Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44B4EDE912411EFA30D775A762E951A.roa
File: F44B4EDE912411EFA30D775A762E951A.roa (raw, json)
Hash identifier: Ug3xPoqQjOC4KHhB2vUZa2l8t5VLXSbCdH2M9XciEIU=
Subject key identifier: 74:9F:A7:87:FD:67:8E:06:31:AC:28:3A:FC:95:01:A2:BC:47:22:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01010C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44B4EDE912411EFA30D775A762E951A.roa
Signing time: Wed 23 Oct 2024 09:55:37 +0000
ROA not before: Wed 23 Oct 2024 09:55:34 +0000
ROA not after: Fri 29 Nov 2024 09:55:34 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65804 (0x1010c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:55:34 2024 GMT
Not After : Nov 29 09:55:34 2024 GMT
Subject: CN=6718c819-f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:f9:68:dd:82:a0:ce:ed:ed:c4:d3:20:12:
c0:21:56:fb:b5:4e:50:8d:27:3b:58:7b:dd:c4:46:
74:e6:88:28:85:b2:d5:6f:23:7c:c8:20:f1:e3:82:
a6:cb:27:57:78:3f:2a:83:26:32:ab:b0:0c:34:0c:
08:32:cb:c8:41:d8:ce:6e:5b:34:ad:ca:58:86:fa:
38:30:c0:c3:76:26:b6:08:c8:02:d6:54:32:68:9b:
08:68:9d:65:2e:cb:53:5c:e6:0c:59:e0:7d:33:e0:
7e:7b:fd:71:c8:60:a6:5d:17:81:db:64:bb:d3:a7:
e4:b6:d7:6f:f5:71:00:d7:87:9d:3b:ab:38:ea:84:
a1:6e:29:4c:6e:e9:d9:ff:52:e3:ea:e3:f0:6a:8e:
33:fc:f8:67:2b:1a:61:61:81:b8:e7:c7:8b:23:f3:
49:e6:64:d5:19:ac:f6:4c:22:6c:a3:13:05:9c:35:
92:6e:21:bd:71:51:5d:f3:3f:dd:92:35:86:62:b9:
c5:0e:48:9a:de:f7:0e:2e:be:43:7f:fe:de:75:f2:
2a:ec:16:08:7e:6f:cc:46:dc:6b:2a:61:59:e7:ec:
63:ed:86:43:12:d1:d9:a1:ff:dc:2d:2f:91:8f:77:
a5:f2:9d:60:0d:ca:f1:87:0f:6b:5e:da:28:91:47:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:A7:87:FD:67:8E:06:31:AC:28:3A:FC:95:01:A2:BC:47:22:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F44B4EDE912411EFA30D775A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
c5:1a:c0:80:33:46:7e:9a:83:52:ae:57:16:ca:50:b3:76:24:
92:26:6c:22:86:37:80:29:7f:2b:03:60:50:85:99:e2:bc:4a:
cb:be:b9:cf:6b:23:36:9e:e0:01:d9:3c:ee:60:57:45:f1:fa:
43:26:06:bf:3d:71:46:14:17:fa:20:7e:18:18:dd:ea:a8:c7:
b5:9e:b4:68:b3:5a:39:9d:47:80:60:f2:13:98:6c:e9:72:a7:
d5:f3:ec:b8:ab:60:20:9b:52:71:bf:46:4c:e9:ed:79:c2:59:
5d:bd:38:94:48:c0:2c:7a:f0:d2:20:7d:bc:86:79:0c:37:23:
d7:a4:f7:ac:0f:a5:c9:48:44:42:55:8c:a4:d9:c4:c6:c9:97:
51:04:08:28:19:e2:02:ca:89:49:3a:1e:da:d4:48:89:04:a1:
c0:7d:56:f0:dc:04:91:a4:b4:07:10:45:f8:de:0f:b5:4e:3d:
b1:f9:73:e5:b3:80:c5:1a:65:f0:c1:a2:13:c4:bc:e3:f0:7a:
88:75:18:1f:fb:0f:57:a8:80:84:63:ed:32:c5:82:13:0b:1e:
f4:60:4f:d6:4d:11:e1:bd:8b:76:7e:5f:e0:c1:59:c3:c8:8d:
bc:d7:c4:b9:b0:4a:47:59:a4:59:8c:65:99:39:c8:c1:8d:35:
45:ec:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org