Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079EEBD6588011EF93017348762E951A.roa
File: 079EEBD6588011EF93017348762E951A.roa (raw, json)
Hash identifier: psIkzvn71akNd4BeWsGLr4HkrgOMb4hw1axzDpgbbxU=
Subject key identifier: 32:55:88:A3:2D:F2:E0:60:92:AB:60:C6:93:58:90:EE:34:F5:61:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: DF54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079EEBD6588011EF93017348762E951A.roa
Signing time: Mon 12 Aug 2024 07:53:58 +0000
ROA not before: Mon 12 Aug 2024 07:53:55 +0000
ROA not after: Wed 19 Feb 2025 07:53:55 +0000
asID: 132825
IP address blocks: 154.93.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57172 (0xdf54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 12 07:53:55 2024 GMT
Not After : Feb 19 07:53:55 2025 GMT
Subject: CN=66b9bf96-038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:9a:97:63:e8:2f:15:08:fa:cb:68:b8:52:
35:40:15:9f:f0:87:e2:72:64:f0:b7:96:57:21:29:
d6:f7:a3:79:5b:fa:2a:bb:d5:a6:d0:e6:63:a2:6f:
8c:88:1c:3a:d1:0d:ac:5d:7a:a5:58:5a:db:f0:bc:
8c:a5:81:6b:43:75:0e:0f:5e:07:c5:c4:81:40:0f:
ba:7f:e5:d0:35:03:c3:21:75:6f:61:03:93:63:74:
50:0e:c7:da:ac:18:f7:d9:43:4f:7d:1c:c1:cd:87:
c7:ec:bc:1d:44:97:8e:10:5b:20:2d:f4:67:8f:9e:
7b:58:7a:ca:7c:91:6d:4d:55:a4:1a:6d:83:1b:86:
13:54:43:b7:1b:b6:74:f0:7e:10:d9:1c:ec:47:22:
5b:e4:93:fb:0b:25:38:63:5e:ae:49:6b:ae:6b:b4:
24:21:3b:3f:5b:b1:09:8e:94:37:73:19:94:8e:fa:
0e:f7:ac:bc:c0:c3:dc:ec:73:af:ad:35:a6:23:4c:
51:e9:a4:49:3e:64:7c:66:cd:48:bd:fd:b7:0b:9f:
14:16:48:4a:f0:ca:c5:fc:a2:08:1f:14:80:85:be:
59:98:63:05:b7:e8:dd:58:0a:e1:4a:55:64:4c:9a:
be:47:60:d1:82:d7:7d:d8:19:fa:fa:ac:3d:0a:23:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:88:A3:2D:F2:E0:60:92:AB:60:C6:93:58:90:EE:34:F5:61:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079EEBD6588011EF93017348762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.24.0/23
Signature Algorithm: sha256WithRSAEncryption
80:8e:22:34:0f:01:80:48:8a:af:35:7a:91:c0:39:0c:e6:ac:
fe:23:77:76:f0:59:c5:65:07:35:5b:eb:be:a4:bd:ea:f6:8d:
9e:3f:23:a9:15:dc:19:97:34:6c:84:51:0d:e8:70:c1:2e:2f:
2f:c1:a8:2c:cf:99:5d:36:9e:e8:68:72:65:a1:03:8c:b5:5c:
17:85:f9:61:c1:37:d7:66:f6:8e:b7:e5:ac:00:4a:db:92:e8:
01:9c:3b:c6:95:cb:d5:47:f4:58:b3:6b:e0:2d:02:c8:84:10:
bd:7c:04:d1:d8:c2:5a:36:b3:a3:16:44:b1:5f:28:52:13:a1:
09:78:6e:ac:ab:87:4f:1e:b7:8b:44:8f:5c:a6:65:6c:f5:c5:
33:4b:9e:02:b9:2a:ba:a6:ff:c2:8d:d7:10:0a:01:4a:28:c4:
af:d4:29:17:70:03:15:41:c0:57:b6:de:7e:9e:09:32:33:ee:
5e:7b:02:c8:e6:de:19:8c:86:cc:5c:79:7d:01:84:c0:a4:97:
5d:f8:5a:01:31:8f:3c:8f:d9:16:02:08:25:15:2f:52:3f:d3:
ec:d5:ad:09:a8:09:99:7e:4f:bc:aa:9a:c5:7d:cd:2b:2d:77:
88:5c:fa:1a:19:53:68:a0:05:17:9b:1f:b1:d0:f1:b3:3a:bb:
c0:93:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:58 2024 by rpki-client on console-fra.rpki-client.org