Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD9233E0767611EFBA811AB1762E951A.roa
File: AD9233E0767611EFBA811AB1762E951A.roa (raw, json)
Hash identifier: Vk2W043mlwAb0ApkoIuWdjyIpJ93uqgHigffY1G2qec=
Subject key identifier: B3:97:E7:87:A2:D9:80:C3:56:7E:D9:92:68:1C:80:F9:69:3B:01:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F06F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD9233E0767611EFBA811AB1762E951A.roa
Signing time: Thu 19 Sep 2024 11:02:36 +0000
ROA not before: Thu 19 Sep 2024 11:02:33 +0000
ROA not after: Fri 08 Aug 2025 11:02:33 +0000
asID: 133199
IP address blocks: 154.204.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61551 (0xf06f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 11:02:33 2024 GMT
Not After : Aug 8 11:02:33 2025 GMT
Subject: CN=66ec04cc-ea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:3d:90:00:64:9f:b9:85:b7:a1:c9:b3:53:
a7:b5:0e:9d:45:c0:d3:59:d8:d5:0f:e9:6d:4e:e2:
f9:ef:76:ea:bc:5a:d4:c1:31:76:59:5d:a0:b7:1f:
e3:46:75:f2:c4:da:2d:d9:cc:66:6a:9b:b9:c3:17:
0e:98:d5:90:8b:8a:9a:c5:03:46:aa:62:86:ca:a7:
2d:ae:49:f8:db:42:d8:d6:79:3f:7d:1e:d7:a5:da:
04:e9:aa:f8:12:30:c0:f4:40:43:b1:f5:07:e4:37:
50:72:19:83:4f:4d:05:0a:86:04:a6:26:df:84:d9:
79:bb:01:0d:b9:2b:ae:d4:7a:91:e4:f7:b2:03:48:
9f:8a:7d:2b:f3:44:67:c0:4e:f4:ca:c2:33:9d:92:
54:c0:6b:81:35:18:56:76:ff:df:65:69:38:ee:45:
5f:00:a4:1a:1c:71:19:14:f5:9c:2e:db:fc:5c:05:
be:59:b4:6e:bd:39:33:66:73:1e:d9:23:d8:3a:70:
7c:97:c5:ce:c4:c9:ed:c1:75:4d:4f:96:c4:04:91:
79:bb:94:a2:df:67:5c:5c:7c:d6:ca:c3:fc:2e:d0:
d9:69:ff:14:6f:6b:19:ad:f6:2c:09:01:e6:c4:3b:
84:ed:c3:e9:47:4e:61:58:a5:22:8c:db:e7:df:6a:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:E7:87:A2:D9:80:C3:56:7E:D9:92:68:1C:80:F9:69:3B:01:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD9233E0767611EFBA811AB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.63.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:42:23:2f:35:0f:0d:0d:53:13:2d:f7:ad:87:89:9e:cb:
e7:9d:a8:f5:36:32:1f:7b:37:eb:49:f4:32:3f:5d:ac:03:e2:
80:a5:a3:6f:b0:8d:9d:22:24:dd:73:84:76:e6:34:36:d8:33:
12:29:92:96:98:31:ae:92:fd:ea:40:1a:46:ad:c1:50:3b:ad:
ac:c3:83:f6:ba:81:c1:76:85:a5:b4:95:8b:ea:a9:12:ce:42:
36:50:cc:cb:00:e4:8d:83:5c:3d:b4:47:e1:ba:1d:ef:49:85:
73:5d:3a:c3:0e:01:74:44:3b:8f:22:a6:06:18:c8:14:32:03:
a5:ad:f3:b8:81:5a:37:cf:1e:11:81:b1:c9:ae:46:c7:1f:d0:
f4:9f:20:2c:e3:f0:8d:79:f5:a3:9e:11:7e:3f:22:4a:c6:fa:
5f:73:a7:2f:d7:93:77:4c:c1:f1:ef:36:d5:e7:ab:fd:06:2a:
fa:02:e4:19:49:60:63:48:9a:77:d3:cd:3d:a9:85:82:b9:9e:
8e:72:a5:c8:1e:ca:0e:ab:4c:32:2e:dc:4b:50:62:f5:65:fe:
09:93:b2:9c:4a:b6:9f:6f:ff:68:08:02:62:c9:22:59:53:bd:
fd:67:1f:bb:e1:f2:75:ca:ca:69:f2:4b:8a:1e:3d:e0:d8:1c:
d3:2e:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org