Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9A4E98A19411EF943AFD91762E951A.roa
File: 2A9A4E98A19411EF943AFD91762E951A.roa (raw, json)
Hash identifier: 1F9Y3lBfIWPQvtxllpVkepeM5V6cLVjPDYi5w9UnZRw=
Subject key identifier: 47:D2:B6:BC:9C:95:1D:BB:08:A5:BB:C0:B3:78:5A:6D:4B:63:B1:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9A4E98A19411EF943AFD91762E951A.roa
Signing time: Wed 13 Nov 2024 07:52:01 +0000
ROA not before: Wed 13 Nov 2024 07:51:58 +0000
ROA not after: Sat 07 Dec 2024 07:51:58 +0000
asID: 138915
IP address blocks: 154.223.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68771 (0x10ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:51:58 2024 GMT
Not After : Dec 7 07:51:58 2024 GMT
Subject: CN=67345aa1-3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:46:1b:bd:29:69:7f:00:2b:1c:32:aa:0f:
8d:d8:63:09:e7:32:38:da:a2:09:bb:69:82:02:02:
d7:86:af:20:82:cf:87:0b:7a:7c:2b:30:07:8f:49:
25:50:cf:3a:31:8a:e9:20:6b:71:cb:cc:bb:e5:48:
df:bf:aa:ed:6a:58:22:02:74:42:27:3d:84:24:b3:
71:73:0d:07:3a:42:c8:de:ab:bf:12:15:31:ba:46:
54:db:fa:05:fd:61:39:1e:a9:cc:fc:65:f2:22:e4:
00:bf:14:58:8c:85:02:4e:5a:da:ca:6f:19:17:9f:
10:a4:bc:b9:ee:eb:9a:29:07:d9:5b:7c:c4:0d:99:
46:c2:7b:b1:7a:96:63:68:6b:f7:c9:c7:2f:6a:31:
ab:84:f6:84:4e:6a:8e:32:30:54:f8:12:6a:e2:33:
58:74:82:8e:dc:b9:28:02:6e:d2:62:ec:fb:09:ec:
d8:9f:ff:67:fa:d7:17:88:a1:66:48:ca:f0:0c:90:
30:c1:81:39:a6:20:1d:02:07:01:97:df:c3:77:1a:
cf:9d:ff:42:9d:be:40:8f:89:99:17:21:fc:04:d1:
da:ef:71:fb:86:b7:af:36:9f:72:ec:76:8d:31:ee:
f4:5c:27:71:62:ea:51:13:b3:19:c1:93:fd:39:7d:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:B6:BC:9C:95:1D:BB:08:A5:BB:C0:B3:78:5A:6D:4B:63:B1:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A9A4E98A19411EF943AFD91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:91:3c:5f:b5:40:df:b4:ee:57:ae:e5:0e:af:52:65:78:54:
30:6b:e9:26:06:4d:fb:c9:d7:dc:fa:9b:6c:d4:cf:8d:33:f1:
f5:23:3c:59:87:9a:5e:2b:df:1e:39:ad:70:50:85:26:c7:ff:
ca:1e:7d:81:e6:58:ee:44:fa:ca:74:63:a7:e7:16:8e:ea:70:
ab:b1:a3:e6:79:92:70:25:33:4a:80:b7:23:3e:fc:77:cb:54:
4f:56:ed:dd:a6:04:53:72:26:4a:18:e0:d9:08:1f:f2:b0:42:
9b:85:95:97:5a:df:e9:98:a8:b5:bf:40:a9:54:13:90:00:26:
54:2d:54:99:1f:a5:8c:2a:33:e8:9a:79:10:ca:1a:38:52:68:
28:76:75:06:68:e1:3c:5c:47:a7:ed:e1:54:34:92:a2:28:c3:
0e:bc:c6:36:e2:51:4c:a2:6b:30:64:1e:43:6a:43:e9:3c:07:
e1:4d:79:82:71:2c:0f:78:73:bd:f8:74:b5:73:51:f5:ce:cc:
7c:e1:92:f5:c3:82:06:53:9e:f0:5b:43:b6:46:8b:f2:dd:93:
b4:14:24:9e:e8:b1:ac:b0:73:b6:20:ac:d2:39:8a:f9:76:4d:
9d:fd:83:cc:38:ab:5a:c6:7e:bd:99:1d:64:a9:94:ee:27:0d:
6b:6a:8e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:01 2024 by rpki-client on console-ams.rpki-client.org