Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A4808071A211EFA0464B70762E951A.roa
File: 14A4808071A211EFA0464B70762E951A.roa (raw, json)
Hash identifier: TvdsRnMsXkwbro+mg0DHFsOUlaQIqVXUt3J5Lh1eIDA=
Subject key identifier: A9:30:8F:C6:AF:3D:56:A3:49:57:5A:61:E9:A4:C8:16:C3:BF:80:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A4808071A211EFA0464B70762E951A.roa
Signing time: Fri 13 Sep 2024 07:30:42 +0000
ROA not before: Fri 13 Sep 2024 07:30:38 +0000
ROA not after: Sat 30 Nov 2024 07:30:38 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60810 (0xed8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:30:38 2024 GMT
Not After : Nov 30 07:30:38 2024 GMT
Subject: CN=66e3ea22-20f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:86:a3:e9:13:71:67:6b:83:57:2d:a7:de:
3f:31:51:42:72:a0:f2:51:3c:4c:07:dc:a8:eb:3e:
1d:25:42:78:25:3b:03:95:e9:0f:3c:c8:40:7b:49:
fb:74:04:70:d3:2a:5d:55:eb:f1:b5:00:2b:d8:25:
d0:81:96:6d:2c:b6:cb:a5:9e:1c:fe:14:d8:2b:18:
2a:38:19:8d:ff:8b:81:8f:9e:87:0b:85:a4:f9:6f:
ae:1c:83:bc:93:7f:cc:78:df:b9:ea:24:d4:29:bb:
c0:0e:3a:4d:39:0b:e4:d3:8f:23:a0:85:97:5f:12:
bc:97:5d:68:1a:ec:5e:46:87:6f:b3:49:99:06:a3:
50:4b:4b:6a:45:fc:72:5d:66:a3:46:d0:69:12:fd:
ec:78:7c:ca:8c:7d:23:67:0d:a3:7f:7a:a4:13:41:
4d:90:4b:d4:5e:07:00:0c:fb:7c:7d:d6:a9:1d:90:
4e:36:55:3d:e1:92:6e:5e:4d:93:26:e3:3f:79:fc:
e7:ad:a9:84:e3:5d:66:07:bf:79:b6:14:c3:53:d7:
d0:9b:be:14:66:06:d6:05:b6:b4:73:ad:b2:d8:fc:
56:23:d9:99:f9:36:e7:71:c5:23:ba:53:7f:8c:6d:
c3:3e:29:86:bf:98:fd:76:8b:1b:33:ff:e6:53:2a:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:8F:C6:AF:3D:56:A3:49:57:5A:61:E9:A4:C8:16:C3:BF:80:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A4808071A211EFA0464B70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:28:66:80:48:6b:0b:76:d9:20:b4:19:0c:92:94:4e:df:
32:07:d5:80:24:ec:10:fc:88:b9:c1:32:ea:f8:04:d2:6e:5d:
2a:0a:ee:82:68:87:64:b5:bd:37:1f:f0:19:ca:3d:18:df:e8:
9f:9f:fc:2a:da:22:8f:b2:73:94:b8:6e:41:1f:1a:be:33:b7:
8d:80:28:2d:77:b6:b8:15:b4:ab:8e:fd:97:6d:1a:4f:03:23:
00:15:44:84:e0:51:b9:47:d0:7b:2c:59:91:63:ed:d6:8e:4a:
9f:5c:98:9e:b6:ca:0d:5b:7a:9d:97:05:88:a2:b3:69:e4:f3:
c1:2b:4a:b4:c2:46:6a:5d:05:e0:28:cd:3d:4e:51:8a:78:fb:
23:89:18:c9:96:af:8a:39:6b:c6:6d:1f:97:70:94:68:38:8a:
6f:9d:a3:de:c9:a5:ef:59:19:19:ce:69:41:f8:c6:b2:72:2b:
6e:0c:22:8f:9b:cb:4d:f5:04:c9:a2:09:e2:2d:a3:91:1b:f5:
d7:b3:fe:ac:03:b4:00:1f:68:89:d2:d5:30:28:c9:a9:b0:34:
f7:52:ae:e9:8c:5d:23:b0:13:ed:27:c4:71:7a:62:5c:1e:2b:
9c:78:23:97:b1:92:d6:3e:d0:c3:77:2a:0c:76:d5:fe:87:74:
55:84:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:56:25 2024 by rpki-client on console-ams.rpki-client.org