Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284807B0736911EF82CFC84E762E951A.roa
File: 284807B0736911EF82CFC84E762E951A.roa (raw, json)
Hash identifier: 67RIWFpApl9k29ZFRfakyexi40HRuU0jFz3y857CH1Y=
Subject key identifier: ED:0A:04:62:73:3D:9D:CC:B4:0A:6C:3A:F3:61:81:55:4F:F4:63:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284807B0736911EF82CFC84E762E951A.roa
Signing time: Sun 15 Sep 2024 13:48:16 +0000
ROA not before: Sun 15 Sep 2024 13:48:12 +0000
ROA not after: Sat 30 Nov 2024 13:48:12 +0000
asID: 142403
IP address blocks: 154.92.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61236 (0xef34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:48:12 2024 GMT
Not After : Nov 30 13:48:12 2024 GMT
Subject: CN=66e6e5a0-666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:ff:5a:52:2a:d2:80:81:e2:84:00:66:e1:
f7:6e:ed:19:30:0b:52:55:1a:48:35:d9:1a:e6:bd:
ef:94:cc:3d:62:93:3b:ae:3a:db:35:ae:89:b4:4f:
c8:7f:29:8b:a2:31:1d:1f:f5:4b:13:00:cf:ab:25:
c1:f4:10:ae:3b:c0:89:3d:67:85:19:4d:8a:c9:58:
e2:61:41:80:3e:35:fb:c6:68:87:fe:8d:e9:d6:42:
a6:10:f6:80:ee:98:9f:53:7e:7f:32:0e:fb:b2:a0:
e6:e5:6a:ec:af:1d:77:b4:4f:9a:97:96:3d:a0:88:
ab:f3:3a:8f:22:ba:85:be:ff:e2:4d:9b:58:a1:ff:
15:d0:5b:cf:13:0d:09:e5:06:53:a0:66:be:a7:14:
91:7c:e7:bd:90:74:2f:ba:ce:b5:b0:8e:8e:d3:73:
ab:5d:85:85:17:d6:d2:f9:09:9f:59:85:32:32:07:
07:6e:67:87:26:cc:1c:c3:df:47:c4:d0:d7:7d:d9:
54:aa:c8:17:3e:82:5f:ff:04:fc:9f:79:0a:60:9c:
76:35:a5:23:6d:3e:48:59:cc:ba:e5:a7:c9:b0:cd:
d2:14:2b:ab:a0:aa:64:58:22:ea:97:eb:e9:59:0e:
ed:36:b1:37:04:65:a2:63:fc:5a:49:08:04:9f:1c:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:04:62:73:3D:9D:CC:B4:0A:6C:3A:F3:61:81:55:4F:F4:63:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/284807B0736911EF82CFC84E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.15.0/24
Signature Algorithm: sha256WithRSAEncryption
af:15:0b:e8:2f:86:4d:73:ac:7c:82:56:06:05:b8:6f:fb:a8:
bd:6c:8c:54:0f:87:fb:58:e1:b5:06:58:66:a3:8d:7c:53:be:
51:38:ee:0d:d8:81:9b:c3:8d:b2:4f:7c:dc:54:8c:0e:25:c2:
6a:4c:6d:ae:2d:75:e8:86:42:20:42:ea:a0:dc:43:10:c3:f0:
8f:e7:77:9f:03:d6:26:a7:90:b8:9d:c8:97:45:0d:77:42:29:
01:fb:7c:1e:51:4e:f2:14:5c:b5:84:46:04:1e:9b:49:ed:ff:
ee:15:89:cc:16:8c:e3:e8:ea:94:de:1a:a3:43:76:1b:c9:4c:
2f:b8:09:14:4d:06:54:9e:05:6a:0b:86:20:1a:13:a5:38:f9:
ce:88:06:2a:ef:42:56:b6:46:a2:7b:b4:ce:b2:35:a9:0f:95:
e9:43:c4:82:2f:66:5e:bb:11:10:c0:b7:88:63:da:11:71:9e:
5f:c2:00:ee:f6:c4:20:7a:88:ce:9c:f0:ad:10:10:77:3b:25:
62:d3:4b:42:f7:82:32:4b:82:37:be:c7:c6:13:1c:e2:e1:3b:
e0:6e:9c:b1:da:50:30:18:d6:1a:bb:2a:4d:6a:c8:0e:66:14:
da:e8:b1:b7:bd:ba:4f:01:fd:57:b1:6d:fb:cd:bb:e4:f2:9a:
f7:de:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:02 2024 by rpki-client on console-fra.rpki-client.org