Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3720A2C92DD11EF8E0084AB762E951A.roa
File: C3720A2C92DD11EF8E0084AB762E951A.roa (raw, json)
Hash identifier: zpa4KN3x+fcLdh6IaRfmdBdPxnLjx3KxGST5v42TyTg=
Subject key identifier: F7:91:F7:11:09:43:D4:AE:91:0B:14:1E:CF:F6:3C:96:20:6D:B9:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010232
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3720A2C92DD11EF8E0084AB762E951A.roa
Signing time: Fri 25 Oct 2024 14:31:04 +0000
ROA not before: Fri 25 Oct 2024 14:31:00 +0000
ROA not after: Sun 01 Dec 2024 14:31:00 +0000
asID: 44559
IP address blocks: 154.209.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66098 (0x10232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:31:00 2024 GMT
Not After : Dec 1 14:31:00 2024 GMT
Subject: CN=671baba7-f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:39:fc:44:72:75:e8:e4:ad:d9:88:d6:59:
3a:5b:bb:cd:ce:b5:af:35:9e:f1:7e:a8:17:ee:70:
0f:82:c3:04:7d:6c:d6:7f:df:65:e2:dd:68:66:e5:
6b:e8:16:78:de:90:12:04:aa:db:8e:c7:c8:56:d9:
ef:4a:e2:00:b7:42:29:5a:50:00:30:01:03:7e:83:
47:51:98:30:e8:7a:a8:3e:59:6e:22:11:47:ba:15:
9a:94:9f:3d:95:2d:f9:c8:bc:7c:0f:a4:8e:a8:fd:
08:8d:ee:85:cd:d0:fa:dd:2f:4b:87:21:6d:a9:a5:
78:62:fc:2e:bb:dc:ae:87:a6:c5:38:fc:d7:94:e4:
99:2e:c5:f3:fd:bc:0f:05:3f:68:6e:a3:f0:d9:50:
57:20:11:26:a2:9f:f8:96:fd:49:2f:f9:c0:5a:14:
c7:a0:cb:6c:69:70:e7:b0:f1:2f:90:42:ce:83:16:
59:29:17:2f:28:f4:49:59:73:31:5b:ca:0e:7e:ec:
cf:5e:39:c5:3f:25:d2:ee:11:91:65:5a:5a:f8:c6:
58:42:b7:54:cc:72:72:0c:a5:c9:f5:1a:5e:08:f6:
a0:b3:e5:54:b0:75:8b:b2:0d:d0:d2:a2:ea:3d:02:
8b:c9:2f:14:f8:a3:bb:94:d5:04:0b:ad:9c:e3:7a:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:F7:11:09:43:D4:AE:91:0B:14:1E:CF:F6:3C:96:20:6D:B9:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3720A2C92DD11EF8E0084AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.95.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4a:fd:af:eb:4c:57:62:b0:18:d9:9b:bc:0b:79:bd:78:1d:
a6:c0:7b:38:ab:5b:5e:a6:41:14:33:60:0e:fd:90:24:df:16:
49:08:d1:79:54:82:28:5f:f0:6d:35:88:86:ce:55:0f:26:3b:
60:e4:f5:51:69:99:cd:66:d3:35:bc:4f:64:62:92:ed:ad:ff:
e1:c3:d3:a6:48:c9:90:66:fc:fd:d4:59:9f:86:21:ae:80:d0:
68:47:8d:ed:87:44:cc:59:f0:de:54:e9:f6:89:c0:10:b9:bc:
bd:87:96:b1:1a:11:a3:cb:91:a2:6b:d3:e1:60:5c:70:48:8e:
05:d7:f0:65:15:b3:26:33:04:ad:3e:44:0e:b3:64:38:2a:7a:
7a:c2:75:48:2b:7c:c0:23:f4:d5:4e:6a:8c:df:ea:54:2b:84:
0f:11:c3:82:3f:eb:66:1d:c4:74:dc:a6:db:c1:33:57:86:d6:
76:a7:05:63:4c:1d:a1:aa:e9:98:2f:80:f7:40:77:08:52:9c:
52:7f:ce:d5:38:c6:7c:40:17:16:47:8f:43:fe:0e:fb:49:53:
03:24:36:77:10:99:7a:c0:53:2a:83:ee:94:54:8d:5b:b7:1d:
1e:0c:91:e1:f4:8a:ea:c2:7a:a5:d0:b2:a4:e0:da:a2:99:69:
93:2e:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org