Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C60C79E95DB11EF9E2DC788762E951A.roa
File: 2C60C79E95DB11EF9E2DC788762E951A.roa (raw, json)
Hash identifier: O+pyVgzwh7pipdqAUauMENvOwfO5m675XZ2Sdu9AICI=
Subject key identifier: 99:8E:90:15:AE:5C:9C:28:2F:B9:19:3D:DE:9D:D4:1A:B5:0E:C9:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01039A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C60C79E95DB11EF9E2DC788762E951A.roa
Signing time: Tue 29 Oct 2024 09:50:05 +0000
ROA not before: Tue 29 Oct 2024 09:50:01 +0000
ROA not after: Wed 04 Dec 2024 09:50:01 +0000
asID: 61112
IP address blocks: 154.83.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66458 (0x1039a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:50:01 2024 GMT
Not After : Dec 4 09:50:01 2024 GMT
Subject: CN=6720afcd-a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:7d:5d:d0:78:05:38:7a:c0:66:50:e0:a0:
66:16:47:13:9a:19:72:d1:b9:fd:94:0f:bc:ba:4c:
07:2b:37:84:f1:d9:02:11:5f:1a:05:1d:f1:ee:8a:
af:2e:4d:89:e6:c8:74:11:f2:19:a7:ca:78:8f:51:
54:8f:08:ef:89:97:5e:41:6e:b9:ee:fd:2c:1e:62:
7a:ce:a8:33:11:aa:8b:34:32:b9:ea:c4:3c:ab:56:
72:32:5b:f9:9e:ab:ae:1c:01:94:2c:7e:6f:b2:4c:
68:06:da:7a:4d:0b:1a:a9:41:51:27:84:0e:d5:3b:
4e:4e:42:3c:12:99:64:5f:f4:6f:db:e7:85:f9:7f:
86:d8:c5:dc:01:cb:c1:76:7d:81:e5:45:1d:73:7c:
e1:ad:76:c5:54:50:81:35:4d:4f:16:83:7b:ce:07:
4e:58:8e:57:1b:6e:ea:9d:91:50:37:33:fe:94:62:
10:6f:d0:ab:ec:b7:29:c9:9b:e3:6d:55:91:02:1a:
11:3c:fb:7a:91:61:b7:3d:f1:c7:ec:d4:f9:94:3e:
f4:14:58:d0:79:60:d1:c5:de:6a:00:ce:d2:07:bc:
3e:f5:d1:e1:22:ea:54:22:00:f0:cf:b8:c3:71:2a:
23:b3:03:37:e5:3c:3b:5f:9f:0b:75:53:b6:1d:4a:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:90:15:AE:5C:9C:28:2F:B9:19:3D:DE:9D:D4:1A:B5:0E:C9:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C60C79E95DB11EF9E2DC788762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.90.0/23
Signature Algorithm: sha256WithRSAEncryption
48:34:55:a2:d3:bb:0f:3c:f9:e3:6b:3e:5e:1c:f8:b4:9a:dc:
32:18:e1:e9:a4:91:6b:3b:55:b7:e6:af:37:73:ef:1b:ee:6c:
64:ab:91:4d:58:4e:84:19:99:2b:c4:2b:9e:84:ad:01:98:c3:
9c:bd:90:af:82:f2:1e:d6:3b:3c:35:68:cc:bc:79:e7:f2:83:
56:a1:0f:59:f6:c4:9f:70:de:ae:95:a2:b6:ee:f9:39:f2:82:
a4:b8:f2:2a:41:1e:d5:82:f0:2f:be:a1:f1:a1:e9:89:00:01:
e5:eb:c7:32:cc:bc:a9:d1:2e:91:94:58:b0:9e:b1:1f:68:68:
30:b1:b8:10:05:d5:b2:e5:91:d7:a5:2b:55:03:00:e3:5d:ad:
87:8f:77:20:0e:89:c3:c4:f6:5f:3e:81:82:c1:53:0e:22:8e:
1e:81:f5:08:ec:7d:38:8c:94:3a:5c:be:b3:4b:6d:d5:25:96:
1c:88:67:2a:11:91:9c:bf:19:03:de:b5:7d:ab:d6:0d:e1:a3:
bf:ee:f1:45:98:02:20:1e:72:da:77:1d:77:04:69:b1:6d:f5:
c3:94:c8:4e:0e:79:75:54:cf:91:50:06:1b:e5:f5:32:6f:94:
54:ff:00:10:ca:da:95:35:1b:67:6f:98:09:6a:b6:76:34:bb:
e1:54:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org