Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3579654A8E011EF88FC427B762E951A.roa
File: E3579654A8E011EF88FC427B762E951A.roa (raw, json)
Hash identifier: e1gWIXGm+bgx0rmsIqK8GoDNbEz+xTmyzX9Vwpo9KII=
Subject key identifier: 40:2A:73:66:9C:DF:CF:1C:35:CA:9C:F6:15:73:D8:39:09:1D:D4:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3579654A8E011EF88FC427B762E951A.roa
Signing time: Fri 22 Nov 2024 14:48:51 +0000
ROA not before: Fri 22 Nov 2024 14:48:48 +0000
ROA not after: Tue 03 Dec 2024 14:48:48 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69777 (0x11091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:48:48 2024 GMT
Not After : Dec 3 14:48:48 2024 GMT
Subject: CN=674099d3-2c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:9d:50:37:77:6b:59:ef:52:de:2f:8a:ab:
eb:9b:46:32:05:a4:92:a6:4c:76:85:e3:c5:96:bf:
aa:f7:55:91:b2:d4:cd:d1:28:57:5f:4e:30:dd:9f:
bd:85:d7:5a:8e:f9:65:14:69:62:d1:07:e2:93:7b:
16:cc:af:57:a3:fc:b4:6a:e4:59:9b:16:71:39:25:
4c:25:37:84:74:32:c0:9e:33:92:c4:d9:3d:bb:2c:
11:93:6d:20:6e:85:62:70:5d:4b:81:95:bc:42:00:
ae:03:87:a5:f8:03:5e:d2:b7:d0:32:9a:c1:65:ce:
12:6c:a7:e4:0d:87:dd:52:b2:24:64:ec:73:a6:9a:
81:6a:91:a6:15:b4:9b:68:cc:bd:32:cf:e2:88:cf:
38:63:52:b8:d6:e4:8b:a6:dd:d4:37:e3:54:4d:33:
9c:d5:3f:e5:b7:cd:b1:51:aa:3f:7d:ac:67:0b:61:
d1:7a:cc:2f:62:2b:48:e3:43:24:d1:94:2f:19:d3:
e0:b8:d3:9c:cd:97:92:2d:85:fb:a6:20:f5:27:af:
67:62:fa:9f:27:21:be:f8:3e:85:bf:e4:9a:97:ea:
0c:92:c9:a3:64:f7:3b:fd:14:1f:a0:4d:08:20:dd:
d6:bd:58:35:05:c4:f4:ba:c8:be:fa:c0:d1:9c:fb:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:73:66:9C:DF:CF:1C:35:CA:9C:F6:15:73:D8:39:09:1D:D4:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3579654A8E011EF88FC427B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9a:22:40:c9:4d:9f:3b:8b:0f:00:69:e2:03:5a:55:84:e1:
07:69:c9:37:f8:be:e8:13:20:d6:a3:71:36:21:de:51:40:49:
35:fa:ca:ee:4d:51:8e:53:fb:54:0d:6c:49:5c:eb:ff:78:dc:
de:c8:9d:fb:e8:f5:d1:8f:6c:5f:a5:08:0e:b5:3d:31:b7:1a:
18:b6:b7:52:27:35:2e:23:50:ac:ed:a6:38:6a:ef:e8:a9:a0:
cf:a1:b3:74:19:c0:e2:17:6f:70:69:2c:f5:62:28:3a:9d:86:
ec:1d:16:3c:20:f8:ed:11:8a:92:10:2d:30:30:1c:e8:f0:c5:
47:07:74:b8:87:8b:3f:f3:a4:da:1e:b8:45:ae:03:ce:34:b6:
a2:ab:28:e6:c2:37:fa:8f:92:5f:db:85:fa:72:5b:77:37:48:
7c:00:00:cf:1b:1f:2b:a6:66:31:05:56:ac:b7:c1:b4:15:21:
57:e5:9f:d1:3c:1f:2d:5d:90:7a:d2:3c:99:d2:8f:b3:5c:53:
cc:40:9c:73:fc:e5:73:97:f4:7e:ba:a5:e2:d7:e5:92:06:1e:
cf:68:6e:65:bf:e4:b3:3d:77:88:cf:be:6f:8a:2e:52:6c:00:
e0:64:d2:5b:59:82:12:7f:84:f8:00:4b:f7:07:7a:46:b8:5c:
10:07:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:43 2024 by rpki-client on console-ams.rpki-client.org