Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1D92C99F811EFA0D39479762E951A.roa
File: B6A1D92C99F811EFA0D39479762E951A.roa (raw, json)
Hash identifier: DJztrEprpy15RNQSSpZZrXZzcTDrf0Zf68SJbGSRiYw=
Subject key identifier: 4A:D6:33:15:A3:9E:96:27:3A:20:D4:6C:89:51:18:51:5A:BF:46:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010669
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1D92C99F811EFA0D39479762E951A.roa
Signing time: Sun 03 Nov 2024 15:31:37 +0000
ROA not before: Sun 03 Nov 2024 15:31:33 +0000
ROA not after: Wed 05 Nov 2025 15:31:33 +0000
asID: 18186
IP address blocks: 154.200.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67177 (0x10669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 15:31:33 2024 GMT
Not After : Nov 5 15:31:33 2025 GMT
Subject: CN=67279759-4e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:93:3f:c0:2e:4b:9a:0c:0b:1c:b6:45:85:
b2:df:71:8d:90:b1:90:96:09:c1:d3:aa:ab:34:58:
5c:d9:3b:19:49:08:7f:21:da:b3:02:7e:c9:ee:84:
7b:84:aa:7b:02:d8:8a:f8:e7:21:93:c9:d2:ff:ef:
f4:92:24:0d:d7:1f:d3:c1:c7:28:61:ea:6e:eb:ae:
03:37:fe:b3:f7:f8:07:4b:a6:d4:d7:13:38:9e:c0:
86:bf:2d:17:95:4b:4d:9c:48:85:3f:b5:0a:19:60:
69:f4:6f:83:ac:bd:52:b7:c5:fe:a5:36:5f:80:4a:
88:c2:5c:c4:8d:1f:64:e1:c3:18:76:7b:b8:32:8a:
85:50:64:e5:82:91:98:4b:9a:39:72:30:66:40:a5:
35:c7:61:6d:c0:9d:dd:08:b5:16:36:72:86:14:40:
28:8b:67:67:91:3a:e6:6a:38:29:a6:da:4b:33:ac:
a6:ee:60:22:28:7d:db:f3:da:32:99:5e:84:a9:bc:
3d:8d:f4:c5:1a:1f:c2:79:ef:a0:d8:34:de:d3:e2:
99:c4:07:cc:84:7a:4e:d3:5e:65:13:89:8a:66:d9:
48:32:1d:83:3d:9b:fd:a1:fe:d6:36:06:e6:df:4f:
a5:c3:35:b0:67:b4:6f:cc:83:4e:da:f3:c6:34:e0:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:33:15:A3:9E:96:27:3A:20:D4:6C:89:51:18:51:5A:BF:46:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6A1D92C99F811EFA0D39479762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.98.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3e:54:30:44:58:f8:52:f1:35:1c:6c:b0:c3:b0:da:ce:67:
30:45:ca:d9:0f:fa:e3:4d:7e:de:e5:e0:0c:22:f2:28:7a:b6:
3e:c0:f2:d0:e1:92:a6:2c:5c:86:8c:1e:7a:f2:21:f2:bf:79:
b8:97:2d:af:6c:47:d2:60:a6:e8:c3:1b:eb:7a:dc:97:7d:87:
81:5f:73:d4:b4:1b:76:3f:2b:27:7e:01:2c:47:1c:39:d4:1d:
1e:75:0c:bd:bf:fb:0e:26:73:d9:ea:7d:f2:bf:f1:a3:e2:a6:
42:1c:c1:33:23:12:3a:73:a9:5c:6d:e3:d0:a0:20:ba:b1:6e:
59:d9:3f:11:3b:ec:82:c9:5f:5b:b3:55:36:bb:ae:89:e4:b7:
f4:ce:24:7c:fd:1b:62:71:05:2f:56:8c:0c:12:fa:a9:93:78:
d9:d5:be:12:1e:29:0e:1f:c7:24:e7:7e:02:02:06:18:70:58:
c9:c9:95:f7:bd:f6:8b:a1:36:85:73:89:e0:2f:2b:e2:24:93:
c6:be:fa:dc:58:c6:66:5d:08:7e:5f:37:df:63:b1:c6:c3:5b:
73:60:f3:37:b4:28:3e:b1:32:37:37:24:ac:47:f7:8c:1d:d1:
cd:16:a5:97:e4:ad:dc:73:98:45:c4:81:6a:49:89:f6:58:2a:
af:bf:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org