Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AA55D2A44511EF93456E82762E951A.roa
File: B1AA55D2A44511EF93456E82762E951A.roa (raw, json)
Hash identifier: B7r+4eku9N/PQ4hYxr+y/ODphHQXKkuaT9ZmpkQkzU8=
Subject key identifier: 52:6B:E1:60:F2:30:22:07:78:3A:1B:8F:8E:28:86:A6:D8:CF:91:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AA55D2A44511EF93456E82762E951A.roa
Signing time: Sat 16 Nov 2024 18:07:51 +0000
ROA not before: Sat 16 Nov 2024 18:07:48 +0000
ROA not after: Mon 25 Nov 2024 18:07:48 +0000
asID: 5065
IP address blocks: 154.207.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69097 (0x10de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:07:48 2024 GMT
Not After : Nov 25 18:07:48 2024 GMT
Subject: CN=6738df77-076e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:ff:e4:4d:45:ad:20:8a:10:a9:81:97:7d:
de:91:78:1c:86:3a:e5:2c:0b:4f:59:21:57:9b:82:
76:13:d2:f3:18:ed:c0:b3:73:d7:ef:a5:68:06:de:
d1:dc:3c:57:ec:14:d7:b8:00:6b:e7:51:3f:bd:1a:
95:bb:a1:e5:8a:77:60:32:91:12:a2:5b:d6:39:26:
ac:6f:e7:2f:b7:f6:e9:52:3f:f3:7e:f0:5e:35:02:
67:47:31:dd:33:21:ea:75:c7:b2:95:64:83:8a:d3:
c1:bf:28:cb:cc:f9:0d:02:a3:48:39:55:10:8c:91:
a5:4b:23:01:00:72:1c:e1:49:06:71:b7:50:8b:9f:
4b:37:72:0c:d3:19:c7:f7:6a:bf:e1:44:da:b3:39:
ce:44:09:a9:51:49:34:86:35:3c:af:a9:50:65:0c:
3e:04:04:55:09:38:e7:fa:11:c0:34:17:6f:09:89:
1f:87:50:a4:67:33:a3:a7:4e:db:f8:17:49:b2:b8:
e5:e9:19:81:af:c7:a7:39:24:ea:d8:b3:19:b0:06:
e0:9f:52:7d:89:83:c2:c3:13:f2:4e:99:c2:66:5f:
7c:aa:10:e8:4b:24:a4:b9:4a:0f:88:23:18:48:de:
42:59:2b:0a:b5:79:db:45:da:8a:67:1f:d8:07:d8:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6B:E1:60:F2:30:22:07:78:3A:1B:8F:8E:28:86:A6:D8:CF:91:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AA55D2A44511EF93456E82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:53:03:f6:18:8c:22:e5:55:3e:e3:96:16:56:0f:6c:a6:5b:
14:b8:73:8b:5d:bd:85:1e:f1:e6:27:f0:f0:e1:9d:92:ed:04:
ea:8c:66:8b:6d:1e:1f:38:30:cc:2b:6b:54:1a:67:6c:29:87:
f9:76:66:d5:22:3a:1b:4c:d0:5e:f4:19:fe:4f:98:2d:94:e6:
ba:c9:2b:8c:f4:15:a9:a3:be:db:f1:28:bd:d8:f5:0f:ea:ac:
fc:72:ab:6f:a2:52:5a:33:f8:ba:ce:68:0a:a1:76:44:30:dc:
53:c0:b3:bb:93:3c:a3:b5:ff:ad:5d:e4:d2:79:f8:0c:d1:f9:
75:2c:f7:72:f1:c8:9f:bf:49:c3:40:74:80:bd:0c:09:bb:e5:
8f:87:12:46:9f:db:be:e5:83:9e:82:13:fa:e8:d7:62:2f:80:
19:7a:86:7f:f9:14:d2:bd:8b:d7:3d:2e:ed:2b:51:a7:70:cb:
ee:d2:41:31:69:b5:1a:ec:28:1f:47:29:9d:8d:59:87:ad:4b:
9c:d1:ad:da:a7:f8:c8:ce:ba:b1:98:a5:0f:48:5f:97:56:19:
df:62:88:3c:62:83:66:53:80:74:a6:26:fa:4b:6d:0e:28:07:
d2:03:e2:61:12:95:cc:48:b5:21:1a:38:f4:f6:19:0b:ca:f8:
2c:3f:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:01 2024 by rpki-client on console-ams.rpki-client.org