Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDF91ECAA8DB11EFAB1E395D762E951A.roa
File: EDF91ECAA8DB11EFAB1E395D762E951A.roa (raw, json)
Hash identifier: qZosXdmtvrdV3GR4d1ZhEdErLU71SSy1gSdW43KO2KI=
Subject key identifier: B7:3C:D1:3C:DD:9C:3D:94:6E:44:94:15:30:AE:73:AA:9B:8C:1A:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011055
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDF91ECAA8DB11EFAB1E395D762E951A.roa
Signing time: Fri 22 Nov 2024 14:13:22 +0000
ROA not before: Fri 22 Nov 2024 14:13:18 +0000
ROA not after: Mon 09 Dec 2024 14:13:18 +0000
asID: 48529
IP address blocks: 154.206.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69717 (0x11055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:13:18 2024 GMT
Not After : Dec 9 14:13:18 2024 GMT
Subject: CN=67409181-9efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:61:90:66:cf:5f:af:8b:20:b8:d1:66:f4:
d6:1d:b7:eb:0c:c0:23:df:5a:4e:13:51:ab:32:aa:
01:12:1e:0c:c9:8d:6d:7e:cb:e8:aa:9d:d6:18:03:
6c:5d:aa:fa:1c:7a:6e:c9:3e:a9:2b:e6:0c:9d:60:
5c:68:3c:f1:f8:4c:63:23:0d:35:33:fd:56:b9:b3:
be:28:6e:67:18:b8:d6:a3:4e:bd:88:1e:74:44:e7:
08:e5:a3:d3:d3:0b:62:11:4e:c2:86:de:d0:12:fa:
4c:e8:d9:14:19:5b:a0:52:0d:d9:f4:20:29:cc:83:
c6:c6:03:35:2c:9e:b2:0e:93:64:37:97:94:bc:37:
2f:6f:9e:19:67:75:5f:12:07:de:c2:bc:27:ae:dc:
b3:fe:67:de:54:75:d6:8f:67:e4:54:d0:56:12:a8:
ea:24:74:6d:34:0c:a2:e5:5b:34:32:83:b4:15:e2:
ec:b5:c9:c2:bf:81:af:da:c9:3d:d9:ac:2c:24:2d:
5c:47:65:fa:23:ff:99:61:55:5a:db:1a:b7:24:57:
8e:d5:29:ca:e3:7e:5a:6b:8d:45:c7:e6:49:8d:54:
53:d6:41:5e:82:c6:f2:29:15:7a:89:05:63:b5:e2:
64:42:5b:cb:a9:5d:a0:f2:51:5f:3b:ee:be:a8:bb:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3C:D1:3C:DD:9C:3D:94:6E:44:94:15:30:AE:73:AA:9B:8C:1A:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDF91ECAA8DB11EFAB1E395D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f4:79:75:ea:86:89:89:16:bc:a3:6f:11:e6:4b:3b:ee:97:
bf:93:f0:8d:09:ef:19:f7:64:60:3a:39:55:a5:db:96:9f:63:
85:1e:8f:7f:e2:a4:7a:f8:f8:eb:37:22:d1:a5:62:d3:98:48:
a5:f3:35:3f:4a:e3:ef:24:bc:f2:52:17:d0:46:47:40:bf:98:
01:de:26:37:12:28:3c:cb:ba:c2:ed:44:06:1a:ba:1d:42:0f:
33:41:f0:26:4f:d6:3a:70:32:5e:0c:b7:1d:1b:9b:62:33:9e:
3b:71:a0:3d:e6:59:17:13:d1:8b:b7:88:20:01:51:99:8e:a0:
c3:8c:50:db:81:bc:30:83:56:78:a2:2d:98:73:b4:35:72:00:
85:ba:2b:38:bf:db:a7:6c:d0:15:da:a1:a7:d1:cd:68:d3:27:
68:e3:e3:1d:38:ee:ca:a3:c0:b6:91:18:6d:da:22:f5:ca:67:
2a:f3:d1:5b:34:f0:00:3b:6d:ee:81:bb:56:20:1e:bc:da:8a:
7e:a3:aa:4b:9a:54:2c:7d:8e:25:cd:f1:60:4d:3a:e9:ca:4f:
a6:7b:72:71:d9:be:eb:31:ae:9b:8c:7a:8f:28:79:30:f0:a6:
64:02:bb:65:ec:bd:d0:ee:b1:1b:80:66:22:ba:a6:1b:87:14:
b2:4f:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:45 2024 by rpki-client on console-ams.rpki-client.org