Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7726FFE9B5E11EF85A2D153762E951A.roa
File: F7726FFE9B5E11EF85A2D153762E951A.roa (raw, json)
Hash identifier: +pbEbfzSb4IJJ0BbfXN81eM/VXglDweyWEvd6AHQu1w=
Subject key identifier: C5:8D:1C:27:03:34:DA:34:41:3B:44:31:37:9B:49:96:D8:D4:12:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01079D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7726FFE9B5E11EF85A2D153762E951A.roa
Signing time: Tue 05 Nov 2024 10:16:05 +0000
ROA not before: Tue 05 Nov 2024 10:16:02 +0000
ROA not after: Mon 13 Jan 2025 10:16:02 +0000
asID: 7018
IP address blocks: 154.85.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67485 (0x1079d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 10:16:02 2024 GMT
Not After : Jan 13 10:16:02 2025 GMT
Subject: CN=6729f065-8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:45:81:84:d8:4a:51:99:86:c6:1b:8a:65:
99:e3:d5:10:eb:22:25:af:d4:1c:8b:23:a7:e7:28:
7a:57:d0:ca:b7:68:66:98:10:3d:68:cb:d7:f1:41:
df:2b:fd:22:dc:5e:4c:c9:f3:a0:0d:36:11:3c:c8:
55:28:e0:b8:f1:1b:d2:9c:5f:dd:21:0a:8e:6d:a6:
5a:03:e9:ab:63:50:3b:29:2b:1e:49:52:ee:84:79:
32:91:03:2c:e3:7c:2e:65:9d:4d:77:d7:17:2a:66:
79:ec:c2:b5:30:a8:69:2b:37:b7:cf:89:1d:cf:89:
d4:47:10:f5:1a:9b:d7:ed:42:04:27:9e:d7:c6:d4:
e6:fa:69:3a:a6:8c:a4:f3:38:2b:b0:a6:da:75:6f:
f4:31:6a:14:77:47:a0:23:f3:27:ba:ad:9f:e0:72:
37:8e:ae:20:8d:c9:73:93:df:47:46:d9:9e:77:9c:
b8:c8:d8:31:03:6f:dd:b2:1a:8a:83:f3:a8:ab:d1:
fe:9c:c0:2c:88:70:15:f1:f9:e4:bb:04:7d:4e:11:
6d:d3:4e:b4:74:8d:41:4d:18:bb:13:c5:f8:2a:97:
82:9f:67:ed:c9:4c:25:c1:64:cd:ea:f4:9b:45:5b:
b1:c1:bb:6c:88:17:0f:b5:8b:d1:7a:65:fd:f1:ee:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:1C:27:03:34:DA:34:41:3B:44:31:37:9B:49:96:D8:D4:12:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7726FFE9B5E11EF85A2D153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.104.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ab:cf:09:19:ed:94:3a:b4:24:cf:e8:93:5c:13:11:e5:24:
33:45:d9:15:1a:f5:86:84:fa:10:52:bd:ad:85:24:d0:2d:69:
fd:b2:32:f6:1c:bc:fb:09:a5:ff:3a:4b:60:f5:1d:52:6b:df:
5e:2b:d5:80:4f:de:6d:00:82:55:51:b8:a0:c2:bf:77:be:8b:
4b:09:f6:7b:99:63:39:e0:8d:bb:8b:e1:8e:93:9f:18:95:f2:
55:0e:36:7a:18:37:9d:34:3d:1e:df:dc:70:73:c2:cb:88:e2:
1a:87:96:22:29:a9:1c:32:d5:db:db:94:f6:64:0b:35:5d:1b:
ea:44:17:85:96:4f:d6:04:fd:87:1d:f5:f1:79:da:f9:8c:f8:
f4:5e:88:ea:00:77:ec:bf:6f:0a:6a:8a:f3:f7:19:c0:61:e8:
1f:91:ae:8d:f1:f4:72:33:e0:b3:20:df:aa:e4:1f:c3:95:cc:
14:07:ea:e8:8b:d8:51:a6:6b:37:3b:5f:4b:7b:1c:e8:7f:4c:
f4:c1:63:72:f6:fe:68:9d:05:73:0d:30:4b:a8:41:94:53:54:
4b:0c:d0:a4:2c:16:b3:b2:ca:21:30:c4:38:74:30:63:7b:65:
7c:92:e9:1f:82:c3:44:86:18:b0:78:fb:56:e9:78:63:e9:cf:
81:c2:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:15 2024 by rpki-client on console-ams.rpki-client.org