Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CCFCBC726F11EFBFC0AC77762E951A.roa
File: 01CCFCBC726F11EFBFC0AC77762E951A.roa (raw, json)
Hash identifier: Gi3c+b4SHaLIBc38lToXgKvDZX1fzREq4fCRiH/x2W8=
Subject key identifier: 2C:D8:AB:43:75:2F:3E:93:13:2A:43:81:3E:86:C9:0C:16:6C:71:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CCFCBC726F11EFBFC0AC77762E951A.roa
Signing time: Sat 14 Sep 2024 07:57:37 +0000
ROA not before: Sat 14 Sep 2024 07:57:34 +0000
ROA not after: Sat 30 Nov 2024 07:57:34 +0000
asID: 142403
IP address blocks: 154.92.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60958 (0xee1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 07:57:34 2024 GMT
Not After : Nov 30 07:57:34 2024 GMT
Subject: CN=66e541f1-3927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:14:84:61:0e:ff:a7:a0:10:07:93:f2:15:2f:
3d:5a:96:11:5a:62:83:5f:b3:e9:a2:e6:70:02:33:
c5:49:f9:95:67:07:a2:b4:df:2e:c3:32:eb:55:aa:
ba:f4:b6:93:e0:91:33:b7:d9:57:a1:52:c4:82:94:
06:8e:0d:d3:89:b2:54:f5:5b:09:76:94:e5:de:05:
78:25:bc:4c:bf:7d:d9:95:44:2c:f6:54:73:c0:03:
e9:f9:0a:90:86:1c:35:cf:ca:a0:77:6a:d8:3c:98:
97:cc:64:e3:96:6f:6e:89:96:92:21:2c:d9:34:78:
9a:96:20:8c:ce:56:22:b4:37:f9:65:7b:8a:e7:bf:
89:15:4f:38:4f:67:24:f4:ee:dc:57:7d:96:ce:17:
1c:a1:97:f5:f3:db:51:24:71:22:c6:f6:89:7a:71:
3d:70:85:5c:b8:8c:be:d2:10:58:72:be:b5:9d:c3:
d3:97:37:82:a1:8a:2c:38:b8:b0:6e:11:a4:9d:9d:
5a:36:e4:3f:6c:fb:5f:93:a7:77:70:a9:e7:8a:68:
c9:4a:86:ed:14:4d:f6:4a:bb:5c:ee:e8:e0:26:07:
16:48:55:1a:62:d8:a7:81:4e:c3:cf:b0:bf:bc:52:
d6:61:19:23:e2:5c:68:63:6c:f8:29:4d:b0:f6:43:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:AB:43:75:2F:3E:93:13:2A:43:81:3E:86:C9:0C:16:6C:71:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01CCFCBC726F11EFBFC0AC77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:c8:08:df:6c:ca:54:87:31:17:73:3b:f3:46:95:e1:fd:4c:
72:04:34:dc:44:14:6e:a1:63:7d:9d:67:06:df:dd:ed:8b:fe:
fb:b3:68:05:20:68:d5:eb:6e:1b:6a:6d:5f:4c:7c:1b:59:1b:
1b:80:ba:7d:54:67:a3:dd:74:81:07:7b:88:6f:ac:c6:3e:f7:
f1:04:87:d1:ed:bb:fb:68:bb:95:dc:12:d4:81:23:ba:25:e9:
ca:dc:7d:48:45:4d:83:0a:90:c1:fa:5f:96:d4:df:77:a4:38:
a4:0f:1b:1f:f6:ca:50:00:50:7a:18:93:55:bd:bf:92:2d:27:
72:42:a5:e9:80:1c:f8:09:f9:7e:0c:39:37:a5:3c:6d:30:00:
f3:5a:76:6d:5e:8b:27:fb:2b:8f:fd:37:ae:10:4e:7e:83:64:
08:23:1f:fa:fb:b8:c4:9f:2f:dd:7c:d5:c2:d5:b9:e4:14:5d:
90:e5:da:0d:f0:cc:f6:be:dc:ab:cf:a2:59:c9:68:97:7b:3a:
62:6b:9b:68:68:b8:e2:6d:22:bb:af:3d:a3:e5:41:7b:22:d1:
b2:3a:d8:01:3f:ab:39:d7:52:11:14:1e:2d:21:ef:68:1f:ed:
33:3c:52:b0:12:ec:38:36:b7:19:dd:3e:0f:06:a2:3b:30:8b:
72:d8:0e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org