Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C448D1709AA711EF87D2E54B762E951A.roa
File: C448D1709AA711EF87D2E54B762E951A.roa (raw, json)
Hash identifier: YN6QcPVz54hrAvm0HJ/dNNryc1Ag7ymlXsu0Z8QAqZ4=
Subject key identifier: 0A:F0:27:87:25:B3:4D:37:CB:00:0F:DB:7B:C3:6F:6D:44:D4:68:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0106A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C448D1709AA711EF87D2E54B762E951A.roa
Signing time: Mon 04 Nov 2024 12:24:41 +0000
ROA not before: Mon 04 Nov 2024 12:24:38 +0000
ROA not after: Tue 03 Dec 2024 12:24:38 +0000
asID: 139646
IP address blocks: 154.208.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67232 (0x106a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:24:38 2024 GMT
Not After : Dec 3 12:24:38 2024 GMT
Subject: CN=6728bd09-0bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:0d:07:81:56:24:12:d4:f1:c4:e6:c5:cd:
92:ea:86:0d:dc:ed:5d:f4:a8:d5:3d:92:da:c1:b6:
b2:2c:c4:b8:79:41:3a:1b:f3:5d:35:9f:1d:f7:62:
72:97:c2:98:70:43:d8:f0:b0:12:1d:85:89:32:87:
89:d2:03:85:af:c6:40:d7:0d:e4:cd:85:48:96:84:
bd:d9:e3:ea:36:c2:79:8b:3d:29:b5:5f:5c:4b:17:
1e:c3:16:3e:e4:d6:15:45:b1:83:a2:cc:95:24:7e:
ae:37:2b:62:cb:bf:e0:7f:e8:4a:13:de:05:20:4b:
d9:f6:0a:7e:b2:cb:26:ae:0c:33:1a:e4:82:46:b7:
54:8c:72:0b:46:94:81:ec:7d:f2:e7:72:6e:4b:2d:
2a:7b:85:4b:e7:22:81:1d:23:ae:3b:6f:8b:2e:52:
ac:86:3d:28:90:71:cb:53:96:e0:48:dc:28:b5:0a:
1b:e3:f7:1a:3b:0e:0e:f5:2e:8d:a4:cc:c4:20:c6:
bc:b0:95:1d:28:68:e9:a7:e9:68:35:d7:ca:5a:73:
b0:2f:91:7d:97:2b:aa:48:1d:98:6c:9c:16:4e:39:
50:5f:48:3a:1d:e4:0a:e3:f1:31:9c:04:cf:26:78:
3a:19:c7:32:29:6d:fe:53:33:5d:5a:54:16:e3:ab:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:27:87:25:B3:4D:37:CB:00:0F:DB:7B:C3:6F:6D:44:D4:68:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C448D1709AA711EF87D2E54B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.12.0/22
Signature Algorithm: sha256WithRSAEncryption
61:70:a1:c5:9b:d7:5e:0b:ff:fd:b3:30:1c:83:60:36:06:f0:
f1:6e:ae:a1:bd:79:3f:25:3e:ea:f7:37:7c:d8:d4:e8:c7:6a:
3a:0b:b5:e8:d0:f8:0c:70:0b:2e:c3:dc:f5:0a:fe:8d:37:25:
7e:82:93:05:a7:99:33:05:a7:35:65:f6:6a:88:1a:cb:44:bb:
ab:86:33:82:0b:95:50:d6:cb:a7:17:1c:b8:27:4c:3c:1c:fe:
fb:91:c0:f7:3c:5c:ba:16:b7:49:20:a1:49:93:43:2d:a7:59:
31:be:cc:b8:2b:f6:32:9c:bd:ba:b0:a2:aa:86:cf:a2:dd:80:
06:21:16:6b:bd:8f:7e:29:b7:63:db:22:ff:b3:d8:b3:b3:25:
e4:34:16:81:35:48:3f:41:55:c0:d6:01:d9:ad:3b:18:99:f8:
7c:5a:d7:85:c9:a7:8e:a9:00:39:23:24:6f:22:34:1f:41:cc:
a8:19:41:ad:b6:0f:b0:6d:46:02:52:28:63:79:d1:93:3e:39:
7c:f7:79:98:d1:11:8e:71:1e:f6:cc:82:e6:2e:05:71:48:85:
ec:25:ad:f9:3f:04:ca:1a:a5:b5:d6:1e:4f:28:cd:42:31:82:
77:3c:43:9f:c8:de:af:d7:f7:dd:d3:89:82:01:a6:16:16:fa:
37:63:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org