Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025226FEA19411EF90A7F491762E951A.roa
File: 025226FEA19411EF90A7F491762E951A.roa (raw, json)
Hash identifier: ES0CBneQIcM67vJp8bS7WybTNyGVaaHm7w/IytDenh4=
Subject key identifier: C7:84:DE:86:D1:B2:48:89:91:2E:A5:FE:33:22:53:1C:13:8C:0A:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025226FEA19411EF90A7F491762E951A.roa
Signing time: Wed 13 Nov 2024 07:50:54 +0000
ROA not before: Wed 13 Nov 2024 07:50:50 +0000
ROA not after: Sat 07 Dec 2024 07:50:50 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68769 (0x10ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:50:50 2024 GMT
Not After : Dec 7 07:50:50 2024 GMT
Subject: CN=67345a5e-209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:a1:6b:74:41:7d:5e:4b:72:78:ce:6a:b7:
9c:fc:57:5b:ec:8d:30:a9:84:1e:46:b2:80:d7:f3:
12:7a:42:59:08:05:05:e6:e0:84:6d:7a:a0:ce:d3:
20:50:c6:93:3e:50:1a:7b:f8:8a:3a:ef:12:29:12:
92:ec:06:e5:9d:0d:b6:ae:f8:7f:b0:79:0e:68:95:
f0:15:a9:b4:7d:5c:17:f0:59:eb:59:6a:0a:33:db:
71:da:98:aa:35:3e:31:b0:89:f5:3f:53:dc:ab:ba:
10:8f:bb:24:5d:49:0e:8a:aa:54:8c:b7:a7:50:8c:
57:a9:27:a1:8f:eb:2b:2a:fb:b4:38:2b:38:9b:60:
f3:24:85:f0:8f:c2:48:43:8c:ad:27:c9:58:89:89:
88:a1:9f:c5:48:97:92:a7:7c:ae:5b:dd:f5:70:a8:
79:58:55:62:25:d0:30:14:42:e6:c6:3b:23:37:0f:
88:9e:2e:57:c5:3d:e9:36:76:cc:05:c0:10:03:3b:
59:80:b3:8e:21:c8:f6:b1:8e:5e:bf:3c:ec:b5:20:
61:06:e9:88:51:94:19:bb:a8:e2:9c:c2:aa:ed:4d:
40:f6:95:07:00:c6:10:12:f7:90:24:b6:dd:be:32:
55:5e:f6:38:08:f2:c7:d3:af:4b:0e:25:c8:f5:d4:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:DE:86:D1:B2:48:89:91:2E:A5:FE:33:22:53:1C:13:8C:0A:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025226FEA19411EF90A7F491762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0/23
Signature Algorithm: sha256WithRSAEncryption
13:79:e7:9a:2f:59:6a:7f:fd:25:aa:7a:d4:58:47:72:07:ac:
da:c1:fa:25:1c:98:85:14:05:e3:b2:1a:32:24:36:25:1b:db:
21:a8:7a:d2:b2:5d:e0:e3:71:d8:54:93:f7:7a:3c:18:37:61:
4c:31:e1:cd:d3:19:1e:d1:91:ca:06:84:53:3c:aa:43:bc:ba:
fe:57:6b:d7:f7:2f:4a:12:dd:b9:27:8c:4a:06:83:78:08:35:
b0:8f:30:e7:64:f4:5d:cf:2c:98:4c:a7:1f:e0:38:85:8d:25:
19:5e:c3:e5:d2:10:46:b8:92:d0:43:8f:e1:b3:bf:99:98:54:
4a:0a:59:ee:3d:13:60:34:e4:50:65:75:64:1c:ca:5f:59:98:
2b:87:78:9b:11:94:a9:61:4e:1c:37:3b:7c:9f:a6:49:5e:a0:
fc:ff:5f:f0:c1:c1:d1:46:65:9b:d7:6b:3c:23:e7:be:53:f7:
f5:97:b5:0e:92:29:b8:f0:e0:b5:a5:f7:75:29:2b:96:c8:bc:
79:ba:24:c7:a6:4a:b9:62:f8:c0:c7:ad:ac:d7:19:5b:1a:0c:
32:15:f1:af:b3:10:a3:bb:ec:c6:ca:59:ba:68:d2:6e:30:6f:
e0:ec:a0:a9:d2:ad:60:c8:d2:29:e4:03:83:a1:14:ce:b4:96:
c0:03:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:53 2024 by rpki-client on console-ams.rpki-client.org