Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F294B932A0DC11EF84B47266762E951A.roa
File: F294B932A0DC11EF84B47266762E951A.roa (raw, json)
Hash identifier: osyE8pZKI0RJl3dfG7qMO/Jo9UVaFzfa9WZWDRp91JE=
Subject key identifier: 59:BB:B4:FB:27:6C:FA:09:44:8A:62:91:01:98:14:AE:D5:12:59:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F294B932A0DC11EF84B47266762E951A.roa
Signing time: Tue 12 Nov 2024 10:00:30 +0000
ROA not before: Tue 12 Nov 2024 10:00:26 +0000
ROA not after: Sat 11 Jan 2025 10:00:26 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68670 (0x10c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:00:26 2024 GMT
Not After : Jan 11 10:00:26 2025 GMT
Subject: CN=6733273d-f58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:b2:f4:d5:4f:90:72:35:38:fd:5b:72:15:
9d:f1:e5:9d:1d:0e:b5:aa:0d:31:20:11:db:ef:b9:
70:28:fb:04:60:f7:f5:e5:8b:3d:42:79:55:69:8e:
c7:27:7e:bd:12:f6:b7:d8:9c:d9:8c:e1:05:5b:aa:
cb:ab:7f:d7:86:e9:81:fe:3c:ef:9a:ce:47:91:82:
7c:56:46:20:85:47:11:7f:dc:ac:a5:0a:c4:b4:76:
9f:c0:e0:f9:22:17:ed:a7:4c:08:c8:b8:be:34:99:
c5:55:31:90:95:19:08:e4:8b:d7:f6:69:bc:61:84:
74:32:2b:ee:9e:b5:ee:bb:32:49:d0:7a:59:27:19:
5a:b1:e4:cb:3e:cd:c2:79:44:00:21:b8:94:39:b8:
6c:19:05:17:e5:dc:69:3f:0e:e1:0e:df:9a:be:e5:
cf:8f:02:98:09:0c:13:80:c6:85:2c:a0:98:b8:ba:
da:98:a0:2d:e5:dc:fa:ea:e5:18:16:16:d0:be:56:
90:f2:1b:9e:b1:d9:4e:1d:10:ea:6b:63:78:ac:dd:
95:8e:e8:20:4a:1e:85:f6:c1:f6:7c:96:78:77:fa:
87:d5:c6:74:e8:6d:b6:2b:a1:4e:bb:48:12:29:37:
d3:d6:1a:2d:0d:57:bd:e5:2f:c2:7b:b5:47:5f:05:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:B4:FB:27:6C:FA:09:44:8A:62:91:01:98:14:AE:D5:12:59:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F294B932A0DC11EF84B47266762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:12:f5:a4:ce:6b:d4:bf:66:cb:a4:41:a3:66:9e:8b:7c:0d:
1c:7d:c1:61:3c:df:7b:02:72:75:73:7f:bc:c2:20:84:02:90:
25:fe:8f:b3:d8:c8:73:ad:c5:b4:cb:54:9c:c3:af:6a:07:a0:
e3:d0:33:60:12:4a:0d:27:3d:30:bf:9d:26:72:1f:03:9c:a8:
bb:bb:8d:0e:d6:6c:a5:4d:2e:77:94:6c:d9:6c:00:36:82:86:
1a:13:7e:51:fc:ee:5c:cd:38:f0:ab:64:f6:81:d4:aa:ce:59:
f7:b9:16:71:2f:e2:1a:e8:c4:a6:94:59:6d:c8:ab:a9:d5:4e:
52:0f:fa:0a:b4:90:ce:5d:9c:a5:f4:a7:e7:16:49:a3:ff:b9:
23:96:45:dd:e9:40:21:c6:68:20:3f:0d:8a:7d:82:54:d8:5c:
4a:f3:83:21:f7:07:7d:2f:4f:19:f7:43:9f:4c:87:67:b0:c7:
08:00:d4:db:07:ce:a6:19:29:90:e6:1e:66:27:20:a5:7d:ee:
bc:3a:4d:e1:cc:f8:15:9f:0a:6e:8c:69:53:41:29:e0:66:5d:
31:b1:fe:8f:41:24:1e:a1:10:13:97:4e:c1:65:78:7b:56:61:
58:7f:75:d1:e8:74:d6:1a:1c:d4:8a:e0:7c:22:42:69:20:df:
bd:b5:7c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:59 2024 by rpki-client on console-ams.rpki-client.org