Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6E39989D1711EFAE1871A8762E951A.roa
File: 2E6E39989D1711EFAE1871A8762E951A.roa (raw, json)
Hash identifier: xM3VKpsp9j6vTN8C2HO/HHrX79bS7yRzTsmysbc96h8=
Subject key identifier: 49:1D:DA:45:1F:20:1A:93:B3:D8:C6:D4:D3:87:D9:85:80:45:68:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010955
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6E39989D1711EFAE1871A8762E951A.roa
Signing time: Thu 07 Nov 2024 14:47:16 +0000
ROA not before: Thu 07 Nov 2024 14:47:12 +0000
ROA not after: Wed 05 Nov 2025 14:47:12 +0000
asID: 133448
IP address blocks: 154.92.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67925 (0x10955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:47:12 2024 GMT
Not After : Nov 5 14:47:12 2025 GMT
Subject: CN=672cd2f4-2268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:ef:2d:a1:50:5e:4b:9b:9f:dd:df:a9:95:
dd:5b:2f:32:37:94:dd:1f:0f:5f:b6:b7:6f:66:3d:
c3:db:86:f4:fa:15:57:10:64:e3:c7:45:4b:0b:05:
8b:82:ac:4a:b9:35:da:d0:47:42:01:40:cb:fa:0c:
fc:91:e5:a0:8a:b8:09:91:f4:d4:bf:c2:16:6d:86:
c2:0b:54:d7:00:d8:cc:b0:15:8b:24:b2:9d:f5:e9:
5a:3a:43:9e:7c:2d:f2:7a:14:45:ea:b3:d5:9e:08:
5f:d5:82:3c:32:05:b7:f2:d6:cf:0f:5b:4f:ed:c1:
26:64:d9:fa:f4:e8:a1:4b:d4:f4:7e:16:fe:45:1c:
6f:09:be:a3:1f:42:d7:49:c8:53:d5:0f:fc:fb:ce:
ae:d9:4d:67:61:13:37:95:fa:51:36:01:07:35:76:
9b:82:13:e7:59:36:4c:ca:ee:22:3e:7a:38:8c:89:
fc:c4:c8:ba:f7:40:9d:3c:58:b4:4b:5d:35:de:f1:
cb:03:77:c5:59:c3:6e:5c:8d:86:96:90:2e:7d:60:
ed:01:84:1e:a4:1c:ea:5a:00:67:08:93:9b:11:5d:
e0:1a:f4:0a:f6:c5:c6:4a:47:ef:fc:6a:33:b3:4a:
e0:18:07:80:f1:f6:46:31:ce:9f:9d:5c:cf:55:91:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:DA:45:1F:20:1A:93:B3:D8:C6:D4:D3:87:D9:85:80:45:68:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6E39989D1711EFAE1871A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.6.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:df:ae:7d:89:d6:5e:85:4a:d3:9d:e3:22:90:c7:d8:d7:c4:
f6:93:c6:da:50:e6:75:46:21:92:05:9b:7f:4e:55:33:49:a0:
26:9a:cb:5e:54:12:58:d0:3a:e1:eb:86:11:61:c7:a3:f5:80:
33:5b:97:94:88:56:c4:ef:ee:54:8c:65:72:0e:09:4e:01:3c:
7e:51:55:bc:02:84:f7:df:23:b7:ca:79:1a:4a:48:9e:64:65:
a1:00:5d:a0:b7:bc:d5:07:03:8d:a3:95:f7:a7:fb:79:be:96:
dc:1c:bf:19:2e:bc:eb:cb:70:c2:7b:bf:58:38:56:4b:46:e3:
63:3f:bf:6c:7d:20:93:b9:e9:9d:8d:5e:49:5a:b2:bb:33:03:
7e:30:04:a0:2e:0e:fb:62:61:4b:08:71:43:b5:38:55:c6:24:
78:06:22:50:37:97:d8:77:94:62:fb:d2:24:5a:e9:be:a1:c7:
dd:a6:93:b4:4d:1d:81:05:c8:d3:4a:f1:be:d3:1c:25:08:23:
5e:b3:c5:f2:fa:90:35:41:f8:5a:d7:af:87:1c:dd:83:db:bd:
6e:ee:a3:3c:ca:35:9d:55:5b:33:b8:6d:ab:01:d9:c2:96:45:
69:c4:54:71:09:a8:a3:5a:9c:0b:59:16:ec:e7:f7:09:be:1d:
9c:01:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:26 2024 by rpki-client on console-fra.rpki-client.org