Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86F8AD4A45611EFB29E3E6C762E951A.roa
File: B86F8AD4A45611EFB29E3E6C762E951A.roa (raw, json)
Hash identifier: 8kHNIKRQ5NH50fiRdxBVwd3BE9wUGLsI93L9xtC+M8o=
Subject key identifier: CF:F5:36:97:29:05:04:10:F1:2B:09:48:CF:E3:E8:3D:AE:CF:A3:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86F8AD4A45611EFB29E3E6C762E951A.roa
Signing time: Sat 16 Nov 2024 20:09:44 +0000
ROA not before: Sat 16 Nov 2024 20:09:40 +0000
ROA not after: Tue 26 Nov 2024 20:09:40 +0000
asID: 139880
IP address blocks: 154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69173 (0x10e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 20:09:40 2024 GMT
Not After : Nov 26 20:09:40 2024 GMT
Subject: CN=6738fc08-d39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:e1:0e:d1:17:e9:1b:8a:18:ab:41:0f:60:
8c:c4:1f:7b:ee:52:ff:2e:c9:0d:f6:e9:c8:de:3e:
10:2a:e9:5f:5e:45:73:c5:b7:b0:a4:46:7e:da:93:
fa:a0:30:a0:f6:86:c5:eb:a2:4d:13:63:e2:0e:69:
0d:23:90:1d:ba:8c:ac:ac:de:09:99:94:5f:cd:e7:
bd:c7:bc:3e:92:ea:37:a4:0b:7f:7e:1e:14:6b:ea:
b4:f9:b7:4c:52:0c:0f:84:df:1f:41:ed:7a:6f:65:
1a:08:75:d5:bb:c7:f1:63:49:fd:28:07:af:b9:16:
e1:43:bc:2f:c7:8a:37:43:bc:5f:9b:01:e2:68:9c:
ef:bb:34:4d:31:99:c4:a7:10:23:5e:0f:d0:7c:04:
63:2a:9e:70:bc:21:e4:ff:57:05:ef:10:bb:2c:2d:
ac:59:27:be:47:d8:cc:e7:86:df:79:b0:b3:7f:f8:
ba:e3:eb:58:05:f6:75:59:35:41:81:56:2f:e8:24:
35:f6:82:4c:f9:4a:76:04:45:49:fc:55:d0:72:31:
0a:94:69:d3:41:db:78:94:a4:63:cc:3d:c6:c2:0d:
3e:cf:1f:09:29:0c:21:02:ae:df:99:fd:4c:4e:bd:
d7:d0:79:ad:14:b2:92:80:b2:6d:ab:44:f8:29:0b:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:36:97:29:05:04:10:F1:2B:09:48:CF:E3:E8:3D:AE:CF:A3:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B86F8AD4A45611EFB29E3E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:3d:11:74:3c:31:b0:a8:71:97:58:1b:66:f3:4d:5b:32:b7:
61:88:97:4f:60:84:33:ae:ec:62:47:d6:4c:6d:62:17:10:4c:
c1:3c:f2:83:31:fd:a5:7e:f2:2e:07:a1:9b:bc:50:e8:19:79:
b4:d8:61:60:d5:af:ec:a1:bd:c1:a7:8f:b2:11:bd:93:58:89:
df:46:7a:db:75:01:bc:2b:67:f8:0e:ff:48:0f:36:79:83:99:
6c:54:2e:60:e4:b9:57:72:32:b1:af:54:fd:73:61:0a:77:14:
4b:cb:75:12:7d:35:6a:fe:dc:4e:18:15:9f:46:b5:ce:55:bc:
7b:b8:5e:85:53:29:ff:04:1c:bd:86:d9:12:aa:62:5c:5f:6b:
9b:b3:5e:71:c3:4b:29:d9:00:81:9f:3a:4b:fa:bf:e3:86:73:
ad:03:9b:89:21:e3:22:05:18:05:b0:d2:17:66:28:aa:58:f5:
2a:75:96:a9:13:d0:3e:b8:ad:f4:7d:f5:00:a6:7e:4f:ff:d4:
02:44:3e:12:be:c5:1a:2e:3d:45:95:34:6d:06:3f:9c:31:e3:
f7:f6:27:a8:21:94:c7:a0:84:b4:20:a4:97:52:7b:37:52:12:
71:e6:ca:ba:dc:51:f3:40:ab:9f:bb:f0:93:9b:97:b7:49:13:
a7:ae:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:41 2024 by rpki-client on console-ams.rpki-client.org