Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29EDA42A06B11EE9A6E676BD25BE465.roa
File: F29EDA42A06B11EE9A6E676BD25BE465.roa (raw, json)
Hash identifier: 9RqDsfETb7Gb0MIaCppusf+q4OBeUdahPtC5pp9VOXg=
Subject key identifier: 32:EB:2B:A0:AE:1C:69:1D:87:0F:E5:BD:C9:A2:0E:20:0D:D0:24:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6598
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29EDA42A06B11EE9A6E676BD25BE465.roa
Signing time: Fri 22 Dec 2023 01:46:39 +0000
ROA not before: Fri 22 Dec 2023 01:46:35 +0000
ROA not after: Sun 22 Dec 2024 01:46:35 +0000
asID: 140867
IP address blocks: 154.197.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26008 (0x6598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 01:46:35 2023 GMT
Not After : Dec 22 01:46:35 2024 GMT
Subject: CN=6584ea7f-2767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:51:47:63:4e:ff:57:24:1f:aa:4e:bc:9e:
9a:42:a6:8e:19:39:c5:69:95:f8:77:1b:9b:d3:84:
d2:5f:fd:8a:2c:02:66:ee:1a:68:7e:be:d7:85:18:
60:69:f4:09:c5:19:0c:1e:70:7e:c8:57:4f:9c:9f:
b7:8c:18:99:d4:d3:84:f2:4a:02:20:ac:37:32:b3:
57:32:ba:a9:87:87:2c:0b:25:22:18:cb:99:c2:46:
52:49:95:8e:46:0d:3a:b2:37:22:e8:64:47:2a:2a:
b6:0b:67:3a:69:56:3f:11:e8:7f:2f:d2:ea:ab:96:
bb:ed:2e:a2:d2:59:40:6c:97:02:98:db:80:98:61:
78:93:8d:4d:4c:19:84:01:ac:77:b6:af:f8:a8:a5:
ae:06:02:e8:ee:c8:59:1c:fa:dc:51:11:02:bb:bd:
6a:25:15:70:3f:8a:66:8f:96:51:65:7b:b6:0e:07:
6d:81:39:e1:fa:74:97:72:45:71:25:fc:f1:ee:9a:
38:df:e3:f2:8b:67:de:94:31:79:95:be:45:0b:6b:
70:00:57:95:5b:6b:0e:c7:64:e2:55:48:2a:fd:7a:
cc:67:fd:42:38:51:17:c9:dd:78:37:6f:8d:cf:4a:
52:88:52:0b:75:63:36:74:ef:11:fb:0f:71:9f:62:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:2B:A0:AE:1C:69:1D:87:0F:E5:BD:C9:A2:0E:20:0D:D0:24:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29EDA42A06B11EE9A6E676BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.105.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0b:a7:b3:b3:21:e5:b7:17:97:f2:e2:47:22:19:e0:c9:8e:
fe:0b:8d:e5:a4:05:0a:1b:92:1b:a7:67:22:f0:95:21:17:1f:
33:db:4e:19:73:c7:47:89:02:d6:45:6f:64:be:1b:cf:6b:62:
3f:79:b7:1e:bb:9c:48:e7:0d:61:1c:bc:2b:8a:7f:56:2b:19:
67:32:a5:ff:f0:a1:b2:66:02:db:aa:68:c7:08:a6:44:16:09:
71:9a:4a:df:ac:81:07:d8:f5:11:12:c5:8e:29:69:b5:6f:d0:
62:29:75:f6:71:0f:ab:76:9a:02:ef:4b:3e:2c:bf:73:47:71:
9b:32:91:22:04:5b:68:f0:b5:d9:e6:3f:94:da:b6:94:7c:83:
a1:40:0f:f5:75:5f:aa:aa:c2:63:60:0d:49:fd:53:9d:d5:6a:
05:5f:6c:e9:4d:6b:fa:8f:b9:0e:b6:dd:c5:e3:84:87:40:26:
bc:a6:de:8d:94:19:58:3b:f3:dd:a5:0e:db:2c:91:8c:e6:66:
64:d5:34:4a:b5:06:4f:05:e8:16:35:76:55:90:12:db:b3:02:
cc:63:f2:10:cc:4a:86:3a:73:d0:aa:2e:65:45:b6:16:f8:b4:
e1:e8:e0:40:23:a3:df:a9:01:08:e8:84:1c:d2:c1:bb:1e:ab:
9b:13:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org