Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF303264A0E111EF8023F883762E951A.roa
File: CF303264A0E111EF8023F883762E951A.roa (raw, json)
Hash identifier: izgYjS/L+PZQq+4eUtR+AVvgY7zGU0dGOuoQQkzZlCU=
Subject key identifier: F3:3A:31:22:18:A7:53:0E:01:AA:2D:7B:63:D9:19:87:16:7E:3D:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF303264A0E111EF8023F883762E951A.roa
Signing time: Tue 12 Nov 2024 10:35:18 +0000
ROA not before: Tue 12 Nov 2024 10:35:14 +0000
ROA not after: Fri 22 Nov 2024 10:35:14 +0000
asID: 5065
IP address blocks: 154.84.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68678 (0x10c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:35:14 2024 GMT
Not After : Nov 22 10:35:14 2024 GMT
Subject: CN=67332f66-e4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:c6:83:1c:62:3b:7e:8b:27:73:ce:37:51:
f0:b1:f3:fa:4c:eb:30:af:10:4e:e4:3d:60:dd:bd:
34:da:62:dd:6e:f8:2c:be:5a:f4:0a:e7:75:ce:7e:
7e:d4:e1:55:64:6c:37:76:10:5c:98:e8:7a:5f:6f:
26:17:eb:59:7b:e3:e4:aa:6c:48:03:1b:4d:83:c5:
59:db:5a:63:a0:d8:2a:8a:93:c2:31:da:91:28:e8:
7a:af:c5:d3:3f:48:f7:6b:f0:a0:57:07:da:a0:b0:
b1:a5:ba:73:09:43:fe:bb:cb:db:c2:0f:df:97:73:
bc:31:c8:97:77:57:1e:66:88:24:80:ae:24:13:f5:
b7:ec:a4:b9:61:49:10:60:9a:2f:7a:1a:78:8d:34:
ee:57:8a:96:42:43:c8:c9:ab:fa:03:d0:e1:51:31:
64:79:c4:88:06:4d:da:bd:8a:48:a4:73:f6:6d:c0:
f6:36:f8:a1:6f:d1:61:a9:49:ca:7b:20:84:30:13:
ba:75:c5:97:88:9e:12:b6:79:c4:68:38:2f:e3:24:
7f:c1:19:04:82:82:74:2f:98:f9:70:b3:ca:1f:9f:
f7:12:a6:c0:68:fa:c1:a7:98:ba:fe:aa:f2:57:58:
ad:1d:bf:2f:15:49:7f:b9:ad:e4:7c:2d:bd:9f:51:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:31:22:18:A7:53:0E:01:AA:2D:7B:63:D9:19:87:16:7E:3D:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF303264A0E111EF8023F883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:82:cc:aa:77:99:d5:df:f2:21:c9:21:91:f8:27:08:b6:41:
33:88:1f:24:6d:f7:15:ed:10:7d:2d:fc:da:4a:75:2c:e9:3d:
bf:16:76:63:7c:d3:23:6c:4b:51:4c:b8:7d:24:26:ff:ec:1b:
3d:b2:cf:a9:0d:bb:58:d0:f0:1a:1e:93:d2:36:14:aa:4b:7d:
62:cb:e6:52:d2:28:96:d2:0e:ed:14:26:75:aa:6f:a2:b9:39:
22:a9:38:5d:71:1d:0e:b8:c0:c5:6b:e1:ea:ad:8e:10:4a:89:
e2:2d:17:f2:51:be:62:f0:47:c5:e9:76:97:64:63:e1:17:02:
92:d2:33:21:81:45:bf:63:10:ca:e9:74:bd:7c:5a:f1:d3:22:
60:d9:1b:b3:d3:95:4f:b3:9c:94:c2:06:a8:63:f1:0e:62:a1:
c1:35:91:56:37:10:a4:dc:75:58:1a:4d:6b:a9:41:8b:b2:e5:
d3:a5:f2:5e:3a:55:8b:36:bc:3c:94:97:96:fc:a2:b2:e0:ac:
fb:d8:34:83:8e:ff:74:3e:24:3b:84:38:8c:a6:dc:a2:15:c5:
1a:33:5b:a8:cb:de:ec:a4:e9:6d:68:8e:c7:90:be:13:8c:9c:
ca:37:36:d4:9d:f9:24:9c:70:77:db:d1:7c:b8:9f:d0:a9:79:
24:b6:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:08 2024 by rpki-client on console-ams.rpki-client.org