Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BF06BA7B2111EFBDC0D9A0762E951A.roa
File: B0BF06BA7B2111EFBDC0D9A0762E951A.roa (raw, json)
Hash identifier: Aqko8kl9kBvB9SUhpqChlIeWwT7cJ1AJiFoqZWIq7aA=
Subject key identifier: 60:73:9D:35:1D:B6:EB:7C:E4:2F:CC:0C:C3:40:E0:15:2A:04:C2:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F358
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BF06BA7B2111EFBDC0D9A0762E951A.roa
Signing time: Wed 25 Sep 2024 09:36:50 +0000
ROA not before: Wed 25 Sep 2024 09:36:46 +0000
ROA not after: Tue 30 Sep 2025 09:36:46 +0000
asID: 211392
IP address blocks: 154.84.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62296 (0xf358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:36:46 2024 GMT
Not After : Sep 30 09:36:46 2025 GMT
Subject: CN=66f3d9b2-ff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:8f:5c:34:74:6f:7a:23:81:16:8e:ae:eb:
99:b8:a2:48:61:db:10:1a:98:38:ea:31:78:cc:0e:
2a:69:a2:0e:37:d1:39:bc:2d:56:43:1f:62:26:6e:
02:5c:99:66:67:44:80:97:fe:0c:d2:de:d5:81:e4:
c2:e0:21:13:43:89:f8:91:84:b2:b0:1a:6f:6f:61:
2a:f1:86:00:fa:4b:b8:85:eb:52:93:2d:52:51:ff:
cb:d7:c1:4a:7e:d2:b2:22:75:d5:bf:6a:de:75:b0:
dc:0e:1b:9e:dd:e9:f3:21:a2:d4:b7:86:b0:49:c3:
92:b3:21:22:42:30:aa:85:ad:d1:0b:e6:93:6c:12:
6d:7b:1d:a4:0b:9d:0f:67:01:4b:7e:d4:95:8f:16:
7c:37:fc:ac:2a:68:b4:9e:6c:2c:57:90:6f:96:4a:
fd:5d:1f:4f:40:61:47:2c:fc:02:4c:6c:50:cd:1e:
01:f1:d1:b6:13:1c:e1:2a:12:97:17:d4:38:fa:fc:
00:d3:b9:27:1f:f6:9b:2e:1f:60:ba:e0:90:30:b4:
f5:17:95:9b:a6:7e:12:6d:a6:61:7f:5c:99:a2:51:
77:56:3f:b9:2c:76:95:cb:6e:17:4c:da:56:2c:9b:
8a:67:31:cb:9f:ff:f5:41:40:4b:ba:73:36:92:63:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:9D:35:1D:B6:EB:7C:E4:2F:CC:0C:C3:40:E0:15:2A:04:C2:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BF06BA7B2111EFBDC0D9A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.14.0/23
Signature Algorithm: sha256WithRSAEncryption
67:df:3e:4c:57:b5:68:08:ec:12:ab:bd:3c:d0:e7:72:41:15:
ee:f0:6c:97:a4:f1:4e:cb:67:81:4e:36:88:4f:07:de:fa:ea:
df:90:8d:33:ff:c6:20:69:0d:20:06:6e:bf:ff:e2:0b:e4:06:
1c:cd:1f:d2:3b:0f:07:76:e6:3f:d4:3e:68:e6:8a:89:77:12:
2f:65:37:0f:77:fa:1e:f8:08:4a:17:d9:8c:47:5b:1d:15:13:
67:8f:3e:13:1a:31:17:15:99:ce:b2:d6:c6:3b:8f:a2:3a:03:
dc:96:5f:f9:f7:e4:09:fd:76:1c:be:38:17:1b:31:ea:ce:3a:
73:61:2e:d4:e5:d2:2a:7d:fb:7f:7f:bc:3e:70:8a:a7:97:9e:
42:a6:f9:df:b3:bb:4b:01:32:89:3a:c2:d6:a7:86:11:24:16:
16:fc:ee:ca:9a:d5:a5:d9:6e:f4:c6:1f:19:b0:02:fd:bc:8c:
f2:e4:b7:28:61:38:d9:34:c3:e4:9a:14:3f:58:d4:ed:b3:86:
5d:14:ce:ed:37:7c:db:6c:6a:02:e8:fa:ad:8c:08:8f:d7:2e:
2d:92:06:f4:6c:e6:64:7c:84:49:2e:23:0b:9c:56:02:8a:9b:
16:e1:32:34:00:8b:1b:2f:39:76:2e:eb:96:0e:53:17:8e:aa:
80:46:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:22 2024 by rpki-client on console-ams.rpki-client.org