Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5825C1E985D11EFB777685B762E951A.roa
File: D5825C1E985D11EFB777685B762E951A.roa (raw, json)
Hash identifier: Z+k3cAlT3tzZBH7vpyryrVmevMg5z0qnlDHE/4fpnqc=
Subject key identifier: 1C:C8:58:A5:27:C8:82:C4:25:CF:7B:F9:3F:24:3F:2C:AF:ED:87:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5825C1E985D11EFB777685B762E951A.roa
Signing time: Fri 01 Nov 2024 14:30:25 +0000
ROA not before: Fri 01 Nov 2024 14:30:22 +0000
ROA not after: Tue 03 Dec 2024 14:30:22 +0000
asID: 203020
IP address blocks: 154.208.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66761 (0x104c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:30:22 2024 GMT
Not After : Dec 3 14:30:22 2024 GMT
Subject: CN=6724e601-ba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:91:a6:54:68:6e:f3:61:b0:09:86:db:e0:
ef:78:99:eb:c0:96:ea:cf:44:8f:86:cc:1c:3c:18:
27:e0:c4:19:cd:5c:99:95:e8:98:8f:e2:a2:12:3d:
8b:0c:73:7b:33:9e:7e:79:e5:f7:da:cd:6d:55:45:
0f:a8:4f:8d:36:8e:91:4e:23:48:81:5d:56:40:15:
dd:59:0b:e8:70:91:a4:2f:c9:38:b3:1a:b2:8a:48:
dc:45:a9:48:af:a1:8a:a3:b6:fe:39:49:2c:19:52:
1e:0a:19:45:8e:f7:62:52:ab:be:ea:b8:52:82:b7:
15:9b:e8:53:05:6e:fb:5d:80:1b:8c:37:9f:c4:47:
6e:62:09:7e:92:85:57:3f:cd:6d:aa:71:b3:16:4e:
3c:11:fd:4e:b8:63:e6:f1:2e:3d:95:7d:02:08:13:
49:ea:f9:66:05:dc:e9:22:57:49:b0:f4:8b:8c:2c:
c3:7a:4c:9a:ad:c7:48:3a:bb:60:31:f3:3f:7a:ca:
c8:82:d0:bf:f0:e6:bf:6d:c4:b3:01:5b:55:9e:df:
b5:88:a0:25:b4:38:b4:af:b6:a7:d5:60:a7:10:c6:
e5:a2:a5:2a:5e:a0:33:5e:e7:71:a9:0a:ed:ef:67:
10:39:4d:98:46:ed:da:62:c7:cb:56:cf:6a:45:3b:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:58:A5:27:C8:82:C4:25:CF:7B:F9:3F:24:3F:2C:AF:ED:87:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5825C1E985D11EFB777685B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.175.0/24
Signature Algorithm: sha256WithRSAEncryption
71:38:6b:a6:34:ca:72:8b:21:ef:e4:3e:27:e1:e2:59:11:08:
f2:1e:5a:a1:29:7e:d8:91:d6:56:b3:3a:6a:5d:f7:7b:b0:f6:
88:2d:6c:fb:79:39:1e:4a:90:b9:e3:13:27:4a:30:d3:b6:24:
88:9b:b6:a7:0d:83:c4:78:04:7b:4e:2b:af:a7:f9:fa:1c:04:
d4:13:08:52:0a:02:92:db:fa:e9:0e:63:d7:34:e2:8e:13:a4:
95:37:19:23:a0:47:94:32:64:86:16:00:89:81:f5:eb:89:f3:
b2:27:77:d6:8a:c4:80:7e:97:a7:ec:9b:d9:24:da:e5:bb:9a:
10:6d:a8:95:31:f7:a2:71:35:6a:43:27:5d:16:6b:e8:8b:95:
d9:3f:5e:67:49:d8:35:60:3e:df:48:64:78:20:f1:b4:71:10:
81:03:6f:fc:bb:9d:e5:be:b2:d4:ec:40:51:41:55:eb:f1:23:
59:52:ba:33:43:48:46:98:b4:bc:21:57:b3:d7:80:b7:c8:e7:
a0:eb:e6:62:37:e7:3c:b3:20:a6:d0:fe:84:44:e3:37:b6:69:
6c:fb:bb:2d:a3:3d:6a:b6:97:ea:c7:ba:2d:63:48:88:ad:65:
4a:e2:3d:8d:a2:cf:01:63:61:28:94:79:41:a6:dc:af:7f:a9:
84:fe:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org