Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6095E19671A211EF83427672762E951A.roa
File: 6095E19671A211EF83427672762E951A.roa (raw, json)
Hash identifier: A+BeFuKreypsc0C2HL2xiJDEjdROLg99nhxRH+MuJ3A=
Subject key identifier: AF:6B:FE:0C:E8:1E:0E:59:88:AC:FC:C5:F2:59:DB:01:29:6D:DA:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6095E19671A211EF83427672762E951A.roa
Signing time: Fri 13 Sep 2024 07:32:49 +0000
ROA not before: Fri 13 Sep 2024 07:32:46 +0000
ROA not after: Sat 30 Nov 2024 07:32:46 +0000
asID: 142403
IP address blocks: 154.92.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60814 (0xed8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:32:46 2024 GMT
Not After : Nov 30 07:32:46 2024 GMT
Subject: CN=66e3eaa1-079f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:8b:da:a6:cc:29:92:d5:b0:08:42:ac:bd:
69:29:72:8c:85:f2:f8:07:88:71:3b:d1:f3:a0:b0:
b8:4f:2e:6b:b1:ee:f8:43:89:8b:31:a2:7a:10:ca:
27:48:2b:67:8c:9f:8b:1f:5c:48:12:df:17:98:3f:
ca:36:49:89:79:3b:36:66:1e:d5:13:fb:ba:ec:31:
f2:f0:06:75:9e:e4:f1:cd:53:9c:bd:64:07:f4:83:
ea:7f:e1:50:09:c7:ed:09:c8:10:df:d6:1c:50:b0:
ac:00:32:0f:43:85:ca:7f:61:49:d3:91:61:a8:5d:
be:68:b7:f4:f7:7b:c3:36:8f:67:cb:8a:25:9a:f1:
9b:a9:ca:08:8a:37:24:c6:f1:99:b0:e9:0b:08:7f:
ad:24:a7:67:fc:95:8c:6b:50:ad:ac:af:67:39:2d:
e0:35:ce:46:ed:d0:bc:56:c1:04:5d:86:89:dc:ac:
72:b3:6e:ee:3e:b1:13:cc:9f:6b:c0:9c:0d:e4:ec:
70:64:88:91:9e:81:b7:8c:71:21:6c:57:a7:73:26:
ed:e1:a0:34:f0:ba:69:f3:1a:c1:74:2c:f2:8f:e8:
9d:11:84:7f:77:c4:ea:1f:08:c5:25:eb:73:07:c0:
53:3c:d8:20:de:f4:09:4a:fb:82:29:87:ca:f2:eb:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:FE:0C:E8:1E:0E:59:88:AC:FC:C5:F2:59:DB:01:29:6D:DA:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6095E19671A211EF83427672762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.14.0/23
Signature Algorithm: sha256WithRSAEncryption
31:f4:a6:9c:66:2c:6e:12:cd:8b:04:4d:c9:0b:f2:ec:3d:56:
e2:fb:d1:2a:87:25:5e:b6:d6:1b:e2:aa:9e:8f:7a:86:0c:ab:
ef:6e:00:41:11:73:3e:2f:81:a3:38:31:b3:b4:7e:d8:6f:0c:
4a:0f:e2:e8:a4:be:fe:f4:f5:5f:ed:30:f3:bf:15:93:24:3e:
06:00:81:eb:69:ac:26:c9:73:96:4e:5b:8b:5b:e6:83:09:92:
bf:0f:49:f8:15:c1:33:c0:13:1d:64:6c:d4:05:c8:52:3c:60:
21:4b:dd:47:e2:73:79:a9:51:5a:38:fd:22:bd:5c:56:15:84:
f6:18:3a:0a:e3:9f:ab:c9:3b:8f:89:51:83:17:a2:c5:d3:e7:
bc:4c:4f:74:33:0f:bf:4d:11:b5:36:37:97:ee:19:15:4d:4e:
88:73:2f:74:69:f5:bf:95:78:0f:23:c1:07:4c:52:f1:1e:5e:
07:2c:60:8a:5d:b5:46:35:56:12:2c:aa:14:27:7d:4e:0e:f3:
fb:60:6e:c3:64:44:4f:df:49:05:2f:5e:f8:30:08:ab:55:41:
c0:7e:10:9b:f3:8a:e7:1e:64:da:70:fe:69:68:eb:e3:7e:30:
e9:f2:45:8d:31:7e:c1:49:35:9c:cb:df:43:be:63:cd:9b:ec:
91:30:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org