Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E822DA2CA9C111EFA5CB7B82762E951A.roa
File: E822DA2CA9C111EFA5CB7B82762E951A.roa (raw, json)
Hash identifier: gb30zkjyQulQACbj8KwOUhsxzqjX8EM25wNGV6kM6vQ=
Subject key identifier: C9:F3:92:C1:F9:9F:99:0F:D2:D1:65:56:E4:55:EE:AB:8A:71:F1:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E822DA2CA9C111EFA5CB7B82762E951A.roa
Signing time: Sat 23 Nov 2024 17:39:36 +0000
ROA not before: Sat 23 Nov 2024 17:39:32 +0000
ROA not after: Mon 09 Dec 2024 17:39:32 +0000
asID: 5065
IP address blocks: 154.206.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70084 (0x111c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:39:32 2024 GMT
Not After : Dec 9 17:39:32 2024 GMT
Subject: CN=67421358-e817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:ea:f5:0c:51:7c:be:5e:2e:cf:db:87:22:
77:6f:a7:8c:ad:b4:1f:46:4f:99:c9:8b:5e:ee:e2:
11:09:68:49:1f:73:09:ff:5c:7d:01:42:94:e8:e0:
6c:2f:49:de:16:92:fc:d6:1a:13:0b:f4:85:69:a8:
65:f6:fc:f4:67:3f:55:76:97:a1:d9:11:18:1f:4b:
0a:8d:0b:b5:f9:21:95:ba:2a:8a:1e:1e:39:b0:db:
ec:08:f9:b7:81:c1:27:0c:87:ea:28:16:5f:30:73:
94:cd:af:6c:16:04:e0:5f:af:d8:5e:11:5a:6e:00:
5b:f7:5e:69:ff:cc:6f:46:fc:1a:87:95:fd:89:27:
24:6f:aa:8e:17:d5:92:ee:89:08:27:aa:11:f0:82:
bf:8b:fb:3c:12:a9:c1:66:55:52:d5:29:27:3f:71:
85:2d:5d:dd:f1:44:71:82:f7:a2:c5:54:0a:ba:fe:
52:3b:0e:82:cf:d7:20:38:1f:7b:52:f3:f4:15:22:
89:af:73:4a:de:0c:34:e1:ed:51:99:20:fd:38:88:
a9:81:ea:62:ab:7b:b5:9e:63:14:c0:54:5f:88:dc:
d6:18:b3:6b:14:8a:4f:f2:bf:8e:2e:a1:a9:1f:d4:
ec:04:c3:2d:9c:be:82:3e:c7:8d:0e:9a:76:31:31:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:92:C1:F9:9F:99:0F:D2:D1:65:56:E4:55:EE:AB:8A:71:F1:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E822DA2CA9C111EFA5CB7B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.34.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bc:20:c9:d8:75:97:b8:a5:e2:8d:09:5a:cc:6b:b3:17:68:
75:16:f3:a8:27:8d:54:4a:56:a3:6a:0c:4c:b2:64:d3:8b:8b:
c6:9c:96:a3:41:cc:96:c6:e4:bc:39:7c:5b:4f:d1:38:04:56:
5f:80:12:7b:4e:20:43:a9:2a:44:66:31:39:e3:e0:84:c4:17:
f0:9a:2a:f2:71:2a:aa:51:dc:fb:7f:e8:df:ad:48:d9:cb:92:
09:0e:b5:e6:fb:64:84:f2:b2:91:4b:59:e4:c2:ed:70:88:c7:
b7:be:c3:9e:32:76:78:44:de:72:b7:12:79:e9:81:6b:b6:bf:
8e:da:82:a7:3c:c8:4e:dd:2a:6d:a3:7e:5c:04:79:71:5a:6e:
6f:59:ef:5e:b8:37:24:12:b1:5d:70:84:b7:11:0c:6a:b5:e9:
65:0a:59:8d:b6:c5:d9:25:12:af:1f:7d:4b:73:a7:32:f9:b5:
05:57:38:12:96:b0:07:ba:be:2c:33:66:cc:63:36:43:8d:14:
4c:b7:60:27:0b:a8:3d:32:02:01:60:99:3e:d4:e1:a2:d1:85:
05:d5:9e:7a:11:39:c7:93:a3:4b:5a:b3:74:79:33:4a:59:60:
7c:99:64:23:af:af:9d:23:bf:a8:10:2e:bb:39:15:28:97:b7:
a2:b6:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:44 2024 by rpki-client on console-ams.rpki-client.org