Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EDB97DE74CF11EFB8806F51762E951A.roa
File: 1EDB97DE74CF11EFB8806F51762E951A.roa (raw, json)
Hash identifier: wEHpb/QVFo8Kwy29CPVrmt44W5J2v7VQ8qpFtFVbX8c=
Subject key identifier: 2E:49:F2:5F:DC:62:94:CE:56:93:6A:0D:46:A2:09:3D:7F:BB:25:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F00C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EDB97DE74CF11EFB8806F51762E951A.roa
Signing time: Tue 17 Sep 2024 08:30:40 +0000
ROA not before: Tue 17 Sep 2024 08:30:36 +0000
ROA not after: Sat 30 Nov 2024 08:30:36 +0000
asID: 142403
IP address blocks: 154.94.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61452 (0xf00c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:30:36 2024 GMT
Not After : Nov 30 08:30:36 2024 GMT
Subject: CN=66e93e30-98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:dc:26:95:1e:83:c2:6d:fb:b5:40:ce:0b:
01:15:18:b3:e3:3e:cd:47:46:9c:9d:d1:17:e8:93:
f7:9b:d9:de:eb:f2:79:36:8b:53:54:ad:33:30:b6:
c2:16:bc:f4:cf:6b:90:47:2d:c8:02:b6:a4:b4:2b:
88:16:e8:fd:3f:c6:6d:0e:44:3c:1e:1e:ec:2e:87:
f9:48:92:ad:26:50:12:ab:d8:93:55:49:1a:b7:39:
4e:44:2b:0b:dd:f9:bc:ce:5c:2c:41:fd:b0:cb:20:
e6:3b:38:33:d0:85:7c:23:c1:53:e6:6c:d1:19:ea:
03:63:1d:32:8a:99:0c:5c:69:4b:ff:85:15:f1:8c:
9b:88:13:01:81:cd:65:3f:e5:d8:3f:a9:0c:09:b5:
de:74:3a:4d:5f:ff:6f:6e:47:0e:b1:90:3b:57:1d:
ad:80:da:35:a5:52:59:61:32:c4:a2:01:9a:27:12:
f0:34:cf:a3:80:aa:4c:58:ef:47:01:42:87:0b:1e:
1d:55:3f:a4:23:0d:e5:44:f7:f6:75:d6:48:6a:1f:
ea:6c:d0:02:2e:2a:a4:e1:4c:47:58:68:fa:12:de:
59:bf:9e:98:9e:39:be:35:da:d2:91:51:56:d7:da:
6a:9e:ed:a8:6d:b2:13:c6:fa:5b:80:b1:a7:1d:6e:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:F2:5F:DC:62:94:CE:56:93:6A:0D:46:A2:09:3D:7F:BB:25:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EDB97DE74CF11EFB8806F51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b8:a5:d0:6f:b1:bb:bf:6c:ef:96:a9:c3:a2:b9:4e:3d:06:
b9:59:63:c0:5b:06:88:1a:39:0a:3a:02:7a:0b:90:e7:ff:9f:
56:a6:e8:e2:a1:9d:f7:1d:9a:a4:67:cf:cb:38:22:1d:b0:72:
87:50:bd:64:e7:01:e7:20:31:23:33:ad:02:f2:7c:7e:a5:a6:
01:04:d9:69:54:dc:9c:1f:e7:70:f4:07:bb:f8:1a:fd:fa:36:
26:af:85:80:4c:2d:3b:6c:fa:5e:fc:09:a6:b8:b1:4d:56:78:
bf:ea:5b:95:d4:5b:a0:2c:25:e4:54:f1:76:80:b6:2c:31:af:
bf:df:14:2f:7b:c3:e2:46:cb:76:a9:29:64:c4:0b:11:a7:99:
4c:35:19:cc:be:9a:05:da:95:ec:fe:79:07:b5:06:cc:ba:28:
66:01:29:a4:2d:18:f6:2e:48:15:f0:72:ab:31:0a:04:8a:a7:
7c:4c:57:e9:db:c3:82:c6:d7:bb:af:a4:28:b9:09:5d:9c:74:
b4:e9:ea:2a:b9:3f:d1:d2:d0:b4:27:f1:3a:b7:15:39:04:71:
a4:90:64:7e:94:e7:64:32:ec:bf:cf:48:ce:f1:a3:4b:13:e8:
45:1a:9b:34:32:d3:2c:ba:de:0b:25:df:3c:36:d2:2a:f7:8f:
3e:37:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org