Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B92C42CB34511EEB5A0326C775412E6.roa
File: 1B92C42CB34511EEB5A0326C775412E6.roa (raw, json)
Hash identifier: 7UZusC1j8643EEWPfyWnSDN6e0tSCzy3GhJQ+mLtJow=
Subject key identifier: FF:57:96:A0:39:47:B0:01:80:F3:35:FF:52:5C:4F:05:AA:AC:36:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 752A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B92C42CB34511EEB5A0326C775412E6.roa
Signing time: Mon 15 Jan 2024 01:26:29 +0000
ROA not before: Mon 15 Jan 2024 01:26:26 +0000
ROA not after: Fri 13 Dec 2024 01:26:26 +0000
asID: 8796
IP address blocks: 154.205.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29994 (0x752a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:26:26 2024 GMT
Not After : Dec 13 01:26:26 2024 GMT
Subject: CN=65a489c5-ca22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:8f:57:9b:25:b6:bd:63:eb:e6:91:99:6d:
63:2d:4f:94:8e:97:17:02:be:61:e1:ea:fd:d5:88:
2f:a8:3e:ad:e6:03:cd:79:81:fd:2d:62:dc:98:64:
49:55:ff:5f:3b:13:26:2e:fe:19:11:df:e9:ef:e4:
9e:98:8a:4d:a2:a5:06:57:b0:00:56:e9:bc:81:1c:
7b:cd:df:22:3f:1f:08:ab:dd:b1:25:55:c8:56:c5:
a3:b1:9a:ae:9a:7b:f0:94:e7:60:4a:80:07:00:17:
fd:d2:3f:06:55:e4:6a:f6:a7:e9:1d:0e:c1:83:2e:
d3:61:58:2a:8b:cd:05:09:47:3e:28:90:79:0b:21:
82:25:f5:89:51:46:e7:83:be:6e:3b:21:1b:9d:2d:
cf:5f:0c:05:6c:f1:49:6c:51:26:40:d3:6e:53:14:
7e:f1:25:00:25:95:85:46:32:b6:9b:18:7a:7b:19:
fe:29:ef:fe:5b:e7:88:77:63:26:26:88:2d:3d:37:
d1:22:f1:cc:16:c6:f1:9f:72:87:3b:2f:47:d8:2a:
8e:53:82:e5:fe:78:82:6e:27:76:87:cf:71:76:26:
a6:42:61:2f:9e:0c:e6:46:8e:72:c8:fe:c2:42:fe:
6a:05:07:2a:d7:f8:62:c7:10:a6:96:b1:eb:de:2f:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:57:96:A0:39:47:B0:01:80:F3:35:FF:52:5C:4F:05:AA:AC:36:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B92C42CB34511EEB5A0326C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.215.0/24
Signature Algorithm: sha256WithRSAEncryption
62:43:01:0a:78:83:0c:07:4f:2f:5a:00:9b:d7:61:dd:64:43:
6e:1a:b7:33:50:d3:b5:f8:d0:08:bd:51:93:c3:9f:93:9e:e3:
8d:ee:30:e8:66:60:1f:bc:12:79:0d:1b:8c:ac:06:a9:f3:9b:
be:90:b7:30:95:2d:48:3b:41:51:ff:b2:2b:9b:0d:3b:75:a6:
8e:39:aa:e4:4a:9f:83:2b:7f:4b:06:4a:dc:fd:a0:a1:f1:5e:
a2:15:99:11:43:8e:bb:99:10:2d:90:ca:a8:bf:39:9a:76:9f:
19:3f:e5:af:6c:a1:b2:a1:22:db:02:04:17:4f:a1:4a:bd:58:
c3:19:76:b1:1a:69:47:56:ea:8d:c0:49:6a:ba:7d:c0:c6:45:
bf:06:81:d3:ca:ca:e9:79:a8:aa:f4:ca:6a:a9:3f:e0:22:d4:
68:8a:c3:c0:69:f8:e3:98:ee:57:8d:f8:c6:f9:08:1a:80:1a:
d4:94:8b:86:f6:b1:00:1c:18:23:7e:c9:bd:cd:e7:d6:ea:c8:
d7:66:ea:76:50:0b:c4:bc:8a:a9:c4:4d:bb:29:a8:3b:55:26:
ff:ad:dd:9f:9a:d5:b1:4f:de:0c:25:0c:c3:e9:be:0e:76:fe:
e1:c9:1d:94:8f:08:fd:23:4f:cf:21:83:7e:d2:d6:8c:10:e8:
3c:9d:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org