Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D843B18CA8ED11EF88EEF44D762E951A.roa
File: D843B18CA8ED11EF88EEF44D762E951A.roa (raw, json)
Hash identifier: pY3preF/yO1QsXHvX//qr+Wtmg7UMREA4xCX12aZbzo=
Subject key identifier: 58:7F:BD:AF:59:7F:29:FE:EF:29:1D:32:88:FA:64:5A:2D:FA:28:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01112D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D843B18CA8ED11EF88EEF44D762E951A.roa
Signing time: Fri 22 Nov 2024 16:21:36 +0000
ROA not before: Fri 22 Nov 2024 16:21:32 +0000
ROA not after: Tue 03 Dec 2024 16:21:32 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69933 (0x1112d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:21:32 2024 GMT
Not After : Dec 3 16:21:32 2024 GMT
Subject: CN=6740af90-7e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:32:61:a7:9f:22:5c:35:f4:01:4d:e2:89:
01:a8:dc:bb:64:ba:d7:0f:01:bc:3a:96:5b:17:12:
c7:8c:4e:5c:e5:0a:2c:63:39:11:7a:33:6c:0d:bc:
b6:af:87:54:15:75:5d:00:e8:5c:bb:c5:45:f5:d8:
c0:de:a3:cc:7d:1f:d0:12:e1:92:e4:26:d0:dd:4f:
f6:4a:5e:45:8f:34:ca:9c:71:93:16:0d:c2:f9:1f:
7b:b3:fd:d1:8b:fb:61:ca:00:b7:70:cc:55:00:0e:
c0:7d:41:10:6a:71:3b:48:a4:bd:97:6f:aa:e0:3b:
f5:5d:13:1e:f9:85:85:e6:26:e0:ae:a3:dd:95:6d:
c4:80:4a:1e:20:64:b9:72:66:ee:bf:b5:df:dc:5c:
bf:e9:56:08:6e:2e:ab:9e:23:27:b8:b3:10:50:19:
42:32:24:4f:19:46:25:9b:ef:af:30:66:e7:cb:97:
0f:a1:77:f0:b8:bf:b3:96:85:a8:8f:6e:b9:e3:f3:
f9:8c:6f:05:b7:57:95:1b:05:7d:3e:c0:c2:80:44:
e6:3a:e9:f7:31:6d:16:21:c2:fe:d3:f7:63:3d:9d:
aa:c4:95:5c:b2:e3:01:50:e9:51:3d:be:3e:33:fd:
33:25:b8:78:57:5b:be:19:21:94:b1:d5:0e:1e:a4:
b0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:BD:AF:59:7F:29:FE:EF:29:1D:32:88:FA:64:5A:2D:FA:28:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D843B18CA8ED11EF88EEF44D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:67:e1:17:47:0f:8f:a1:ba:04:d5:97:36:58:89:2e:b5:8b:
eb:3f:36:1f:a6:0d:64:f6:9a:b1:7f:81:56:b8:e2:d9:c8:78:
ce:9f:29:69:e3:93:a0:5b:72:78:b1:d0:1d:7f:30:42:d5:5f:
37:ca:18:ac:ce:0a:ef:40:36:30:32:1b:ac:a0:96:54:44:e9:
c6:57:5a:27:62:c3:93:3a:99:dc:e8:7e:cd:9d:19:96:59:3a:
1c:32:67:51:ca:87:61:fd:6d:4f:a5:17:36:12:60:9e:4a:50:
34:0d:cd:d7:36:e0:75:32:de:fc:cc:b1:28:be:a4:58:64:41:
00:12:76:1d:49:30:93:0e:df:4d:25:7f:e9:cb:c4:da:7d:a0:
40:2c:27:bc:d1:ff:7d:1c:36:54:24:3a:dc:80:18:bd:50:d5:
45:60:39:2d:78:fe:43:a3:4d:bb:b4:58:f3:c2:3f:b2:0e:68:
1d:e0:13:ae:50:5c:8f:7e:fd:cf:9f:66:0c:3e:5a:46:b6:e9:
99:39:be:2e:90:9a:5d:8c:2c:2b:2c:bf:5b:fc:31:f6:6e:66:
af:cd:c0:ef:57:45:31:9f:48:44:40:4e:4e:4b:70:a0:4a:15:
24:b6:36:97:49:00:25:33:59:8c:10:4c:8a:7a:d3:de:fb:fe:
b0:92:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:39 2024 by rpki-client on console-ams.rpki-client.org