41:71:ad:f4:56:62:4a:26:8c:36:
f6:9b:3b:02:ed:20:24:a1:ab:ae:5c:c6:14:3c:b0:76:24:e9:
5c:97:db:8f:4a:d4:38:c4:14:5a:d3:60:c3:43:85:67:60:2c:
f6:a7:89:31:b7:8d:a0:81:82:c3:37:2e:76:8b:c7:dc:33:e6:
64:35:0e:c0:25:3f:8d:ca:ee:e4:3b:dc:1a:22:4c:68:0d:47:
81:d9:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:20 2024 by rpki-client on console-fra.rpki-client.org