Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F30CEEA00D11EF9DBD8251762E951A.roa
File: B8F30CEEA00D11EF9DBD8251762E951A.roa (raw, json)
Hash identifier: iy43UQPAGAeUsTwYh8StKa8vM2Omn6RHuaH3wRnsD6Q=
Subject key identifier: 9F:DD:F5:DE:D9:B3:99:0D:94:F3:39:65:B1:23:EF:16:A0:60:A5:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F30CEEA00D11EF9DBD8251762E951A.roa
Signing time: Mon 11 Nov 2024 09:17:07 +0000
ROA not before: Mon 11 Nov 2024 09:17:03 +0000
ROA not after: Fri 22 Nov 2024 09:17:03 +0000
asID: 51396
IP address blocks: 154.213.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 09:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68581 (0x10be5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 11 09:17:03 2024 GMT
Not After : Nov 22 09:17:03 2024 GMT
Subject: CN=6731cb93-cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:8e:c5:31:86:45:b1:9a:24:75:c5:30:c2:
60:aa:8d:e7:70:3c:3c:e7:08:1e:c9:1a:97:9b:74:
1c:b8:b8:bd:9c:e5:5c:69:f3:e8:77:c2:6e:90:8f:
9b:dd:79:78:5e:29:3e:9c:0b:ee:40:d8:f1:5c:af:
7a:52:c7:c6:cb:0a:dc:06:19:41:82:51:5a:a6:0d:
17:36:17:cc:da:f3:17:17:b1:97:75:79:93:79:78:
76:65:b2:42:59:ea:44:ef:97:95:f6:cd:d0:7a:a7:
d3:2b:42:f7:fc:b3:8b:57:13:63:28:d8:f8:47:50:
33:14:59:9d:bc:12:a4:95:37:32:f3:af:e2:0d:fa:
f0:d9:4d:01:60:c4:9a:a9:67:08:3f:73:bd:42:59:
8d:07:1b:00:e4:f9:13:20:d1:88:93:1f:53:91:75:
96:ca:e7:06:73:8a:08:b6:a1:7e:80:3c:0f:df:c2:
59:25:7f:02:86:20:ad:20:ee:93:17:68:68:e6:0d:
b7:22:de:48:48:d1:ca:57:de:c2:bb:ff:07:76:71:
2c:62:ae:30:18:08:d7:a7:38:cf:df:fc:ab:18:44:
0c:09:7b:42:36:7f:cc:97:3c:17:3c:2e:37:51:1e:
a8:70:e8:55:ef:cc:3f:48:d3:5f:6b:88:eb:82:76:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:F5:DE:D9:B3:99:0D:94:F3:39:65:B1:23:EF:16:A0:60:A5:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F30CEEA00D11EF9DBD8251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0f:15:33:8c:45:08:19:16:e6:53:f9:b7:bc:8d:e1:fb:05:
15:75:a5:14:91:f3:b7:14:d8:84:1b:aa:1d:c0:20:7c:33:91:
c7:37:4e:0a:fe:9e:66:b2:4b:d2:70:8d:0f:2c:0c:fc:3d:07:
de:13:69:d4:c4:00:9f:59:69:30:c9:fc:1a:d6:d0:2b:95:e3:
2a:3d:26:b7:5f:10:13:69:c6:c6:ba:3d:e0:3d:46:b3:65:1a:
c7:c8:7a:c0:ba:cf:fa:91:39:cc:40:2f:91:c4:4f:52:f3:87:
24:5b:a2:b5:89:2b:5b:aa:4e:92:8a:3a:44:53:50:dc:4c:f3:
44:47:f6:14:82:2a:5d:fd:3b:9f:5b:b3:6d:25:89:b2:d9:aa:
02:af:fe:17:08:29:df:8e:4c:b1:b9:fe:12:7e:90:4c:98:f2:
f2:ac:9f:4d:c5:ae:4f:49:90:50:e0:2d:95:ce:c7:65:e7:c3:
fd:f2:2a:a6:5f:e7:57:8a:66:08:21:fe:19:db:be:bc:e6:69:
1d:5d:d3:58:8b:65:20:c6:34:da:9d:7e:87:41:b4:1d:3e:3e:
20:37:4d:81:37:a0:e8:d0:81:88:c4:a0:e6:22:9c:9b:82:2c:
dd:1e:07:b6:c3:30:76:9c:93:17:3f:b0:ab:4b:2e:ce:9a:8e:
e1:22:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:03 2024 by rpki-client on console-ams.rpki-client.org