Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26778C6861C11EF809EDFB5762E951A.roa
File: F26778C6861C11EF809EDFB5762E951A.roa (raw, json)
Hash identifier: iPsk+e3SL6bf3yyYiYYyuirBoMrDACfum5Y29RSghVQ=
Subject key identifier: 8C:35:15:55:A5:66:8B:F6:97:E3:F5:7E:0B:54:D0:EE:EF:5F:CB:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FB97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26778C6861C11EF809EDFB5762E951A.roa
Signing time: Wed 09 Oct 2024 09:00:36 +0000
ROA not before: Wed 09 Oct 2024 09:00:31 +0000
ROA not after: Sun 10 Nov 2024 09:00:31 +0000
asID: 137552
IP address blocks: 154.194.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64407 (0xfb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 09:00:31 2024 GMT
Not After : Nov 10 09:00:31 2024 GMT
Subject: CN=67064633-7fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:c9:e3:95:0e:2b:28:c6:41:8d:de:ed:be:
c3:5d:40:fb:e8:30:d1:32:5d:b5:19:02:3c:8f:51:
eb:99:6a:80:23:4b:45:02:e8:31:4d:a5:67:29:6d:
2e:28:42:ec:25:24:e8:eb:8d:24:98:dc:34:8e:fb:
dc:89:62:83:2f:73:8a:22:f3:9f:39:59:81:b9:60:
e3:a6:60:ca:3c:60:7b:f9:83:85:e0:50:4b:19:89:
b4:86:c4:85:fe:80:f3:fa:4b:4a:33:5b:3a:35:58:
57:74:f3:f6:3b:66:24:76:ea:88:cf:1d:f7:27:a2:
cf:19:0a:5e:1d:96:62:76:c7:dd:55:bb:23:98:9c:
24:a6:d0:d5:20:62:ca:ae:a6:8b:f5:65:36:3f:64:
22:ce:54:b8:1a:64:c2:d7:cb:35:2c:69:a4:2f:69:
b6:74:b0:9f:8f:07:cd:e3:4d:31:71:5f:cd:3c:94:
7e:7d:48:3e:03:2d:37:54:04:7b:5f:06:e2:dc:f7:
5a:b1:aa:10:c1:fe:25:40:30:3a:b2:39:ec:7b:3e:
b5:fa:34:02:a9:9a:d0:60:2b:81:6f:24:6e:a1:d2:
1b:c8:67:d9:27:25:75:2c:04:f3:26:26:3b:16:a9:
2c:d7:3c:ad:8c:0f:4a:e5:93:34:fc:95:aa:d0:75:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:15:55:A5:66:8B:F6:97:E3:F5:7E:0B:54:D0:EE:EF:5F:CB:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F26778C6861C11EF809EDFB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.207.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:77:a5:89:fc:79:19:8d:7b:fd:d8:b4:c9:fb:1d:57:b2:
b7:f2:e0:62:1d:c8:01:02:11:2d:dd:d7:a3:b3:33:4f:fc:c8:
c8:ab:a9:84:08:e6:7d:90:dd:32:91:ec:e0:1c:0f:30:f5:25:
90:32:80:aa:2f:fb:42:6e:ee:ca:fd:c9:9b:9c:d4:9e:97:e5:
25:d2:c8:cc:bc:3a:44:9e:49:41:81:18:c7:92:72:1f:44:70:
3f:d7:f3:d5:71:ec:69:66:5d:e8:10:d0:ee:83:50:9a:cc:6a:
d5:0f:00:f0:d0:50:ef:b0:74:e4:1b:63:6a:2b:44:53:b3:86:
26:37:64:46:c9:16:e7:f4:8d:e9:49:d6:39:e8:7c:70:05:3d:
14:ff:ef:e5:8d:96:06:0d:80:88:24:c5:24:59:55:83:c5:81:
87:cf:c0:51:da:1e:6f:12:e9:ea:04:37:14:70:65:d9:19:48:
99:cd:29:a7:26:96:1f:48:d3:d3:de:ad:e1:9b:bc:dc:36:ea:
76:ba:0d:99:2e:79:ec:ad:bc:f2:4a:dd:49:86:5e:88:fc:4c:
37:07:cc:e7:ea:23:77:4c:14:7d:07:f5:27:bf:df:9c:a1:41:
d7:c8:a0:01:5e:de:1b:e4:b6:f4:2d:ce:6e:e9:31:35:98:ef:
43:6a:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 11:38:00 2024 by rpki-client on console-ams.rpki-client.org