Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7352726A8EB11EF802F9942762E951A.roa
File: F7352726A8EB11EF802F9942762E951A.roa (raw, json)
Hash identifier: D4+FqQMcqUeJQIqKlM1Td/NlV6l7hXnUnia0UvEspzA=
Subject key identifier: 0E:22:D1:C9:DF:2C:08:2E:F8:0D:7D:DB:4F:01:31:A3:7A:74:6A:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011117
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7352726A8EB11EF802F9942762E951A.roa
Signing time: Fri 22 Nov 2024 16:08:09 +0000
ROA not before: Fri 22 Nov 2024 16:08:05 +0000
ROA not after: Tue 03 Dec 2024 16:08:05 +0000
asID: 62240
IP address blocks: 154.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69911 (0x11117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:08:05 2024 GMT
Not After : Dec 3 16:08:05 2024 GMT
Subject: CN=6740ac69-aaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:ee:97:5c:e7:b9:96:67:15:5e:81:92:d7:
9a:1f:17:b4:be:0d:ef:d6:cc:c2:04:b7:3b:d1:bf:
5c:e4:2a:ee:b1:d8:39:e8:6c:e4:f6:a1:69:d0:ca:
f5:13:87:ef:82:c3:75:d2:9a:91:35:ab:e9:57:61:
ee:5d:c0:10:5d:50:a1:4b:f1:42:01:9a:dc:6b:88:
c3:24:20:65:6b:1c:d3:fa:43:37:6c:79:af:0c:76:
6c:47:2e:f4:dc:d7:0c:b3:db:29:a6:74:73:35:56:
ba:05:3f:9d:f6:38:c5:d0:25:6d:bd:ea:36:47:1b:
52:48:ba:5e:be:95:40:8e:fb:d7:59:12:09:09:e2:
8f:f4:d1:b0:3b:bb:09:94:22:9c:d2:1e:57:96:f9:
d7:f6:5f:38:91:8e:04:ca:5c:1f:be:85:f1:0b:37:
8a:b3:d8:4a:7a:be:bc:85:ec:61:e8:15:cc:98:86:
78:39:8c:45:a4:57:1f:1f:cd:37:30:3c:a6:01:12:
76:83:09:12:e0:af:48:d8:4f:a7:0f:f2:c3:85:d6:
6a:bf:67:69:e4:0e:85:0c:e0:05:ba:cb:05:ad:a0:
a8:c2:06:68:e1:74:bb:b3:3b:94:7c:ea:0f:7a:19:
7f:fb:46:98:88:3c:d9:87:7c:9c:a8:df:0c:0f:b4:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:D1:C9:DF:2C:08:2E:F8:0D:7D:DB:4F:01:31:A3:7A:74:6A:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7352726A8EB11EF802F9942762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:ec:a9:a9:db:8f:26:1c:d6:15:51:97:57:ff:b9:86:69:
db:b7:cc:f0:5e:9b:39:e7:23:5a:84:06:c7:0c:d6:83:64:c8:
de:c3:8a:7b:59:eb:10:0c:d0:2b:84:cd:85:20:63:bd:aa:da:
cd:fc:98:95:87:ea:ed:b1:4c:e9:65:82:2c:bb:a9:0f:56:a2:
88:83:2c:e1:87:07:26:4c:8c:2f:d8:f3:3e:b3:64:ca:5b:5e:
1b:0a:c2:0c:0d:86:f1:1e:0a:a6:5d:c0:60:d4:48:22:67:26:
cf:41:19:0a:a7:4f:bb:88:80:21:42:f8:5c:0f:92:21:98:fa:
aa:36:84:69:ba:18:a3:ff:e0:c7:4d:e8:24:b1:be:e4:ae:da:
30:7b:99:ae:b7:47:33:5f:14:65:86:c6:84:b2:19:7d:1b:ba:
20:d2:1e:c1:4c:72:1f:9d:85:40:0a:df:a6:31:16:4a:00:a7:
db:3d:c4:26:b2:90:01:ec:20:47:c1:e8:af:5d:ae:49:6e:97:
94:80:1d:dc:e8:8c:65:28:48:f6:07:43:47:8e:51:35:60:85:
e7:99:48:31:af:aa:44:c7:25:2c:be:41:52:9b:b3:be:87:8f:
4f:4a:5d:b9:ea:b5:ae:b7:50:3d:6a:5d:a3:09:e5:10:37:41:
4d:13:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:46 2024 by rpki-client on console-ams.rpki-client.org