Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5998DC692B311EFA8B60EA8762E951A.roa
File: D5998DC692B311EFA8B60EA8762E951A.roa (raw, json)
Hash identifier: eJ70gLM7/YlVY0YeH0gZobd1/xyHSfnPNW24GoxzXJE=
Subject key identifier: CB:F7:D7:65:19:78:CD:F6:75:C9:92:1F:4D:2B:D2:81:6C:8E:B9:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5998DC692B311EFA8B60EA8762E951A.roa
Signing time: Fri 25 Oct 2024 09:30:55 +0000
ROA not before: Fri 25 Oct 2024 09:30:51 +0000
ROA not after: Wed 27 Nov 2024 09:30:51 +0000
asID: 147176
IP address blocks: 154.197.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66020 (0x101e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:30:51 2024 GMT
Not After : Nov 27 09:30:51 2024 GMT
Subject: CN=671b654f-fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e5:34:06:14:8e:28:16:ab:1c:bf:ed:3e:ae:
bc:35:91:12:4d:11:4d:2f:45:a7:85:f1:2c:5c:92:
09:74:5d:cb:40:2e:c5:eb:d5:45:95:dc:c7:de:5d:
7f:e2:eb:cd:07:5a:8f:8b:84:ed:d9:36:6d:5d:96:
75:0c:12:13:86:1b:2d:66:4c:50:e3:b5:eb:ef:07:
27:83:33:33:4d:da:f9:8f:4e:22:20:d8:da:be:b5:
a4:d1:2d:0a:a3:c7:fe:7e:53:73:b7:8c:9d:ee:b9:
04:86:49:1b:ec:2d:88:f8:01:c2:e1:12:82:1e:21:
52:fd:19:a7:23:dc:85:3b:43:cc:22:83:ac:25:bd:
e3:04:11:d2:29:d7:79:4b:75:e3:b0:63:39:7e:0b:
1c:ee:a7:df:a9:2e:e0:9c:2c:b4:6d:d3:98:68:b1:
d6:ff:94:9d:cc:90:a8:b4:b2:79:f5:53:b7:15:5d:
e2:27:c3:0d:9b:d5:bc:a9:18:13:12:5b:7c:1e:7f:
0c:60:1a:ec:ff:42:ee:24:a6:c5:9d:ef:c3:69:73:
4c:60:16:37:85:6b:98:f4:42:86:a8:fd:f4:69:ff:
98:f9:a9:5c:de:ef:0c:63:86:a5:12:1c:66:ad:71:
a7:29:55:de:ea:86:d9:79:0f:42:ff:a8:81:5c:82:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:D7:65:19:78:CD:F6:75:C9:92:1F:4D:2B:D2:81:6C:8E:B9:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5998DC692B311EFA8B60EA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:40:f9:3c:f9:1d:70:1c:ee:f7:17:13:6a:f6:39:41:ac:f4:
43:8e:21:c8:ab:09:71:88:9d:8c:34:ee:9f:31:ab:f1:a8:0d:
86:74:12:ed:06:a0:07:cc:ac:0f:8e:2a:a9:9d:53:55:83:50:
75:21:a8:d2:7b:68:37:1e:e6:15:28:a5:4b:e6:51:44:d7:41:
cd:c1:bc:48:05:73:55:cc:47:e0:c3:f5:7c:36:7f:c7:20:22:
ea:be:ad:b8:c9:cb:4e:04:9c:aa:a1:1a:f6:9d:9f:4e:b8:93:
ea:5d:ab:38:99:b7:5d:08:50:60:b2:a0:c6:5a:a3:66:a2:a2:
dc:91:e0:3b:03:c5:cc:c2:b7:e3:1a:f2:d3:48:3c:54:e5:dd:
03:aa:9c:d3:16:9e:a3:5f:b5:a1:e0:4c:13:f9:89:65:f0:11:
d7:0a:47:6b:b9:aa:21:16:e4:79:95:f7:8c:a3:25:51:19:0e:
a1:73:76:6d:29:34:23:e1:20:f8:a1:b5:4d:48:8f:18:c8:93:
22:96:ad:f6:29:2f:e3:05:21:cc:ed:48:3b:dd:16:e8:c3:39:
29:d5:4f:ca:99:cc:26:77:dd:71:e9:01:b5:d9:2c:16:12:fe:
d9:82:2d:71:2f:4f:34:9e:e7:7e:4a:7f:d9:49:23:3f:c2:51:
e6:ca:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org