Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B99FD9B891E111EFAC25CD7B762E951A.roa
File: B99FD9B891E111EFAC25CD7B762E951A.roa (raw, json)
Hash identifier: Opke9qjcW1EX0oRN48UbFhbfJFukAiminecGfwj+cSc=
Subject key identifier: 85:DC:FE:1E:D3:02:B5:28:22:66:FE:CF:D0:6C:F7:F3:32:85:07:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01011B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B99FD9B891E111EFAC25CD7B762E951A.roa
Signing time: Thu 24 Oct 2024 08:26:54 +0000
ROA not before: Thu 24 Oct 2024 08:26:50 +0000
ROA not after: Sun 26 Jan 2025 08:26:50 +0000
asID: 9009
IP address blocks: 154.216.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65819 (0x1011b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 08:26:50 2024 GMT
Not After : Jan 26 08:26:50 2025 GMT
Subject: CN=671a04ce-c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:12:50:40:8c:b5:c3:c3:cd:5f:b9:14:ea:
f0:63:2e:f9:4c:c5:09:5c:4a:05:fc:e1:04:2c:bd:
06:28:86:d0:04:48:cd:f5:91:cb:de:0c:e7:45:e7:
1e:fe:80:eb:5d:9e:82:7a:94:0e:f0:55:d2:a9:3a:
5d:d8:02:78:d1:e7:d5:4a:19:3b:ea:b9:85:f4:3f:
6b:87:47:93:c3:68:ee:53:1f:e7:3d:e5:d9:e6:7d:
1c:1e:f6:2f:fd:af:63:52:fd:cf:d0:95:c1:5f:d1:
eb:ae:4e:54:db:54:02:d5:1c:2d:6b:e5:39:86:66:
5d:b5:38:cc:8a:d1:f4:b0:88:09:4f:09:48:c5:85:
31:93:fe:d5:af:90:5b:ec:78:e6:da:91:57:96:b4:
bb:d6:0d:c2:97:0a:af:2e:e4:ce:ac:05:54:83:ee:
5c:41:73:59:6c:7b:2c:ed:93:ba:1d:f6:65:ba:5f:
30:1c:10:c8:4e:70:a4:a7:08:eb:ad:61:f5:a8:c0:
78:57:ab:fc:60:be:79:b3:15:d3:79:a9:62:fd:12:
d4:ea:56:fc:d4:27:3a:11:da:23:ba:82:58:04:de:
60:d8:a4:d8:31:34:6c:0f:ec:a6:6b:b1:41:28:41:
7d:4b:ba:3d:58:d5:50:d3:26:b1:11:8d:cc:9d:53:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:FE:1E:D3:02:B5:28:22:66:FE:CF:D0:6C:F7:F3:32:85:07:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B99FD9B891E111EFAC25CD7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:ee:7e:9f:04:10:e3:71:6b:d1:33:70:71:8c:c7:49:e1:d6:
23:e7:64:af:8a:68:73:0d:df:76:27:9a:39:f0:6d:a4:88:1d:
7d:e8:e0:56:ab:2e:f4:b8:cc:62:7c:34:6e:3a:46:c8:8c:fa:
ac:8d:49:dd:16:09:b3:0b:e2:02:91:28:22:60:3e:65:7f:7a:
28:59:54:6a:81:4e:6f:9b:43:ef:a9:1d:10:49:88:8c:b5:0f:
55:6e:d1:cc:e0:22:73:62:8f:d2:c5:59:c5:e9:d7:2a:e0:05:
1f:a9:39:eb:e5:3a:00:7f:83:0f:3b:7d:50:9a:05:e6:71:62:
a3:a5:5b:4e:b7:dc:cb:28:60:0c:53:59:55:c1:04:11:ca:6d:
db:bf:42:ca:25:38:47:c7:ff:64:ed:b1:bc:3b:2c:1e:12:46:
ab:12:ee:0d:a9:6b:e9:09:11:80:4a:cf:72:98:f3:25:28:79:
67:67:2a:18:22:d3:0f:81:90:21:41:1f:a4:6c:8a:6f:a4:22:
08:7b:65:e4:39:3d:af:83:8d:7b:3e:12:a6:42:03:91:61:95:
45:b4:98:34:37:9a:ec:53:9d:bb:f7:1a:69:a4:27:88:ee:92:
e9:cf:32:13:38:0d:39:3b:16:b0:98:bd:88:bb:a2:48:03:98:
ba:1f:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:03 2024 by rpki-client on console-ams.rpki-client.org