Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0A1D76A9EA911EF9273FF8A762E951A.roa
File: B0A1D76A9EA911EF9273FF8A762E951A.roa (raw, json)
Hash identifier: ZeOj7w6Zs0EYGmT0HnBnY7qeHNcrsGZ3ulov1WrPUqc=
Subject key identifier: 1F:37:A4:CB:D1:31:06:B3:34:53:70:23:B1:7B:B9:29:D1:5D:74:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0A1D76A9EA911EF9273FF8A762E951A.roa
Signing time: Sat 09 Nov 2024 14:48:32 +0000
ROA not before: Sat 09 Nov 2024 14:48:29 +0000
ROA not after: Mon 07 Apr 2025 14:48:29 +0000
asID: 267834
IP address blocks: 154.198.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68107 (0x10a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:48:29 2024 GMT
Not After : Apr 7 14:48:29 2025 GMT
Subject: CN=672f7640-b7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:db:66:96:c9:12:b0:39:50:c8:38:2d:6b:
90:b8:0e:2a:67:45:ce:f8:7a:16:13:d7:a5:3a:58:
73:e9:23:fd:4b:aa:8f:0e:f7:df:6a:a6:7c:dd:51:
cf:e3:f4:03:28:05:c2:55:30:72:9b:99:79:23:bf:
72:62:1f:17:61:ac:48:36:94:55:fd:fc:51:8d:7c:
a6:a0:44:d8:d0:9b:76:b9:31:46:09:30:47:cd:59:
67:ee:3f:86:4e:0c:a3:41:ff:c8:17:b3:b0:5d:ce:
81:0e:d0:2f:3c:0b:41:3f:c2:3d:a2:8d:b7:e6:c4:
ce:ac:03:0a:65:cb:8e:e5:22:99:d0:39:e7:96:a5:
f1:f3:ea:4a:00:68:2c:3c:93:63:92:9a:6e:2c:3d:
c2:f4:0b:ed:22:33:b3:da:39:5e:2c:fe:aa:be:50:
11:d0:8e:28:f7:00:6a:3b:12:e4:b6:6b:da:f3:10:
15:ad:04:22:d0:23:7d:82:99:58:78:75:e3:96:60:
d8:f8:8e:12:6a:60:9e:b4:23:72:dc:eb:04:b2:2e:
51:bd:9d:ca:31:2d:e1:6d:11:1b:86:81:0d:ad:f0:
e5:8a:d7:9f:a2:a1:29:a2:db:9c:39:fe:c1:b5:6b:
29:88:a6:da:57:86:f8:f0:f1:4c:2f:f1:4a:ed:53:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:A4:CB:D1:31:06:B3:34:53:70:23:B1:7B:B9:29:D1:5D:74:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0A1D76A9EA911EF9273FF8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cc:c9:c7:6f:ba:e3:30:ab:19:f3:d1:eb:22:8a:6a:88:5a:
5a:88:24:ce:47:43:9a:f7:b9:3e:84:49:3d:9a:69:98:be:89:
f0:8b:c1:06:6f:d0:a3:49:9f:78:e4:f2:a3:86:ef:d1:c0:90:
5b:e5:a1:e2:89:76:d6:1c:bf:4c:9a:a0:6d:3f:f5:c7:c6:86:
07:88:c9:92:20:12:5e:24:e4:cb:26:68:78:17:91:6f:7d:6b:
78:3e:3c:00:77:b2:de:96:19:c5:74:24:b4:60:5e:25:c8:6d:
88:79:75:39:e1:9e:ce:10:1a:bc:e9:65:cc:4b:64:60:df:70:
7d:a1:1b:48:89:e1:0c:cf:87:a9:a6:26:b3:b7:c8:a4:70:46:
48:69:b6:b7:53:3f:c3:6b:f2:c1:60:01:c4:a8:af:8b:c0:df:
03:c9:fc:b0:26:f0:17:6c:4d:96:21:f9:b6:23:5b:33:70:bf:
72:be:8f:7b:4c:d2:5e:af:32:b6:a3:e4:c9:7a:c1:66:0f:ef:
16:08:6c:99:f2:f9:32:14:ee:62:51:a3:5e:c6:14:e9:95:7c:
82:ae:5a:69:01:9a:10:8e:cf:20:f2:0c:e4:55:c7:dd:ed:1a:
39:ad:72:5d:28:9a:a7:56:05:95:87:ae:4e:9f:25:34:f1:87:
ee:88:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org