Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDFEBC32A9CE11EF85A5C555762E951A.roa
File: FDFEBC32A9CE11EF85A5C555762E951A.roa (raw, json)
Hash identifier: ai8pPwZ+P4kaEBnCvzghJr5KrDWN1EBwxViPV1GkB2Q=
Subject key identifier: 65:ED:DB:FE:BC:CF:EA:09:F6:E9:3C:43:0C:74:FD:53:21:93:24:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011208
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDFEBC32A9CE11EF85A5C555762E951A.roa
Signing time: Sat 23 Nov 2024 19:13:16 +0000
ROA not before: Sat 23 Nov 2024 19:13:12 +0000
ROA not after: Mon 02 Dec 2024 19:13:12 +0000
asID: 22773
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70152 (0x11208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:13:12 2024 GMT
Not After : Dec 2 19:13:12 2024 GMT
Subject: CN=6742294c-35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:d0:83:4e:ec:97:44:39:79:c8:d7:f2:41:
ab:59:5c:1b:a7:f2:7f:dc:d9:ed:78:b4:9a:00:68:
4e:62:e7:ae:44:88:34:51:ec:51:7f:94:2b:9f:55:
14:f6:57:1c:fb:e0:3a:c7:89:1e:cc:d4:e5:58:72:
6d:0a:a7:ad:c3:d8:66:c3:b3:ef:00:55:dd:99:94:
6b:11:b9:d9:fa:56:32:92:c1:ee:a9:f5:84:94:a8:
7c:a1:77:a7:eb:79:bd:e2:65:4b:b0:d2:d5:5f:56:
2a:88:02:f6:61:2f:c3:3e:3c:81:7e:0d:bd:13:f9:
2a:6f:f3:3b:20:70:d9:fa:40:c9:a7:52:ca:f8:14:
25:ce:cb:28:b9:b5:d6:f0:93:a5:65:45:45:40:19:
9c:39:4e:a3:4e:a9:ea:11:2f:2f:3c:4c:80:3a:71:
16:a2:07:15:a5:c9:c2:9f:85:20:f4:31:e0:34:f0:
c9:61:46:ce:cc:dd:be:81:c5:b6:07:7c:02:0d:ac:
8c:f5:8d:6f:42:ec:93:a5:98:f3:4a:37:74:55:5c:
0d:a0:6b:2a:4e:34:69:44:8d:fe:75:3a:86:78:95:
a4:ae:72:50:8d:23:2c:29:91:80:d7:78:d2:55:b5:
af:61:ad:10:76:8c:30:07:68:1a:de:dc:5d:d2:57:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:ED:DB:FE:BC:CF:EA:09:F6:E9:3C:43:0C:74:FD:53:21:93:24:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDFEBC32A9CE11EF85A5C555762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
71:8f:44:75:27:b5:c3:db:80:09:ea:43:79:b5:c3:37:81:c6:
8a:4d:c0:86:57:bd:fd:1c:4c:13:90:63:00:a1:d2:e5:b4:cc:
85:3e:26:9d:be:9a:fa:ba:77:65:d4:1c:e2:f3:e7:05:45:71:
90:69:77:c4:16:f1:41:32:d5:f2:41:b2:42:0b:85:91:79:a3:
a4:f8:24:c3:80:c0:78:d4:f9:20:6e:b3:35:89:53:dd:c6:56:
3e:06:57:79:e3:f0:2d:f5:4d:89:1f:42:ba:3e:97:af:52:a0:
6b:90:b8:ec:70:f6:80:81:1e:1d:67:a3:e7:bb:d5:06:80:7e:
f9:47:0a:27:d0:d7:44:bd:62:c8:44:de:c8:fb:98:15:c7:2b:
45:b6:a8:3f:26:95:95:e3:f8:d6:38:b0:0e:0b:8b:10:e8:50:
bc:32:92:61:29:76:e9:60:1f:db:ae:47:dd:11:22:e0:49:fa:
2c:72:f5:89:41:33:a9:e0:02:6b:11:3c:68:7e:90:ef:79:16:
b9:8b:e5:cf:bd:41:9e:0e:3f:ab:3c:f9:6d:19:dd:6c:d0:3a:
ad:f2:60:64:7a:7a:55:46:7e:8e:db:7a:a2:f5:5a:b4:d2:4c:
28:de:78:ba:5b:c2:6c:04:df:a0:56:7c:ad:91:dd:89:b5:79:
9c:e5:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:48 2024 by rpki-client on console-ams.rpki-client.org