Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9AD232A19311EFA99D068C762E951A.roa
File: 1C9AD232A19311EFA99D068C762E951A.roa (raw, json)
Hash identifier: Pgmn07h480gYinEGHPj6y45arlbaXxwMtM8miTZL0ls=
Subject key identifier: 08:B4:06:E5:A5:E6:34:8C:FD:09:7F:8C:B5:14:A6:EE:40:87:EF:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9AD232A19311EFA99D068C762E951A.roa
Signing time: Wed 13 Nov 2024 07:44:28 +0000
ROA not before: Wed 13 Nov 2024 07:44:25 +0000
ROA not after: Thu 06 Nov 2025 07:44:25 +0000
asID: 139057
IP address blocks: 154.92.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68761 (0x10c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:44:25 2024 GMT
Not After : Nov 6 07:44:25 2025 GMT
Subject: CN=673458dc-0908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:f9:22:3e:31:59:81:6b:25:ab:ec:ec:42:
4e:99:86:d1:ac:e8:bf:6a:fc:13:62:3d:a8:dd:4f:
97:a3:cd:b7:0d:8f:18:7d:cc:41:84:0a:74:81:3e:
00:10:c4:55:0d:5f:88:cc:ff:56:0d:07:aa:5a:bd:
b7:1d:cf:4c:d1:e3:76:67:40:aa:78:6e:ac:a2:14:
41:9a:cb:ac:62:bc:35:f1:55:5c:fa:84:26:a0:a3:
1d:9e:a7:d5:dd:2b:46:76:11:6c:e9:c3:52:98:b6:
36:c0:ac:9b:36:b0:f3:93:d2:3d:72:e9:98:51:06:
70:b2:2b:7c:18:39:d9:6f:26:1e:7c:49:4a:0f:8e:
c6:c9:8c:00:d3:82:68:e1:ac:da:3e:21:5a:84:bc:
29:ae:c8:66:67:b2:69:f0:28:36:d0:8c:8e:0b:8c:
2a:7f:50:f6:cd:04:94:a5:b5:9e:e9:df:d5:93:de:
aa:d5:de:20:b3:64:f3:26:17:c7:19:bd:0f:cb:d9:
de:b5:d3:37:80:7e:69:ce:17:ca:80:b6:ec:1e:d1:
f1:b8:8a:ea:70:a6:ad:c3:3b:ee:44:a2:c9:37:a4:
a7:81:4b:73:b3:7c:46:90:34:0d:bc:3a:94:e0:e2:
03:5c:ab:2a:e4:48:9e:70:53:38:00:36:7a:20:0f:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:06:E5:A5:E6:34:8C:FD:09:7F:8C:B5:14:A6:EE:40:87:EF:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9AD232A19311EFA99D068C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:24:ac:fe:35:db:e5:a0:ec:a7:ef:0d:60:d4:8f:ec:d4:a1:
ec:a9:60:4f:61:a4:06:f5:29:21:24:12:75:7a:90:51:b0:60:
3c:b0:63:74:4c:f2:81:0f:d9:8e:38:bb:91:3a:81:9f:9d:4f:
64:26:66:69:fd:8c:ab:bc:b9:86:d4:4a:d0:13:bd:de:df:26:
78:0f:65:6f:ae:a0:79:56:75:fb:85:9a:4d:9b:43:11:f1:eb:
52:5d:7b:ae:92:42:89:41:69:29:b1:61:30:b7:af:6f:8c:84:
e4:ad:ac:d1:82:e9:c0:d0:c8:0e:5c:1e:59:6b:21:71:4b:eb:
da:2e:54:88:5b:8d:50:a2:6b:38:ab:4b:86:c6:13:c8:a5:7a:
4c:e4:11:25:b7:7c:16:d3:69:bf:ff:99:60:f1:2d:9d:ab:28:
fe:54:7a:05:f8:25:c7:e2:52:0f:38:d6:4c:81:11:b1:b7:ca:
ec:25:ac:8e:76:e6:27:ad:f2:f6:c1:34:ab:aa:94:0e:98:99:
b3:1f:5b:c2:6e:37:b9:b8:d0:df:c9:44:d1:d8:16:4f:c1:7c:
e9:94:75:03:cb:4a:39:4d:55:83:c3:95:df:05:7b:92:c2:ee:
12:73:a2:1a:7f:aa:c7:0f:63:7f:a9:21:15:ac:52:d0:5f:f3:
7e:f5:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org