Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0116736A92011EFAAA25788762E951A.roa
File: F0116736A92011EFAAA25788762E951A.roa (raw, json)
Hash identifier: BjduN66WPSJvRcDF5mDosiZ6p1LqqxfJ9Lvy7kVDOYY=
Subject key identifier: 82:88:7A:CC:3F:F9:F4:DA:5A:6E:9F:69:3C:54:F1:D6:34:CA:2C:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011165
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0116736A92011EFAAA25788762E951A.roa
Signing time: Fri 22 Nov 2024 22:27:20 +0000
ROA not before: Fri 22 Nov 2024 22:27:17 +0000
ROA not after: Tue 03 Dec 2024 22:27:17 +0000
asID: 62240
IP address blocks: 154.196.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 29 Nov 2024 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69989 (0x11165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 22:27:17 2024 GMT
Not After : Dec 3 22:27:17 2024 GMT
Subject: CN=67410548-3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:9e:34:b1:04:cd:34:f4:b8:c8:28:3d:d0:
d1:b6:be:0e:31:cc:54:fd:51:23:88:b9:be:4a:e7:
d6:5d:4a:6b:1e:ac:28:50:28:0d:ae:28:9b:24:08:
99:5e:6f:12:e4:7f:42:e0:12:ba:c2:5b:63:9e:b8:
ad:cb:3e:50:21:24:ec:fb:0e:75:c2:3c:05:f0:ab:
33:1b:ea:32:3d:72:91:f2:36:d4:4b:ef:a2:23:59:
34:8b:87:fa:97:1b:88:25:80:da:74:56:a3:19:1b:
60:c5:1b:ee:55:3d:17:aa:8b:45:ce:b5:73:9d:db:
77:3b:5a:ad:4f:00:d6:86:73:5a:c9:be:11:b6:87:
e1:e1:bc:a2:c3:4c:c2:eb:fa:d7:a3:59:d2:72:1f:
30:81:2c:a6:a1:1f:99:3a:86:94:d7:04:cd:55:42:
39:e9:7b:d2:84:d5:16:0b:90:17:aa:df:41:36:42:
62:9b:4b:fc:3e:fe:0d:0b:04:fd:c2:7c:37:ae:39:
d7:23:08:3f:d6:d2:a2:38:97:63:a7:e8:21:99:f7:
63:9f:09:f9:a3:f0:c7:1d:03:0e:43:ed:12:60:a4:
c1:56:60:5e:f8:d4:96:3d:03:41:74:6d:48:c9:e9:
34:85:08:e2:2f:42:ad:66:69:6f:4b:8c:bb:89:6c:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:7A:CC:3F:F9:F4:DA:5A:6E:9F:69:3C:54:F1:D6:34:CA:2C:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0116736A92011EFAAA25788762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/19
Signature Algorithm: sha256WithRSAEncryption
81:89:d4:d3:52:0a:e4:4a:19:25:53:9b:42:ca:09:b7:01:17:
6b:60:f6:c8:e4:e8:f3:5e:ca:d4:42:a7:40:4b:1a:f6:88:a9:
5c:56:a5:b7:fa:df:b2:95:53:46:44:50:4e:37:e9:b6:11:dc:
32:39:5b:56:df:eb:09:ba:37:fc:54:51:eb:34:ad:44:88:36:
dd:88:bc:08:ff:c3:fd:f6:46:2d:fd:ee:65:ef:77:3f:7c:c8:
a6:1c:73:39:f5:3c:5a:f9:88:2f:61:b1:4d:3f:8d:51:6a:1f:
a9:f6:b5:29:24:97:78:8f:53:63:52:9d:b8:e0:83:10:64:ae:
b6:72:da:77:e1:ea:df:de:4e:66:1e:4e:f3:04:b5:6e:2d:d2:
59:34:42:f7:4b:c4:68:c7:11:a2:39:8a:32:e7:ed:a7:e1:fb:
d6:b6:70:82:53:9e:64:60:aa:2f:a7:24:2b:c0:fd:29:a9:4e:
c6:2a:84:49:d9:c8:01:37:15:31:cb:a9:2d:40:a1:39:3a:44:
f7:28:5e:96:ba:d4:ed:89:f3:66:e4:34:f1:19:ec:06:96:20:
52:30:dd:63:75:8a:1a:b4:c8:3a:b0:75:64:4d:0b:af:92:00:
f4:9b:7e:38:dc:5e:58:0d:ec:ca:1c:9f:e0:ec:a5:87:b8:c4:
0c:ec:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 15:39:31 2024 by rpki-client on console-ams.rpki-client.org