Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7762E66A8CD11EFB0C0B885762E951A.roa
File: E7762E66A8CD11EFB0C0B885762E951A.roa (raw, json)
Hash identifier: cqfWr4PMqsjRI98OPEQviGuL3YI7cMm1hU+UnOrqL38=
Subject key identifier: 3D:6D:1E:AC:01:74:6E:D7:D5:77:4D:A0:29:07:23:35:97:BB:46:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01101B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7762E66A8CD11EFB0C0B885762E951A.roa
Signing time: Fri 22 Nov 2024 12:32:58 +0000
ROA not before: Fri 22 Nov 2024 12:32:54 +0000
ROA not after: Sat 30 Nov 2024 12:32:54 +0000
asID: 137443
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69659 (0x1101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:32:54 2024 GMT
Not After : Nov 30 12:32:54 2024 GMT
Subject: CN=674079fa-5ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:21:41:8d:79:4e:61:2b:ae:a0:b5:68:bc:
a3:31:0d:0d:1a:da:b0:16:15:7e:34:b9:c4:4e:b2:
2b:96:a0:97:9f:2b:c9:1f:4b:8c:f1:a3:4c:e0:41:
b1:85:0e:2d:6f:53:3d:b7:56:7d:5d:60:f0:7e:be:
78:65:79:3b:fe:f2:48:56:b8:50:01:68:3a:99:8d:
94:d2:38:04:6f:23:23:66:ab:84:e0:69:8b:9c:ba:
d9:ed:2a:96:81:07:49:80:14:72:ba:c3:60:d8:b7:
08:5f:4e:ca:bd:03:a4:7c:e0:38:2f:6c:aa:61:ac:
48:9d:f9:26:5c:21:cf:34:34:75:f5:3e:68:30:bc:
ea:a1:ed:a5:c8:17:58:11:ca:7c:7c:a6:99:d4:ca:
fe:48:dd:36:3e:51:61:43:da:e9:8c:92:eb:1d:ce:
44:67:4e:d2:bd:9b:7f:74:0b:be:15:89:71:56:82:
c8:4d:87:e5:44:5c:59:55:14:11:39:ff:19:4f:74:
af:48:2b:8b:62:15:60:8e:05:34:26:6a:34:a3:bc:
f4:e2:d1:97:25:5d:7e:be:dd:e7:bd:23:51:66:a1:
ac:36:0e:15:d2:11:32:03:62:bb:e6:8e:06:04:87:
68:09:33:0a:13:1d:27:09:54:37:c8:b1:60:c1:40:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:1E:AC:01:74:6E:D7:D5:77:4D:A0:29:07:23:35:97:BB:46:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7762E66A8CD11EFB0C0B885762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a4:a3:6d:5e:22:6a:ba:64:43:13:a9:6f:0e:6c:7d:19:b5:
a5:ae:3a:4d:c6:02:60:70:23:25:91:5f:c4:31:0d:35:0f:25:
c3:9c:89:08:cb:c8:91:bd:7a:8c:a5:2a:d8:63:77:9e:bc:f7:
b6:be:f8:9b:b5:37:04:2b:21:7b:4a:db:e3:df:88:da:9e:59:
c6:31:aa:c0:8f:c6:39:12:2e:5e:48:4b:2a:27:dc:25:13:2f:
47:fd:cc:da:df:30:41:34:dc:d4:bc:f5:eb:f0:e1:0b:af:2e:
7b:96:ce:61:09:3e:f7:e2:97:ed:e2:e0:91:40:c2:5a:ae:ef:
ae:f1:cb:5c:20:8b:fc:d4:8f:3b:2a:fb:21:c4:e6:f0:60:fd:
4f:c2:16:96:6f:32:f5:8b:b0:78:f3:88:0e:6e:60:32:3a:7b:
81:36:b4:c7:e7:c0:ab:e9:ac:80:6b:39:22:79:7d:03:61:88:
a6:ae:d6:b5:52:ff:88:d2:f2:b6:bb:f9:26:0b:dc:6f:cf:01:
eb:b7:54:ef:c2:66:f2:fa:d9:3e:0b:8f:4b:4f:9b:53:75:e9:
ed:3c:26:7e:a0:e9:c2:c8:03:35:a9:ef:0c:24:91:d5:cb:54:
78:7f:90:f4:62:df:10:45:5a:8d:fc:31:c0:34:8b:f8:2a:f4:
19:87:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:44 2024 by rpki-client on console-ams.rpki-client.org