Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B65498736811EFAB0A0349762E951A.roa
File: 12B65498736811EFAB0A0349762E951A.roa (raw, json)
Hash identifier: PjN5oHyNGrMkJaAlFBqQZBg9Ftlt+sS8AbT3MEClmok=
Subject key identifier: 0B:A2:E1:0D:19:FD:D4:18:28:48:BC:56:7D:5C:3A:38:08:DB:54:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B65498736811EFAB0A0349762E951A.roa
Signing time: Sun 15 Sep 2024 13:40:30 +0000
ROA not before: Sun 15 Sep 2024 13:40:27 +0000
ROA not after: Sat 30 Nov 2024 13:40:27 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61224 (0xef28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:40:27 2024 GMT
Not After : Nov 30 13:40:27 2024 GMT
Subject: CN=66e6e3ce-9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:ff:c5:98:bf:72:cf:b5:52:cb:6b:73:fe:
ef:83:45:6c:d9:4a:41:2c:5a:c7:ea:29:3d:72:e6:
ed:17:2f:84:4c:55:15:47:5b:47:bd:ac:48:2a:c8:
94:4a:ae:4d:30:8d:ff:6d:d0:c7:91:66:91:b5:73:
fa:5a:3b:bc:d0:3f:5d:49:be:d1:3e:71:ff:15:24:
2a:bb:5b:e3:65:8b:da:57:2a:f6:0f:d4:41:fd:1e:
3e:76:e8:cb:b8:47:26:ad:c8:d8:81:fd:7e:0a:9e:
d5:ac:ef:d5:14:ce:07:23:f6:62:01:93:d2:c9:5e:
4d:0f:ab:81:80:e3:a0:13:8a:5c:26:84:88:98:0a:
86:fc:fd:37:cb:ae:9a:e0:2d:6d:8f:71:93:cc:9c:
fa:1d:b4:c5:a1:b1:9a:c3:06:b0:79:ea:8d:19:b9:
1a:70:17:12:40:05:81:98:1b:fe:98:ee:2d:34:55:
bb:58:ee:e5:b7:55:17:c4:41:83:b1:ae:cc:36:21:
f5:fb:4c:33:87:cd:86:8d:95:47:df:ed:e6:50:98:
9e:bd:1b:da:24:63:87:4f:93:24:72:e3:b5:ba:1b:
fb:d6:06:2f:92:5f:46:af:de:ac:49:49:59:f3:a9:
38:df:4d:1f:9a:4e:d2:6f:60:7b:ae:eb:f3:29:91:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A2:E1:0D:19:FD:D4:18:28:48:BC:56:7D:5C:3A:38:08:DB:54:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12B65498736811EFAB0A0349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:82:ee:62:35:20:b3:fa:9b:08:66:bf:28:7e:59:a9:99:7d:
ae:94:06:15:d0:a7:c8:28:67:4b:2e:dc:1e:50:a7:6b:00:79:
47:53:b2:52:3c:26:c3:16:8d:33:c9:a3:bc:b0:54:37:32:c2:
3d:7b:6e:57:de:40:51:73:39:36:20:84:4f:00:bb:8a:77:2f:
d6:43:ea:1d:a2:6e:b4:ee:0b:ac:b6:61:e5:9a:34:4e:bf:43:
b8:ec:f8:3a:64:56:aa:4a:02:9c:66:f0:b1:d5:87:80:50:86:
40:28:1f:69:9d:f4:35:7f:87:7f:25:64:da:99:5a:44:ca:a8:
34:7d:64:21:e7:ae:e0:f7:c1:8c:0a:a4:04:cc:6c:9a:65:89:
28:41:94:e4:82:85:e6:53:d7:33:c9:c2:67:38:5d:51:34:03:
83:cd:46:f3:e8:84:e2:84:b9:e9:0b:62:12:81:20:ff:7e:b6:
3b:4b:f9:59:31:78:9c:95:4b:e4:2e:72:89:39:81:16:55:0a:
80:42:d7:04:0b:91:47:fe:1c:9d:98:58:3f:28:23:4f:81:be:
1b:a4:e8:2a:ea:a7:48:57:a4:c5:11:25:37:f0:36:cf:37:44:
f2:bf:b1:e7:b1:fc:a8:8d:ba:c2:3e:92:1c:19:bf:3f:51:45:
78:c9:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:59 2024 by rpki-client on console-fra.rpki-client.org