Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74AA622951211EFB56D0A98762E951A.roa
File: C74AA622951211EFB56D0A98762E951A.roa (raw, json)
Hash identifier: JCJkIvTwpIviQFbDzUjj90baa+i1uxMu6tGu1yKYtgw=
Subject key identifier: 5A:60:71:89:C5:21:A1:BB:8F:52:42:59:B4:3D:8E:FB:7F:9D:A0:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74AA622951211EFB56D0A98762E951A.roa
Signing time: Mon 28 Oct 2024 09:55:36 +0000
ROA not before: Mon 28 Oct 2024 09:55:32 +0000
ROA not after: Sat 30 Nov 2024 09:55:32 +0000
asID: 203020
IP address blocks: 154.200.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66251 (0x102cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:55:32 2024 GMT
Not After : Nov 30 09:55:32 2024 GMT
Subject: CN=671f5f98-cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:c0:85:3f:cc:46:ea:93:e4:3e:f2:8b:ff:
9b:ba:1b:f7:de:12:d4:0f:a5:50:ad:ab:c8:6c:f1:
52:42:d4:6a:25:bc:e4:d6:8a:c9:ed:bf:9d:77:b4:
b9:b4:5b:39:c1:43:98:75:d9:91:7e:2a:10:a7:54:
7a:63:29:60:5c:f8:c5:62:1f:8e:fc:cc:19:51:8d:
40:5e:5c:69:16:c5:bd:09:eb:cf:f8:a6:a6:71:02:
66:ca:49:18:08:c0:b1:d3:64:25:80:bd:b2:c9:50:
9c:12:4a:dd:ae:42:8b:64:91:e0:ce:18:99:3f:1b:
ae:65:ba:1a:00:19:ea:71:f7:a7:bc:01:cc:bf:fe:
6f:a9:93:1f:7e:62:be:f0:3f:61:5b:19:e9:01:42:
3c:2c:b5:84:ae:56:06:65:3c:d0:ad:7d:65:27:21:
72:9b:cd:f5:d1:d0:e7:39:ce:5d:cc:c3:41:40:6f:
85:7e:67:5b:5a:d8:29:f8:f5:29:94:2a:c7:91:cf:
db:a2:90:c2:2e:b3:ce:90:be:f9:66:dc:0d:a5:0b:
16:74:17:89:e2:d7:11:50:f7:bb:55:68:d6:dc:61:
fa:5b:af:8a:45:a1:38:07:81:f7:c9:3c:dd:65:1a:
80:35:e7:9d:ec:32:ad:9a:b2:33:2d:00:77:89:58:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:71:89:C5:21:A1:BB:8F:52:42:59:B4:3D:8E:FB:7F:9D:A0:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C74AA622951211EFB56D0A98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:50:cd:57:5c:90:b9:82:8e:44:d0:7b:0f:70:c8:30:47:c5:
57:75:2f:61:b8:b3:b9:53:ea:b8:e7:3b:f5:8a:ab:d6:f3:2b:
7c:63:3f:c1:17:a0:d0:88:91:aa:f8:87:ee:e9:a6:5b:7e:97:
0b:79:0e:07:3b:4e:ce:90:e9:90:d6:ee:ea:cd:cc:cc:45:fb:
bd:84:71:1b:7e:73:26:5e:49:73:9f:11:7c:10:74:c6:90:4e:
b0:af:44:ec:ea:ee:b2:70:92:09:db:7f:6e:78:14:4a:d4:38:
4a:63:d1:7b:29:91:04:ca:6e:3d:fe:ec:ab:b7:a7:de:73:d2:
68:ee:1e:ee:83:4f:e2:3d:1e:26:43:fa:2c:4a:8c:a6:54:22:
35:99:0b:9c:81:91:69:33:20:5e:46:b6:d2:0a:ad:bf:95:9d:
24:9c:42:3a:42:8f:cb:1d:f4:93:2c:3f:4f:82:12:9b:b6:2a:
17:dd:9c:fd:64:56:ad:d1:97:45:0d:d9:2b:3e:bd:d2:a7:25:
3f:09:6b:55:ca:86:7d:e7:5e:9f:f5:cc:15:05:23:87:58:14:
5f:9d:02:4c:6e:18:5c:0d:31:39:d1:3d:40:f7:34:17:26:4f:
e7:a9:02:83:7a:b0:1a:48:bc:58:54:33:ac:99:d1:5f:cf:71:
60:40:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:27 2024 by rpki-client on console-ams.rpki-client.org