Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134BE20A8E411EFAECD3B94762E951A.roa
File: E134BE20A8E411EFAECD3B94762E951A.roa (raw, json)
Hash identifier: aKbg0SjgKq30qDckiuroG1wKDJTf7Hu/3Suj1Fm+Ak8=
Subject key identifier: 0F:96:1F:35:98:BA:95:CA:37:96:B6:92:DD:CF:E9:0B:E7:8C:12:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134BE20A8E411EFAECD3B94762E951A.roa
Signing time: Fri 22 Nov 2024 15:17:26 +0000
ROA not before: Fri 22 Nov 2024 15:17:22 +0000
ROA not after: Tue 03 Dec 2024 15:17:22 +0000
asID: 62240
IP address blocks: 154.194.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69825 (0x110c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:17:22 2024 GMT
Not After : Dec 3 15:17:22 2024 GMT
Subject: CN=6740a085-8ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:65:27:ad:69:78:7a:7e:c9:1c:24:d5:20:
12:e0:a9:88:ab:0f:77:b0:0e:82:ee:0c:21:0c:aa:
79:17:47:23:52:b2:21:5a:e5:f7:4a:39:c3:9e:87:
ca:5d:16:58:df:06:a4:c3:0b:46:cc:81:b5:82:29:
09:3c:8c:87:96:bc:4e:06:d5:73:ba:62:56:a0:6e:
b2:65:3e:b3:70:8c:71:08:b4:2b:28:c5:72:ca:9d:
cd:67:4e:ac:22:6f:5b:50:fb:52:20:57:8e:6f:e6:
30:3c:53:d3:8e:4f:40:9d:66:1b:50:0a:e2:8c:41:
c6:5f:d2:63:af:de:fd:c0:36:07:2c:61:34:8e:fb:
46:47:0d:3e:1d:0d:86:2f:d7:50:fb:03:c5:fb:23:
e2:b4:fa:bb:62:56:b2:4d:cd:8c:f0:48:6d:48:51:
25:62:e3:b3:23:10:d5:10:df:04:0a:33:f7:8f:ca:
ea:7a:a9:24:bb:bc:30:3d:57:ba:e1:ee:13:bd:d9:
00:40:56:13:de:a2:98:a9:3d:93:06:40:3b:33:a0:
88:3c:97:95:f1:8c:82:dd:82:32:0a:43:9c:d5:b4:
51:67:be:47:ac:c5:54:c0:2a:cb:77:ab:51:d7:87:
0f:18:97:e5:db:2d:a0:41:a6:f7:e1:a0:6a:d8:9c:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:1F:35:98:BA:95:CA:37:96:B6:92:DD:CF:E9:0B:E7:8C:12:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134BE20A8E411EFAECD3B94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.97.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6a:a3:aa:81:5d:d6:67:26:fd:8d:5e:39:ee:8d:be:bc:ec:
a4:e0:c2:64:bf:0c:9d:a0:54:c2:45:e3:31:51:31:66:72:a4:
7a:03:05:df:62:79:86:02:4d:1e:b3:29:a8:ff:7d:cb:24:59:
d2:fc:d4:e0:ea:a7:2b:f3:c3:96:48:41:a6:b7:86:ae:a5:52:
b4:00:e3:82:a0:e4:ee:02:f1:37:4d:38:63:c2:e3:0b:9e:a3:
93:74:7c:7d:f5:f8:61:0d:7a:61:55:1a:d4:ad:33:f0:4f:f2:
31:08:89:b1:51:3c:25:e6:7d:26:c2:e2:b2:bc:44:06:d4:d7:
4d:67:c9:08:b7:0b:04:7d:b3:d5:67:23:38:6d:32:18:4f:b0:
70:6f:86:90:8b:8f:a5:e7:09:5f:fd:6d:16:8e:37:46:8c:0b:
18:01:0e:c4:76:7e:a8:bb:fc:9e:a7:6a:b9:f9:77:aa:72:00:
de:7a:fb:16:95:0f:b3:c3:9c:87:58:db:23:35:3c:3d:6f:84:
cc:d7:bb:d2:88:f0:d7:2d:3b:1d:0a:63:38:d5:f2:8f:48:e6:
94:4d:9b:0b:16:4c:38:bf:ec:f0:f8:16:b8:33:5c:39:66:9c:
de:65:f8:d5:13:ab:9f:75:3c:60:c9:3c:e0:99:d6:85:d3:d4:
26:59:d9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:42 2024 by rpki-client on console-ams.rpki-client.org