Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6C803BE5F1711EF943ECA98762E951A.roa
File: D6C803BE5F1711EF943ECA98762E951A.roa (raw, json)
Hash identifier: J0EWn/0ZJr5uJPuKT4LHwdMqx+E0XMRDle5W4l7W8Cs=
Subject key identifier: 7C:07:E0:66:7B:D4:B4:DF:63:3A:01:9E:49:7E:C1:4A:FD:0F:3B:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E34A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6C803BE5F1711EF943ECA98762E951A.roa
Signing time: Tue 20 Aug 2024 17:15:46 +0000
ROA not before: Tue 20 Aug 2024 17:15:43 +0000
ROA not after: Tue 21 Jan 2025 17:15:43 +0000
asID: 63199
IP address blocks: 154.207.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58186 (0xe34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 17:15:43 2024 GMT
Not After : Jan 21 17:15:43 2025 GMT
Subject: CN=66c4cf42-20f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:f9:81:3d:9a:4d:61:08:ce:0c:b6:18:31:
17:61:73:e4:70:89:7b:a5:1f:60:68:97:e5:95:29:
de:0d:72:d1:1e:a8:da:e3:e7:9f:cb:b9:ea:18:f0:
0c:5d:97:98:2c:8d:ec:6c:14:5a:f7:52:e3:38:28:
6b:c9:c9:e0:bb:d0:b7:6b:21:42:28:26:40:24:5f:
ff:c5:2a:f4:94:93:76:c6:77:9e:87:15:0d:cd:d0:
11:a4:06:c5:86:65:c1:38:b3:85:5f:18:fe:b6:84:
d3:75:04:29:68:96:e7:fd:dc:90:5a:5b:0b:59:62:
99:28:aa:2f:81:95:89:7b:b6:52:9c:4f:48:8f:13:
93:3d:15:8e:a1:fc:33:4a:30:7b:50:d6:d6:96:4f:
9b:96:a4:86:38:80:3a:ee:55:20:8c:91:6b:3b:9e:
48:bf:44:92:d1:e5:80:63:ef:f4:38:bd:a0:78:16:
e3:77:51:d9:8e:46:a6:ed:0f:ea:26:38:61:74:21:
95:f2:ee:31:06:2e:3d:6e:92:f2:d5:9e:95:cd:9c:
a0:05:ef:d5:32:c1:1a:3e:7f:34:aa:22:bd:fc:e9:
37:cf:95:24:68:84:89:3d:98:f8:da:10:6d:3c:8d:
40:b5:6b:7b:02:89:eb:72:05:f7:3b:89:68:b4:06:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:E0:66:7B:D4:B4:DF:63:3A:01:9E:49:7E:C1:4A:FD:0F:3B:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6C803BE5F1711EF943ECA98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.108.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a9:cc:d5:59:95:69:49:c6:80:81:63:62:98:14:c5:77:9b:
7c:57:a7:c1:a1:c3:d4:3a:44:35:db:c0:02:3a:fd:7c:f1:f2:
24:c6:7c:58:b5:e0:79:8f:80:75:f3:a1:df:e2:ba:7a:b3:b5:
18:2c:89:dd:cd:a7:33:8e:ee:4c:7b:bf:94:55:66:05:99:56:
2a:8e:fd:d6:bb:fd:be:41:c5:a8:72:06:bb:e6:91:eb:eb:c2:
f9:2e:c3:e3:a8:2a:13:2a:da:67:54:3d:18:11:32:5f:f3:77:
c5:09:87:8b:9c:d0:e5:d4:ac:82:bf:db:2d:c0:98:eb:6f:5f:
e7:42:50:d7:88:14:1c:d0:97:35:53:fd:23:a6:a8:46:ce:96:
16:33:18:31:bd:69:c2:87:28:67:63:6a:b9:d7:46:46:d7:90:
0f:7b:a0:8b:13:e8:29:c9:22:5a:a2:a6:5b:c4:83:5f:1f:72:
03:90:a0:3f:d5:1b:77:b2:b4:ae:8f:f5:eb:cf:e5:8d:50:6c:
d6:5c:95:b9:70:30:1c:0f:36:1a:41:3f:05:2f:0c:4a:d6:23:
d7:0d:88:e8:cb:c4:fc:09:8f:56:20:45:4b:bc:69:7b:fb:f5:
ba:87:14:b2:69:43:d8:53:b8:d7:1d:8b:15:45:bc:cd:ee:7a:
43:f1:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org