Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE22024A0D511EF87C15FB7762E951A.roa
File: ADE22024A0D511EF87C15FB7762E951A.roa (raw, json)
Hash identifier: Yp9oHU3YSUb4oQPQIhYE0IHeuzY9d/PjqLsa1NfEXto=
Subject key identifier: 5D:10:8C:58:4A:50:0F:3F:FA:2A:04:F1:AA:53:6A:89:9A:4A:3D:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE22024A0D511EF87C15FB7762E951A.roa
Signing time: Tue 12 Nov 2024 09:08:28 +0000
ROA not before: Tue 12 Nov 2024 09:08:24 +0000
ROA not after: Sat 14 Dec 2024 09:08:24 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68606 (0x10bfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:08:24 2024 GMT
Not After : Dec 14 09:08:24 2024 GMT
Subject: CN=67331b0c-15e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:e7:12:16:16:39:3c:59:15:d2:b2:06:3a:
73:b3:df:83:a1:56:d8:cf:e6:d5:70:ed:cc:14:67:
2a:9e:a5:3b:1f:05:ad:97:8f:f6:a5:13:7f:1a:f6:
5e:2e:65:09:f6:0e:ba:6e:19:24:4d:d5:1f:88:5f:
2a:81:9a:97:72:3c:73:cc:ab:08:8b:94:22:aa:81:
8e:4d:ab:4a:57:95:38:3b:36:ce:f1:fa:a4:b9:77:
08:5c:36:77:b3:37:f8:43:f1:ee:6c:3b:70:d3:07:
ff:f3:72:ea:f4:c0:02:a3:7b:75:f3:53:da:17:b3:
59:7f:9c:9b:9e:fb:0a:ae:59:49:05:f9:98:ed:03:
be:5c:9b:70:9a:04:9e:fc:9d:5b:2f:12:a0:5f:10:
2b:0c:87:66:ad:39:2f:cd:af:4f:11:69:12:a3:f7:
00:29:04:4e:d0:64:c6:c0:c8:9d:61:f3:60:19:65:
6a:7c:e5:74:c8:ce:55:05:6c:3d:0e:db:2c:ff:57:
03:a6:a8:52:4b:71:3b:5a:6d:08:68:f2:80:31:eb:
57:e1:33:59:58:d3:3e:21:f0:b8:f2:50:f5:90:08:
dd:3b:9b:b2:2d:53:a6:dc:ab:cf:c7:86:99:83:02:
b1:10:93:d9:64:3a:7e:2a:ab:4a:08:82:a3:0f:b3:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:8C:58:4A:50:0F:3F:FA:2A:04:F1:AA:53:6A:89:9A:4A:3D:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADE22024A0D511EF87C15FB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
21:85:7f:7e:50:ef:08:65:ea:ee:f7:8f:ca:95:17:03:42:0a:
2d:c8:63:e0:64:80:55:74:ae:6c:18:78:c2:fc:4e:11:6a:eb:
65:ac:f4:2d:90:9f:26:c0:f6:95:d7:cd:3b:1f:6c:c7:95:65:
8c:f9:78:d1:2a:f8:e3:7a:e6:e9:14:20:ba:e0:44:3d:a2:76:
e8:ad:20:d6:52:f5:61:99:5f:98:4d:18:5f:e5:c5:e7:de:bd:
0a:1a:ba:94:bc:c3:e8:16:83:dc:be:2f:92:54:41:f0:c4:54:
05:e2:8a:e9:4b:cd:6c:fd:7a:24:a1:35:15:65:cd:dd:d5:5f:
9b:0e:a2:b7:75:db:f1:c0:55:70:80:03:fa:d3:e3:f3:fa:80:
43:d4:ed:9e:e0:b7:81:7f:c1:b6:b9:fc:79:05:60:62:15:f0:
dc:19:5e:84:76:66:25:3b:a6:a1:fd:b0:ad:c4:1f:47:b3:bb:
e9:da:12:60:6f:f0:67:c8:06:d7:07:ca:f8:62:2c:4a:f9:e9:
1c:47:84:f5:b9:cd:ed:b6:7b:0e:77:ce:7a:25:79:c9:dc:2d:
36:36:76:c8:df:92:a8:01:4c:f4:e6:80:05:db:a1:6e:71:74:
52:46:fe:27:cf:7e:1c:9e:a0:34:99:70:10:d2:0f:ea:7d:92:
ee:3c:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org