Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCDFD34950F11EF8FE3E284762E951A.roa
File: DDCDFD34950F11EF8FE3E284762E951A.roa (raw, json)
Hash identifier: ni7EJ0i5/UVGlda/c3nSNpsGJfDuup49sl8H/46mj/8=
Subject key identifier: 47:1B:3D:39:F4:F5:0B:34:22:9D:67:0F:C8:F6:9C:AC:49:97:BD:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCDFD34950F11EF8FE3E284762E951A.roa
Signing time: Mon 28 Oct 2024 09:34:45 +0000
ROA not before: Mon 28 Oct 2024 09:34:41 +0000
ROA not after: Wed 27 Nov 2024 09:34:41 +0000
asID: 44559
IP address blocks: 154.81.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66241 (0x102c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:34:41 2024 GMT
Not After : Nov 27 09:34:41 2024 GMT
Subject: CN=671f5ab5-429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:86:df:11:74:f6:37:98:e2:44:49:58:78:
14:5a:fb:d6:f2:47:fe:ee:8f:de:ab:5b:41:47:f0:
f1:fd:f4:98:36:c4:fd:4c:04:10:28:d5:32:30:6c:
5b:e1:60:26:a6:3a:f8:d8:be:4a:f6:89:21:91:b7:
1f:e0:7f:bd:34:fe:a0:86:b2:04:18:0c:af:b2:51:
00:96:48:87:ba:9a:e7:5c:02:d7:dc:ee:f2:a5:66:
a3:d1:5b:79:d0:e6:1f:31:b9:28:ba:e9:38:ae:54:
b0:cd:2b:a3:a5:7b:fa:a9:a5:a8:c7:fc:9f:b0:e1:
51:8e:d1:85:ea:ab:a8:1c:42:c8:7e:60:51:30:33:
30:0f:57:17:30:3d:62:e9:51:1f:89:29:91:7e:94:
fd:15:3b:70:33:e2:55:e1:74:a3:ad:7c:64:a6:8b:
d7:08:c5:c1:87:6f:ea:9d:ff:3e:80:73:5c:c8:9b:
1b:f0:1b:c0:9c:26:84:49:2a:9f:3e:a9:08:9a:a1:
d1:48:e8:be:b2:4f:d5:b8:ae:f6:d5:8e:a0:82:73:
ce:32:11:13:26:77:ee:b9:93:6c:ef:03:fd:b8:96:
b3:4a:54:3d:2e:38:8e:a6:39:d5:b3:e7:33:3a:e9:
3d:43:2f:62:16:4a:c6:2c:45:dc:a0:65:0e:f8:0b:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:3D:39:F4:F5:0B:34:22:9D:67:0F:C8:F6:9C:AC:49:97:BD:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCDFD34950F11EF8FE3E284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
Signature Algorithm: sha256WithRSAEncryption
52:9a:3d:39:fe:59:3c:95:e4:74:76:39:ab:99:da:f4:08:23:
83:fe:39:8a:22:b4:19:c9:fc:ba:75:fd:c5:c5:7a:24:12:73:
48:fb:18:3f:9d:a4:f1:35:14:32:f2:e2:df:b0:14:63:1b:15:
ba:78:31:a5:31:be:f3:c2:ab:94:cf:50:15:04:18:22:ad:ea:
7d:97:93:c2:89:41:35:3c:be:09:16:00:d0:8c:67:7c:f2:e3:
e4:d4:1d:aa:f4:74:79:d8:e1:ee:ab:c0:54:a6:2c:b4:87:be:
b0:29:99:09:cf:16:46:e2:50:a0:be:9f:bd:60:1a:63:e5:a0:
06:a1:78:a4:d9:d9:0f:a1:dc:e8:88:71:09:68:b7:f0:44:42:
ad:0c:91:d4:7a:e8:f3:78:47:b5:37:30:f5:dd:32:2f:46:9e:
cb:56:e6:42:46:fd:48:cb:23:ba:ab:41:6d:86:6a:14:8e:ee:
ed:86:99:4f:25:1a:79:a7:15:d6:b5:64:8f:8d:c4:fb:c0:54:
34:bb:71:56:62:0f:99:52:fa:66:1e:fe:15:8e:33:d7:3d:b1:
bb:31:28:40:a7:fd:5a:dc:2f:26:b6:22:85:e9:76:e5:e3:5a:
7e:5b:0b:ed:7d:9a:cd:1d:d9:e8:7b:b5:6e:70:f7:a6:ae:42:
2c:64:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:30 2024 by rpki-client on console-ams.rpki-client.org