Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372308CA9AE11EF8496C58A762E951A.roa
File: C372308CA9AE11EF8496C58A762E951A.roa (raw, json)
Hash identifier: 0o/U8FBFqIB+cDACspU7H7dh9TMjvknAfzLcx8bcHX4=
Subject key identifier: AC:3F:E5:48:81:1D:EA:C1:2F:37:70:A1:EE:CD:E7:95:4B:55:71:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011192
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372308CA9AE11EF8496C58A762E951A.roa
Signing time: Sat 23 Nov 2024 15:22:34 +0000
ROA not before: Sat 23 Nov 2024 15:22:30 +0000
ROA not after: Thu 26 Dec 2024 15:22:30 +0000
asID: 197547
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70034 (0x11192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:22:30 2024 GMT
Not After : Dec 26 15:22:30 2024 GMT
Subject: CN=6741f33a-2c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:ac:2b:92:f1:1f:aa:cf:2e:66:d3:30:7c:
19:f4:9d:06:c4:aa:6f:f4:20:9a:0b:36:d4:1f:d1:
9d:b0:0a:68:d9:a0:ea:78:f0:29:37:56:7f:f5:22:
49:c8:bf:22:72:46:b3:d1:5c:09:d3:fb:85:6d:65:
ed:08:95:79:ff:ee:2a:19:16:d6:0e:31:a2:ae:c3:
5d:16:56:b8:ae:89:36:a1:bd:ee:35:f1:64:cb:89:
20:81:f7:d3:52:ae:86:14:d0:7d:88:4c:9a:d5:69:
78:79:9f:aa:35:b5:e3:cd:3d:aa:bc:86:ec:ee:fe:
a8:17:a4:33:e5:8f:a1:19:2d:65:a7:ba:bb:f6:e8:
ce:74:bc:64:cd:ed:b3:0c:23:94:9d:f7:54:05:4b:
7c:4b:a4:34:9a:8e:5f:1b:5f:43:29:fc:25:58:a4:
63:f4:1a:01:e0:c4:23:6c:76:f0:87:f6:84:7c:ee:
10:fe:0a:cd:9e:af:fc:7f:24:06:0b:0b:04:27:99:
8e:27:a6:65:a7:03:36:10:44:8f:8d:46:e5:20:b9:
5f:b3:df:35:4e:9b:66:58:4e:36:6f:63:19:a0:4f:
9c:75:b8:5b:86:07:42:84:9a:86:46:a1:25:5f:5a:
f9:8b:63:65:8c:55:fd:6f:b2:19:0c:76:c7:8f:0e:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:E5:48:81:1D:EA:C1:2F:37:70:A1:EE:CD:E7:95:4B:55:71:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C372308CA9AE11EF8496C58A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:54:ea:b2:55:a4:0b:0c:63:a6:5e:f4:a0:94:54:56:3f:d1:
40:54:f6:6f:b5:a0:6d:bc:65:e5:79:05:b0:9c:16:1b:e7:27:
cb:b1:bf:fe:91:af:a7:00:af:f3:4f:18:d7:c0:56:fb:5b:1f:
b1:19:a6:9b:80:a7:48:61:05:fe:37:a4:b1:15:8a:5e:b8:29:
29:82:35:b6:8c:60:e0:24:b9:74:d2:f4:b3:41:57:c4:1d:42:
ca:98:15:ce:24:59:64:bb:86:d1:0d:33:05:ed:3d:da:cb:6d:
0a:ac:77:73:35:86:b0:fd:f9:54:6a:a7:a4:d0:d6:bb:cc:e3:
46:4b:6c:f6:8a:d6:77:75:df:a9:12:22:6c:f1:a6:2d:53:7f:
22:8e:c3:ba:00:fd:b6:d2:9a:d0:49:60:0b:c5:be:38:a7:6b:
ea:70:7c:a9:56:6f:8c:45:1c:d7:35:23:91:d6:73:b3:be:4b:
f1:11:f1:1a:49:41:70:53:28:bc:df:e6:5e:ec:60:90:4f:52:
d6:c8:f6:2f:a5:8e:82:6f:99:c3:db:e4:86:75:db:5c:2f:93:
07:70:42:f2:fc:53:21:d6:0d:76:01:2d:93:a3:ef:82:60:10:
0a:d8:cb:c4:db:01:b9:47:c6:9a:c0:2f:3f:78:ed:5c:98:21:
d3:68:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:34 2024 by rpki-client on console-ams.rpki-client.org