Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC33FE76A0DA11EFBF2B9659762E951A.roa
File: CC33FE76A0DA11EFBF2B9659762E951A.roa (raw, json)
Hash identifier: JP1BuNaJAFXe100mpqXQ2wsVwiAzdTXFHgp5CeewoiQ=
Subject key identifier: FC:5B:F2:A0:70:53:15:F4:DE:D0:6A:2F:BB:6A:70:0F:1E:94:ED:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC33FE76A0DA11EFBF2B9659762E951A.roa
Signing time: Tue 12 Nov 2024 09:45:06 +0000
ROA not before: Tue 12 Nov 2024 09:45:02 +0000
ROA not after: Sat 07 Dec 2024 09:45:02 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68650 (0x10c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:45:02 2024 GMT
Not After : Dec 7 09:45:02 2024 GMT
Subject: CN=673323a2-e241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:50:53:c6:e2:d1:0c:ea:bd:80:09:11:0b:
4d:eb:e9:f0:fa:8a:51:49:96:c3:40:eb:ba:cb:89:
7f:f7:12:a3:af:70:9b:bb:73:66:5b:f8:0e:89:70:
0c:ae:a6:63:10:c8:87:8c:d6:c3:3e:0e:92:47:53:
7a:f4:dd:6e:eb:7a:c6:cd:3f:61:4b:e4:b5:3f:f2:
80:d1:eb:d2:e2:45:12:8c:d9:00:6a:b8:e1:68:ae:
bb:2f:ee:40:92:7b:5a:2c:08:d4:50:56:71:92:82:
13:b0:6b:58:51:16:1f:c3:cd:c7:6d:ec:52:4c:fb:
ad:9d:f5:69:01:07:90:e0:1c:82:d7:63:24:6d:16:
4f:cc:ea:07:73:18:79:46:be:56:a6:15:4d:c2:00:
93:79:cf:2f:89:ad:38:19:66:9f:90:e6:9e:55:06:
58:44:47:c0:6d:6e:c4:95:a4:58:a1:5b:c9:aa:f8:
03:b6:dd:41:55:e9:60:c1:ea:a5:6e:91:b4:47:3e:
93:03:f0:5c:c7:73:e6:c0:11:94:d5:3e:79:51:f7:
f5:a5:80:dc:31:64:99:78:35:35:f7:ef:1f:93:c4:
49:71:75:1f:00:aa:7b:7c:a6:08:91:5d:7f:97:61:
99:75:37:37:aa:7a:0d:9a:3a:1a:07:9e:3b:1b:f9:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:F2:A0:70:53:15:F4:DE:D0:6A:2F:BB:6A:70:0F:1E:94:ED:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC33FE76A0DA11EFBF2B9659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:57:98:5c:80:93:48:f0:63:87:5b:d4:ae:c8:2a:09:70:33:
bc:41:82:10:a3:73:49:ef:64:37:ee:e2:6f:c6:31:1d:a2:fa:
6c:1b:3e:72:6e:b2:e0:b7:1e:ba:db:0a:91:5f:8f:7f:9e:05:
f6:9c:e2:0e:8a:0a:55:98:f1:f7:a3:3b:cd:f4:5b:80:0e:00:
9d:64:32:5a:c3:1d:7d:6e:df:5b:84:9a:f2:22:29:ef:b1:aa:
1a:46:37:41:16:cd:f5:a0:58:3d:d6:52:eb:bc:be:a4:a2:51:
c9:5d:fa:72:14:e3:cd:4b:1b:60:21:3c:db:dc:ee:74:dd:f6:
6b:a5:71:7c:5e:97:01:bb:4e:63:3d:d8:bb:05:55:80:60:ef:
ea:91:67:a1:c5:13:fa:21:d8:54:ba:00:75:99:7c:ef:62:12:
eb:9c:21:bb:c6:83:8f:ac:ca:cf:44:d1:07:51:4a:69:1a:9a:
fa:88:25:77:7e:69:7b:76:e2:2e:08:da:30:0b:19:87:6e:6f:
05:42:7b:a1:08:22:e0:07:da:81:7c:8e:ad:0e:6a:21:a2:44:
8d:92:9f:46:20:31:57:ce:62:53:63:ed:ff:e6:b9:0f:e2:7b:
04:10:02:92:22:68:0c:9a:4a:a5:e2:07:46:01:e9:05:6f:a6:
5a:03:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:28 2024 by rpki-client on console-ams.rpki-client.org