Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAA9BAC539C11EEB27381534AD9E6FC.roa
File: 2DAA9BAC539C11EEB27381534AD9E6FC.roa (raw, json)
Hash identifier: EVtkfkmdtX7g3YS2L3vc9vKrezVUjJcHiI6OeKqCDmw=
Subject key identifier: 08:F3:B9:2A:99:B2:E5:DB:28:EA:46:18:4E:A8:09:F1:A8:D3:26:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAA9BAC539C11EEB27381534AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:47:55 +0000
ROA not before: Fri 15 Sep 2023 07:47:51 +0000
ROA not after: Sat 08 Jun 2024 07:47:51 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15721 (0x3d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:47:51 2023 GMT
Not After : Jun 8 07:47:51 2024 GMT
Subject: CN=65040c2b-b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:85:8b:62:bf:c5:14:f1:e8:17:08:fe:e1:
32:3d:f6:8c:bb:f2:30:76:51:38:3e:cc:52:67:7a:
f6:53:a1:05:f9:f1:30:f2:02:9a:3b:e9:12:74:8f:
18:82:e9:38:82:4b:f2:74:2b:97:94:13:78:62:30:
56:eb:17:21:8f:0f:04:1c:47:ca:ff:4e:45:d9:c0:
f4:d1:05:00:af:20:73:de:42:fd:88:a0:93:e3:e9:
98:87:7a:0d:8d:f8:1d:77:e8:75:dd:04:3e:a8:c5:
a1:28:4f:4b:6f:30:b9:77:62:9b:84:32:36:c2:a9:
2f:2c:bf:87:d5:dd:35:ed:d8:80:b1:12:02:9c:e4:
a7:e9:d6:59:ca:ff:90:56:da:1b:f2:82:1a:d6:24:
69:ac:e4:bc:a4:f9:e4:ba:0f:f1:fa:29:6d:4a:5a:
14:00:32:55:29:78:61:7b:0a:d6:3d:b9:5f:22:97:
39:76:9f:b3:c6:85:ae:eb:71:05:d5:7a:1b:74:d3:
f7:5b:4d:ad:9c:6e:a4:37:56:20:7d:bf:f3:3e:4d:
a7:80:7d:24:84:12:4c:c4:92:f8:3e:09:76:4f:45:
5f:f0:42:24:9d:96:04:41:b3:85:b7:f1:45:f8:41:
64:f5:f9:b4:ef:f3:14:77:2c:0e:af:37:f5:b0:2c:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:B9:2A:99:B2:E5:DB:28:EA:46:18:4E:A8:09:F1:A8:D3:26:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DAA9BAC539C11EEB27381534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ed:f3:ae:90:91:75:99:1e:6b:8b:cb:09:4c:e8:0c:eb:de:
70:dc:0a:03:c1:7c:75:06:63:3b:f2:48:47:1d:9a:b5:57:bb:
7c:97:66:25:c1:7d:fe:bc:d5:85:89:9c:e3:f7:e2:73:70:7c:
3a:ed:1b:00:84:d5:e3:ff:6c:96:df:66:f8:99:76:2d:03:83:
77:a7:89:3a:a5:0c:7c:8d:e7:d2:5a:42:d6:14:43:5a:a2:2e:
42:13:bd:a6:07:c7:89:03:6e:1e:9d:e8:22:45:98:24:2f:2d:
f0:97:b1:2f:ab:bc:0f:50:0a:ae:07:ef:b3:22:18:b8:fc:e6:
b8:00:20:8e:07:8b:5f:ad:94:30:ce:1b:05:1c:f2:5e:df:7a:
9c:42:99:32:75:16:ed:4f:6e:ed:a4:30:2d:28:26:96:31:9f:
b0:da:e6:42:72:d6:51:5c:88:2e:b3:dc:2d:5d:69:71:f6:0a:
e1:6f:9a:ec:a2:fd:74:50:10:4d:28:0a:61:fb:ee:99:46:9b:
49:e2:2f:c7:3b:12:70:c8:a2:8d:ec:ce:16:90:86:b0:37:b4:
1b:17:06:7d:6a:c7:3a:3a:1f:8c:12:56:03:67:df:85:85:5e:
3c:88:b9:ee:c4:fd:3a:9a:ef:90:e7:15:5f:38:5c:a7:1c:2d:
00:93:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org