Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EB0F2A986011EFB37E9B6C762E951A.roa
File: C3EB0F2A986011EFB37E9B6C762E951A.roa (raw, json)
Hash identifier: LjDiu89o66wuE7+nFhfKF7wEzZabP5lKq+JzYJKUah8=
Subject key identifier: 97:57:EA:F5:32:F4:C8:D5:70:D0:27:55:67:25:AF:B1:C1:E3:B0:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EB0F2A986011EFB37E9B6C762E951A.roa
Signing time: Fri 01 Nov 2024 14:51:24 +0000
ROA not before: Fri 01 Nov 2024 14:51:21 +0000
ROA not after: Tue 03 Dec 2024 14:51:21 +0000
asID: 203020
IP address blocks: 154.207.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66797 (0x104ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:51:21 2024 GMT
Not After : Dec 3 14:51:21 2024 GMT
Subject: CN=6724eaec-e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:8a:4f:2c:81:2b:c0:5b:b6:15:28:12:d8:
cb:7c:e1:a8:84:67:78:79:c3:a9:2a:1f:c2:c5:80:
a1:6e:f4:71:dd:ce:ff:5e:c0:c7:39:96:a6:ca:b2:
aa:25:8f:74:4d:52:b8:2c:c1:75:5f:48:dc:94:94:
f2:db:c2:55:67:c7:73:43:00:80:c3:39:02:ca:f1:
36:b8:7e:29:12:6b:5d:33:1b:ea:6b:de:76:9c:d1:
14:ba:54:11:21:d6:34:21:c4:44:f5:35:84:0b:6c:
25:c2:d8:1b:12:c3:9f:bd:39:24:e5:8a:de:b4:9b:
75:ff:4b:75:10:cd:ad:9c:b9:15:0f:a6:1c:bd:a1:
65:9f:a5:ff:11:4c:72:c9:9c:11:7c:17:b1:59:e8:
10:ba:2b:b4:ef:8e:7c:28:12:db:b2:65:1e:58:c7:
35:07:a2:62:84:2f:07:a2:7c:f9:f0:2f:80:e2:4c:
9d:b9:d3:e1:25:ee:62:f3:ce:bb:ff:8e:0e:e2:07:
c0:b5:a4:99:35:e7:04:b4:2f:28:0d:50:12:37:06:
bb:d7:b5:f3:17:24:3d:46:9d:7a:1a:43:a8:c6:08:
1d:81:b8:64:e3:f3:17:34:19:7e:8a:97:a1:ae:a4:
41:86:37:be:8e:43:09:e9:23:43:a8:14:c7:a7:b6:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:EA:F5:32:F4:C8:D5:70:D0:27:55:67:25:AF:B1:C1:E3:B0:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EB0F2A986011EFB37E9B6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d2:52:10:78:6a:23:37:81:08:ad:c6:75:a7:38:58:0f:a4:
7b:24:9e:3e:f1:fd:07:ea:65:d3:eb:85:fe:0d:5b:a8:1a:c2:
ec:4c:17:55:3b:01:c3:36:e2:ae:02:f1:18:f9:8e:b4:5f:d4:
2b:0f:b1:e4:92:ac:46:2b:66:ba:7b:c5:d7:a5:d3:f6:66:9a:
6c:80:8b:9c:dd:93:d9:39:3d:b4:9e:c5:bd:bf:c4:6b:09:7f:
b1:d2:12:e1:5b:77:6c:da:9a:a1:d5:98:88:8f:45:70:f8:ea:
ad:b1:05:75:4b:43:ff:85:95:3a:96:2f:b8:de:c4:e7:04:67:
2e:30:a3:8f:02:e2:c6:46:18:76:f0:e8:c9:49:4d:35:59:3f:
ff:e6:2b:19:e5:9b:46:36:20:f6:25:bf:86:63:be:1f:50:a1:
20:a4:f9:35:31:4b:6d:11:c0:d9:09:ad:39:3c:a1:f0:d7:61:
85:cb:46:5a:6c:54:84:bd:53:6b:71:12:1b:54:c5:2b:e9:09:
7a:bc:05:0e:38:85:ea:42:90:76:0f:d3:42:ed:6a:7f:3e:29:
38:bd:f0:de:43:c9:4f:79:2a:af:5f:43:17:64:8d:96:61:fd:
cc:d7:e1:34:61:2d:3d:bd:59:20:68:cc:91:f3:89:4c:53:1d:
03:3b:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org