Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B273A6A73A11EF83813897762E951A.roa
File: 60B273A6A73A11EF83813897762E951A.roa (raw, json)
Hash identifier: SCno7Dyh5kDIzNigdJJYSgLEiqz9M/XTpa/zZNKrZLU=
Subject key identifier: 88:7E:A2:6D:80:E3:AF:03:8F:88:16:C4:44:E5:B2:01:6C:1B:72:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B273A6A73A11EF83813897762E951A.roa
Signing time: Wed 20 Nov 2024 12:24:24 +0000
ROA not before: Wed 20 Nov 2024 12:24:21 +0000
ROA not after: Fri 29 Nov 2024 12:24:21 +0000
asID: 5065
IP address blocks: 154.84.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69531 (0x10f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:24:21 2024 GMT
Not After : Nov 29 12:24:21 2024 GMT
Subject: CN=673dd4f8-57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:0a:8d:a1:24:42:aa:fc:00:04:af:6c:4d:
1d:0d:b1:a6:96:b2:27:4b:68:36:46:f0:a6:9a:3b:
2d:0d:0f:77:eb:d6:b3:b4:1e:a7:ac:56:88:5a:be:
47:f8:b1:22:23:91:a7:63:96:df:2c:22:73:d5:d0:
05:fd:f6:e4:b3:67:96:e2:9c:ac:82:4e:28:14:4c:
f8:9c:55:63:74:6e:d2:a2:cd:ff:24:b5:96:98:ab:
7a:b9:f8:9d:99:b8:6e:62:f6:2f:63:ed:44:1a:76:
64:36:f8:38:7e:39:25:44:51:8b:8b:9a:5f:d3:d5:
7d:f1:16:e7:8f:72:d2:c5:da:b2:2b:fe:fa:e6:8f:
1c:cd:85:81:66:4b:62:3e:70:b0:22:91:c9:77:5d:
e8:9d:1c:d1:f5:ca:60:e1:51:3b:93:67:e8:ff:d6:
c8:22:b5:1a:e9:f9:19:20:b8:ce:9e:63:f6:ac:ac:
99:0a:79:01:ea:23:f3:c5:fd:f3:b0:60:5f:7e:04:
d5:fc:ab:1a:b5:cd:a5:7c:ca:f9:bb:8a:4d:c8:5c:
46:81:5f:2b:21:bb:ae:0a:06:3e:bc:8e:de:9d:8b:
ca:a6:1b:5f:d3:f0:ec:a5:06:61:f9:f0:94:b0:3c:
27:05:ff:5a:da:60:bd:d8:d9:15:ba:ec:80:a4:76:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:A2:6D:80:E3:AF:03:8F:88:16:C4:44:E5:B2:01:6C:1B:72:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B273A6A73A11EF83813897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.184.0/22
Signature Algorithm: sha256WithRSAEncryption
90:24:8c:95:41:21:59:68:7f:42:1b:d8:8b:a8:d0:1f:75:57:
9d:6a:bd:03:a4:99:ec:a2:54:9c:6e:b4:21:6d:23:33:60:62:
1c:a0:e5:91:3d:95:20:b6:05:e1:5e:c0:03:34:7b:3c:77:19:
92:76:05:a6:19:67:74:36:8d:98:0b:51:13:30:af:d5:54:a6:
84:ae:59:61:1d:c9:88:07:c5:01:90:59:44:84:8f:40:3a:67:
a1:bc:4b:ba:84:d0:31:f9:ca:42:6f:92:d1:3f:60:31:40:00:
2e:e0:c8:ca:6e:b7:09:f0:35:ca:28:93:57:34:a0:a4:5f:95:
de:e5:87:f2:1a:1e:ef:da:1b:27:f4:3b:96:b2:1a:8c:a6:dc:
1b:22:5c:36:f7:90:a7:e5:68:0d:39:ce:12:bd:13:f2:0b:4c:
a5:53:e2:f6:1f:2a:09:d7:be:7a:46:13:b9:b2:a1:5f:de:78:
fc:4c:37:b6:0e:6e:cf:8c:7c:14:05:b2:c6:7c:85:af:f2:82:
b0:19:72:ea:39:d8:87:0f:97:66:bb:f8:10:d4:49:2c:cd:21:
2d:2a:8c:cb:d5:42:b1:2a:17:e6:5b:ce:7e:d4:0f:4f:95:2b:
f5:99:43:e7:b4:e1:fc:d9:08:6b:61:cc:0a:da:1f:73:f4:bd:
cf:4e:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:41 2024 by rpki-client on console-ams.rpki-client.org