Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9038B369EA911EFB4A9448B762E951A.roa
File: D9038B369EA911EFB4A9448B762E951A.roa (raw, json)
Hash identifier: uB889rmx48uXNsrOj5aIDDaH/LSi16LY+kJ6toLbhO0=
Subject key identifier: 34:C4:A8:D8:F1:C5:48:2C:8A:BE:C5:F0:4B:07:E5:97:6F:4A:48:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9038B369EA911EFB4A9448B762E951A.roa
Signing time: Sat 09 Nov 2024 14:49:40 +0000
ROA not before: Sat 09 Nov 2024 14:49:36 +0000
ROA not after: Mon 07 Apr 2025 14:49:36 +0000
asID: 267834
IP address blocks: 154.198.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68109 (0x10a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:49:36 2024 GMT
Not After : Apr 7 14:49:36 2025 GMT
Subject: CN=672f7684-e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:00:6c:03:fd:47:d6:f1:40:7b:ca:7d:f5:
84:74:ee:fc:eb:53:6c:69:25:3d:0a:7d:5b:cc:54:
e0:a7:4d:5f:c7:4c:6d:12:04:85:80:4d:80:fc:af:
d4:07:a5:70:24:03:e0:32:39:31:df:6c:57:26:c8:
c6:10:84:11:2f:9e:d7:bf:7c:82:90:f2:13:f0:de:
41:62:29:db:b3:b2:22:14:e2:b0:4e:8e:89:3a:c1:
a4:b3:f9:d8:c6:6f:92:d2:fc:0f:94:c6:a5:90:72:
36:56:82:45:d0:6a:39:33:95:2b:c9:7b:ff:b1:0e:
ae:5a:f1:e7:62:c3:50:e5:11:47:82:e4:f3:b7:17:
67:98:79:aa:1b:0b:18:18:4c:0c:ca:7b:31:e0:d0:
ca:54:06:35:c9:44:ac:fe:79:c4:9b:e2:fd:cb:ae:
dd:95:da:11:22:a0:96:b1:88:52:61:d3:5d:a6:07:
5e:fe:b0:1d:7f:3e:10:4b:4d:fe:99:04:d5:92:2d:
41:3d:19:bc:9c:6c:c1:35:4a:5c:63:b3:94:98:0a:
3d:89:e7:7c:61:05:27:79:3f:3f:62:6f:26:91:4c:
10:36:5c:c0:27:c9:c8:66:d5:e6:f9:55:d6:36:e2:
99:61:60:1a:34:1e:7b:72:3f:ab:c4:4d:27:da:5a:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:A8:D8:F1:C5:48:2C:8A:BE:C5:F0:4B:07:E5:97:6F:4A:48:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9038B369EA911EFB4A9448B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:57:5d:90:a0:39:8a:cf:a1:55:5e:51:22:26:0e:f0:0a:c1:
aa:7c:9d:97:60:92:83:07:ff:e2:a4:11:f0:88:47:97:36:32:
ec:bd:1d:85:16:73:0d:34:e3:e3:92:1f:8d:4a:4f:16:23:3d:
7e:0a:12:d7:a0:d0:dd:f5:54:bb:7e:5b:95:2d:8c:ee:d0:93:
b7:98:1b:22:6b:a4:49:5a:73:40:0b:58:20:f1:80:98:04:d2:
ea:8e:76:25:ae:2f:72:41:1a:aa:f4:2e:36:0f:48:e5:0a:4a:
a6:f0:90:76:fd:2d:cd:77:f2:7a:2a:15:81:52:ea:5d:33:bf:
30:b2:99:74:d8:3f:82:4d:b2:a1:36:38:26:c7:78:17:46:89:
42:55:76:0b:90:d7:81:35:75:aa:34:b5:4c:3f:8b:af:41:cb:
c5:ff:21:47:31:7a:19:87:80:77:41:27:f2:5c:d7:e5:15:86:
8f:89:1a:16:60:fa:8d:16:9f:86:73:80:d5:f3:ec:38:d6:dc:
14:de:c2:32:15:5d:f8:37:c8:80:72:25:ea:7e:54:07:09:f0:
91:3e:b6:9f:34:16:09:91:8a:64:14:dc:08:69:3d:5a:8d:aa:
ae:ea:6d:3a:46:b6:ee:78:4d:62:fb:82:b3:71:9f:0d:c5:a4:
da:11:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org