Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8131298A92011EFB9E64888762E951A.roa
File: C8131298A92011EFB9E64888762E951A.roa (raw, json)
Hash identifier: kMuvFT3x8EAkqg7BN4AoWkmQjFKsJaB3RG4qC8HjwBY=
Subject key identifier: E5:EB:F9:2E:8D:88:37:7F:92:EC:2A:1C:24:D0:56:66:4A:0E:0B:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011163
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8131298A92011EFB9E64888762E951A.roa
Signing time: Fri 22 Nov 2024 22:26:13 +0000
ROA not before: Fri 22 Nov 2024 22:26:10 +0000
ROA not after: Tue 03 Dec 2024 22:26:10 +0000
asID: 62240
IP address blocks: 154.196.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69987 (0x11163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:26:10 2024 GMT
Not After : Dec 3 22:26:10 2024 GMT
Subject: CN=67410505-778b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:cd:95:e8:66:aa:bb:3c:db:18:33:20:a5:
af:ee:ad:61:1a:cc:e1:ef:6f:25:38:73:4f:a1:86:
2d:b7:5c:a2:9d:57:a4:50:47:fa:61:28:4c:5b:5d:
51:55:64:ee:a0:a7:83:2f:00:20:d1:aa:b3:97:68:
8b:06:ff:e7:a7:18:77:51:d9:af:64:89:d2:7c:a1:
51:fb:88:db:11:f2:18:b8:c3:5b:80:2d:df:fe:53:
30:62:22:23:0f:d9:28:aa:4f:38:66:14:a7:21:06:
cf:47:7f:dc:f1:7d:28:c1:67:2d:15:1c:6d:44:bf:
54:db:95:1c:1a:de:56:e4:85:3d:32:f9:99:48:27:
0b:21:fe:19:dd:28:c0:04:ef:0e:87:3c:f7:e6:d9:
7b:3d:0d:cf:1c:28:1b:3a:cd:62:f9:05:a4:0e:b5:
4e:e8:e0:26:a7:ea:dd:a1:e6:53:ab:9d:10:9b:04:
81:37:87:0d:92:29:9e:ac:eb:4f:be:aa:9d:80:6b:
6b:14:db:0f:42:a4:3c:ad:32:b1:d2:2d:9a:fd:d9:
b4:4f:a2:30:87:f4:33:1f:b6:da:7a:69:d8:9c:1d:
db:cd:fb:32:2d:09:74:e8:e1:42:be:90:89:0f:2f:
28:5a:63:80:fa:05:97:d7:47:d4:a4:dd:1f:de:4c:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:F9:2E:8D:88:37:7F:92:EC:2A:1C:24:D0:56:66:4A:0E:0B:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8131298A92011EFB9E64888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:1f:1c:41:ea:47:6c:eb:dc:42:52:7c:49:f3:17:bd:28:fc:
db:13:5a:2a:f3:59:e1:b8:a7:86:67:53:1f:7a:6d:dc:1d:4a:
34:f5:0a:59:6c:61:92:96:ef:96:79:95:42:fe:dc:97:5f:c0:
55:80:a5:3f:59:b2:fe:66:2f:7a:0a:14:bf:d0:0d:28:10:d1:
c4:07:56:7d:b5:0f:39:a5:fe:2c:ad:da:6a:e0:27:db:bc:8b:
a2:ea:5c:8a:fd:ff:e8:f9:be:9e:61:39:05:b1:b3:fc:90:7e:
bd:7e:a7:5c:4d:b8:5a:94:ae:5e:7b:4c:9d:4b:0e:a2:39:41:
52:69:5e:99:45:89:d9:00:a9:78:33:82:c0:01:24:ff:e6:f9:
62:e7:a6:d9:89:1a:63:37:04:3b:e6:92:2c:7d:5d:b2:b8:7e:
b6:31:8d:04:f2:98:21:88:8c:de:26:23:b6:92:2e:e8:9f:6e:
3b:60:28:1a:2b:08:88:99:19:6a:ce:d4:f6:fc:f6:64:ae:bb:
d1:8c:b0:aa:92:32:fd:64:20:2b:61:59:91:1e:7b:42:35:71:
3b:ae:c1:27:4f:6b:7a:82:0c:84:cc:45:39:6c:04:92:2b:35:
15:30:15:5f:4b:77:e3:b7:bb:18:bf:b7:63:f0:59:20:8f:d7:
ca:55:b6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:35 2024 by rpki-client on console-ams.rpki-client.org