Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1021C54674D011EFAF00C657762E951A.roa
File: 1021C54674D011EFAF00C657762E951A.roa (raw, json)
Hash identifier: xxp0cSz5urDts0AU8wYnEG5IEJMMO7qL/+6AKcD4MR4=
Subject key identifier: FF:2E:55:23:1E:74:BE:EB:F9:13:C5:24:ED:B8:6A:6C:FF:7F:2C:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F018
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1021C54674D011EFAF00C657762E951A.roa
Signing time: Tue 17 Sep 2024 08:37:24 +0000
ROA not before: Tue 17 Sep 2024 08:37:21 +0000
ROA not after: Sat 30 Nov 2024 08:37:21 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61464 (0xf018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:37:21 2024 GMT
Not After : Nov 30 08:37:21 2024 GMT
Subject: CN=66e93fc4-26dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:7a:e6:c6:5d:aa:ac:7e:d8:e4:6d:11:92:
42:46:17:40:d8:bc:81:51:20:a9:aa:f7:77:8b:51:
cd:5b:19:0b:a5:41:f2:ad:12:a0:c0:24:ec:ca:6f:
b9:1b:37:41:9d:85:d6:42:ce:6b:8d:80:be:3e:eb:
fe:cd:c4:fd:59:05:6a:7a:e2:e6:bb:10:32:73:4f:
4a:18:76:a3:90:eb:7e:eb:a9:bd:ef:f8:05:b9:2b:
8a:8d:c9:e2:f6:55:06:fd:ed:b0:7a:55:b2:17:9c:
6e:ae:50:1b:07:c1:83:e3:e6:79:96:58:c7:dd:b3:
2d:6a:8b:2c:65:27:78:e6:f2:9d:dd:98:e3:44:e9:
d5:bf:80:6c:a1:24:83:69:44:6b:44:f6:e8:1a:49:
01:d5:20:db:70:d3:01:af:40:29:04:2d:bd:af:9a:
9f:6a:d1:48:4b:2b:c9:0f:68:a9:09:5a:c7:64:99:
32:d9:a9:39:1c:eb:34:10:12:bd:04:e7:8f:af:a1:
50:02:31:e8:d0:a8:28:04:22:0b:53:b2:1f:77:d1:
52:76:b8:39:9d:0f:af:67:af:c2:42:f8:da:40:34:
7f:11:e7:bd:fe:78:c9:0d:2e:00:9a:01:7d:0b:29:
eb:f3:50:ce:7d:62:16:c7:b1:df:84:68:3e:5d:b7:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:55:23:1E:74:BE:EB:F9:13:C5:24:ED:B8:6A:6C:FF:7F:2C:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1021C54674D011EFAF00C657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:32:7e:90:7d:1a:01:1f:a1:19:18:0a:cd:45:47:64:51:ec:
e6:2c:04:e0:d2:3d:d7:e7:52:dd:59:f4:44:02:90:2f:42:aa:
de:7c:a2:c4:6f:69:82:17:98:b2:03:29:c3:cc:c7:56:c9:79:
f3:77:bf:2c:08:9a:25:1f:47:c3:a8:af:fe:ed:35:23:44:01:
a3:87:ea:6b:88:73:7f:12:f3:ba:02:59:81:6a:14:56:2e:4f:
03:ce:e6:92:42:f8:44:8e:17:e4:fb:63:ff:ea:37:99:2f:ee:
97:0f:e5:07:a8:81:5b:05:b7:7e:72:7d:4e:92:b8:83:d0:fe:
45:e8:9f:96:ef:02:64:a3:b5:bf:c2:0d:68:27:52:c1:ae:1e:
ed:b2:6c:f4:0c:b4:b5:87:bc:81:4b:44:d7:49:d3:ae:47:dc:
99:ea:51:d6:1c:b0:08:63:d1:9c:f7:02:71:67:58:71:75:b9:
6a:cb:b8:c0:c0:67:44:15:92:28:ac:90:88:67:24:ba:d3:04:
f6:7c:92:c0:10:74:f9:62:e6:73:86:ba:17:7a:ca:b5:0c:62:
54:82:16:52:e8:38:02:48:55:23:86:2c:0f:2b:88:df:76:27:
af:3c:21:57:7d:60:cf:22:d5:f2:5f:91:f2:2b:e1:4e:4f:e1:
bf:c9:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:54 2024 by rpki-client on console-ams.rpki-client.org