Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F243629E9B7811EF86D51073762E951A.roa
File: F243629E9B7811EF86D51073762E951A.roa (raw, json)
Hash identifier: jU64Q/D8mXUdbqUvUH0UN3NYMFAs7fJWeRhT5XLCsx8=
Subject key identifier: 7F:29:98:72:EC:D3:C3:6F:96:60:62:2A:30:9D:D1:6B:47:E2:C6:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F243629E9B7811EF86D51073762E951A.roa
Signing time: Tue 05 Nov 2024 13:22:03 +0000
ROA not before: Tue 05 Nov 2024 13:22:00 +0000
ROA not after: Mon 13 Jan 2025 13:22:00 +0000
asID: 22773
IP address blocks: 154.212.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67553 (0x107e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 13:22:00 2024 GMT
Not After : Jan 13 13:22:00 2025 GMT
Subject: CN=672a1bfb-6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:50:4d:ce:37:eb:b2:23:8a:e4:f6:a1:68:
50:e4:04:c3:71:47:f6:89:8b:a9:4d:f0:9c:14:7a:
20:06:58:33:c3:2f:57:6f:81:a1:9f:e6:c1:96:06:
db:f8:24:2d:98:f6:c6:7f:d4:89:ad:95:97:a0:3c:
a6:42:18:79:af:95:c6:c7:a4:2b:8d:5e:36:84:51:
a6:63:e8:38:31:fd:02:be:b4:26:fd:6e:d5:09:e2:
54:ff:b4:41:77:82:8c:4f:7a:02:29:d1:e2:68:49:
5a:b9:3e:fd:07:db:2d:92:72:2f:06:e6:a6:13:1e:
4f:10:24:de:b7:8f:1a:2e:94:de:9d:14:64:60:da:
27:8c:b8:ba:37:6c:e6:17:a4:17:3a:b4:b8:95:0c:
ed:a7:e0:77:1c:c5:d4:b8:fb:4c:c4:83:31:da:03:
6e:8e:ed:0e:de:90:75:1f:2a:09:b4:5f:38:86:a3:
c3:b8:14:ca:f6:61:bb:24:a9:53:ac:d3:1c:9e:85:
d5:b5:4b:8c:70:60:95:79:46:16:cf:1f:59:29:46:
b9:f3:75:67:24:8a:7e:65:10:25:33:12:bf:18:b0:
de:b9:dc:e6:19:08:e6:25:f9:1e:c2:36:45:d3:2a:
1b:6e:c2:12:7c:d4:d9:d0:0b:76:09:82:6f:75:7a:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:98:72:EC:D3:C3:6F:96:60:62:2A:30:9D:D1:6B:47:E2:C6:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F243629E9B7811EF86D51073762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9c:76:4f:40:7c:c9:1b:d6:84:cd:00:a5:53:b4:40:a7:f4:
75:73:6c:52:d0:c3:80:63:29:5c:8b:17:92:5c:c3:54:8d:57:
93:77:a0:5e:e7:17:d8:9a:46:c1:86:82:99:bb:92:f6:68:38:
47:d5:cb:1c:d0:0f:77:73:22:f5:22:4a:f1:ba:5d:25:45:4f:
a8:c1:91:3a:ab:72:63:c7:34:e2:44:6f:61:6a:6b:a1:27:34:
3f:ce:f3:b9:6f:dd:51:e0:3b:d0:7f:e7:0c:ef:1f:5e:02:88:
27:fc:2c:6d:6b:0d:95:84:93:57:22:58:57:b8:e2:23:dc:f5:
d2:6b:2b:1f:8d:e2:79:2f:ad:f9:d7:4b:b2:04:bf:d6:ad:72:
4f:40:51:a7:87:75:a2:d4:82:c6:48:22:7d:9c:ec:f1:29:26:
d0:e4:28:af:73:08:ac:53:09:ef:a3:df:39:35:d6:d2:f2:1f:
9a:72:c0:f9:6a:37:e6:42:1a:bd:59:bc:d6:b8:6c:91:90:8c:
4a:cc:25:1a:aa:f8:97:d3:97:be:0f:0e:e9:c4:7f:d9:c5:3b:
fc:e9:4a:1b:31:6e:29:07:77:4d:68:e5:5b:f5:3d:70:b0:4f:
0b:dc:ff:e5:e1:82:f7:5d:80:8e:ce:6e:c8:71:cb:5f:74:ac:
43:f9:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:14 2024 by rpki-client on console-ams.rpki-client.org