Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D63B72A8EE11EFB5484E52762E951A.roa
File: B1D63B72A8EE11EFB5484E52762E951A.roa (raw, json)
Hash identifier: 82BwfSBuLmB9v0S9YwjXO5YXTqUHC3Uw8tHT7Ipr0Jg=
Subject key identifier: E1:44:BA:58:26:28:A2:A4:08:26:75:CA:18:68:7B:7B:CD:DE:EF:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011137
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D63B72A8EE11EFB5484E52762E951A.roa
Signing time: Fri 22 Nov 2024 16:27:41 +0000
ROA not before: Fri 22 Nov 2024 16:27:38 +0000
ROA not after: Tue 03 Dec 2024 16:27:38 +0000
asID: 62240
IP address blocks: 154.195.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69943 (0x11137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:27:38 2024 GMT
Not After : Dec 3 16:27:38 2024 GMT
Subject: CN=6740b0fd-e46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:17:15:4c:26:02:53:b4:0a:87:0e:5f:63:
52:a1:bb:09:3e:d6:46:22:0d:81:1b:de:1d:24:3b:
f7:1a:3e:1d:a3:98:31:b8:89:b9:7a:68:86:69:ec:
cc:49:96:ce:24:ca:98:9a:aa:6a:67:da:d4:23:44:
6c:1d:88:d8:bc:c1:d3:ba:e9:59:37:23:f7:ca:c6:
af:1a:de:10:9f:0a:0a:2b:df:b9:e1:90:af:bf:81:
64:b5:73:85:05:0b:81:96:cd:60:de:41:40:e4:1e:
18:69:0f:0b:99:1a:4c:2d:7f:20:8f:50:68:14:47:
46:b7:c7:98:4e:ea:66:1d:e0:9c:db:21:9e:e8:8c:
74:33:df:57:c1:87:cc:bf:07:0a:02:7c:eb:50:99:
a0:55:4d:bf:67:15:92:8a:09:c9:76:e2:3b:b7:aa:
ad:3f:b3:00:82:d7:51:bc:32:5b:7b:b0:0f:8d:e1:
56:39:6b:4f:64:34:98:a7:46:18:47:28:65:2b:51:
90:46:c3:bd:97:91:a6:41:6b:2d:91:56:3e:d0:e5:
5b:ee:b4:ae:21:4c:91:dc:fe:cc:20:8f:b6:d5:bf:
97:d0:be:16:da:77:5e:0c:0e:c1:d2:cb:3f:be:3e:
20:b4:5c:e0:cd:46:5b:e9:25:e3:98:e5:97:92:21:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:BA:58:26:28:A2:A4:08:26:75:CA:18:68:7B:7B:CD:DE:EF:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D63B72A8EE11EFB5484E52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.150.0/24
Signature Algorithm: sha256WithRSAEncryption
46:72:43:58:9b:a4:f6:8d:09:d6:a8:e1:80:d5:1a:e7:1c:e1:
47:93:88:cc:ab:be:9a:dc:28:72:86:a0:ff:74:55:f8:82:4c:
ab:2d:b5:0b:ae:21:64:72:38:04:dd:74:dd:7a:ac:af:eb:c9:
d1:92:56:57:7e:74:c6:3c:51:2b:06:72:ef:a6:ff:f8:fa:a4:
da:7e:cb:00:de:56:da:6d:32:d9:a6:ba:de:5a:97:62:47:ba:
68:f1:da:e1:e9:ac:74:fa:e0:de:19:bd:57:88:a8:6c:5b:ba:
95:74:99:09:02:8a:86:87:a5:3d:9f:df:0a:ac:44:83:ab:78:
23:0b:d1:49:a8:1e:7d:5f:0b:b1:fa:34:04:6c:c3:1d:2a:25:
5e:c3:17:9e:98:b0:40:d5:8a:eb:c7:8e:18:c0:57:68:9f:8f:
5e:44:c6:e8:0a:a5:e6:49:58:4a:5e:24:38:e0:98:fa:36:23:
4a:30:91:e6:e7:f2:9c:81:ff:cf:74:bd:ba:ae:f5:f6:77:a3:
b9:ad:2b:77:c5:02:f2:a2:c8:a8:52:dd:52:03:78:bb:c3:03:
ec:32:0c:cc:6d:2d:8c:d5:18:39:ff:5a:3d:4e:4e:9e:33:34:
b7:e8:ab:1b:71:b3:61:e6:9d:c5:e1:7f:40:d2:bf:66:8d:02:
09:25:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:30 2024 by rpki-client on console-ams.rpki-client.org