Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2B7DFB4A8EC11EF869F2B47762E951A.roa
File: D2B7DFB4A8EC11EF869F2B47762E951A.roa (raw, json)
Hash identifier: h5Am1A/NRmvwrBCxRm/PL76205AP4ammQU2xIWaGOF8=
Subject key identifier: A5:8F:D0:F7:8E:76:5D:83:37:24:B8:29:37:FE:34:45:EB:04:61:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011121
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2B7DFB4A8EC11EF869F2B47762E951A.roa
Signing time: Fri 22 Nov 2024 16:14:17 +0000
ROA not before: Fri 22 Nov 2024 16:14:14 +0000
ROA not after: Tue 03 Dec 2024 16:14:14 +0000
asID: 62240
IP address blocks: 154.195.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69921 (0x11121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:14:14 2024 GMT
Not After : Dec 3 16:14:14 2024 GMT
Subject: CN=6740add9-0c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:c7:0a:80:4c:ec:f7:3b:5c:d1:ef:e6:4c:
e4:0c:19:93:25:eb:5f:79:8a:cc:d2:54:da:bf:6e:
4f:46:2e:da:11:8a:af:0f:9d:44:be:2a:b8:df:c0:
d8:b0:1d:28:fd:6e:25:84:21:22:16:b5:74:c4:79:
9d:46:69:40:a6:77:e2:1d:8c:e3:b8:74:d6:da:68:
25:d0:3a:f3:86:d5:8f:47:b9:7e:e1:36:ee:c8:84:
45:ba:78:33:40:6b:5b:30:1e:b3:43:0b:50:e1:b0:
72:72:0a:c1:f7:b6:02:57:91:ab:19:0c:75:4e:04:
e1:b1:53:4d:ef:63:9e:78:99:51:52:54:0e:c6:0a:
6f:42:95:50:03:ad:86:8e:46:69:3c:be:48:ed:cb:
fc:d6:16:d3:80:f2:03:41:a8:7c:21:53:59:73:0b:
0b:ae:dc:9f:24:64:3a:72:71:9e:6a:27:82:81:8b:
e9:9e:6f:67:ae:9e:f6:21:f8:77:bb:f4:58:f0:ff:
33:64:08:ae:ce:d5:d9:cb:ad:36:85:6b:56:09:f6:
a8:63:33:5c:3c:6a:3a:87:93:33:bf:75:57:21:29:
a6:ce:00:78:f1:2f:96:54:3f:2b:6b:52:47:74:39:
fd:24:53:37:a0:16:33:77:19:9a:5d:8e:26:ed:4d:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:D0:F7:8E:76:5D:83:37:24:B8:29:37:FE:34:45:EB:04:61:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2B7DFB4A8EC11EF869F2B47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.140.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2b:f6:9f:59:d6:46:97:24:b7:a1:7c:74:04:eb:9c:e1:b4:
3e:59:29:be:a6:b2:a3:a8:05:50:b5:9c:d3:35:5e:2c:0b:1e:
04:8b:c2:91:a8:0a:f8:b8:51:36:ec:eb:c0:5b:84:47:5c:81:
35:0c:9f:84:91:31:b1:71:60:b0:b4:7d:b7:92:78:79:91:2e:
91:41:90:97:de:16:06:6f:2c:df:69:fa:f2:6f:01:50:f6:24:
91:5a:6d:dc:6e:82:7e:69:59:f0:ba:83:d8:26:40:4f:d5:92:
6c:c7:11:c7:e5:64:7b:b2:ba:6c:85:ea:be:e4:19:11:64:a0:
83:77:93:7b:88:bf:ff:06:03:91:bf:b7:df:8b:e9:fd:57:a8:
84:45:f2:a5:81:f4:42:68:46:01:3e:44:04:11:9b:1d:47:c4:
4b:b2:d6:05:2d:7f:e4:68:84:9f:d3:6a:0f:7b:48:82:ba:f1:
64:9e:eb:0f:b4:ed:b5:38:7f:13:1d:98:8d:d5:62:0f:61:11:
f2:5c:75:60:ad:7a:d4:eb:3e:e2:3c:27:b9:7d:d3:e9:bd:6c:
94:d8:88:86:11:ad:53:1f:2b:94:9b:cf:28:24:15:01:eb:6c:
58:e2:8e:ba:3f:26:c4:1b:c6:1a:19:07:a6:14:1f:2c:89:c9:
4c:51:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:38 2024 by rpki-client on console-ams.rpki-client.org