Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FF0D34736811EF807BDF4A762E951A.roa
File: 60FF0D34736811EF807BDF4A762E951A.roa (raw, json)
Hash identifier: Hzv1ZXb81oPT70730LJPx6bqObisPs2SFgOtFlWTwHI=
Subject key identifier: 21:41:DF:2D:77:AE:7D:BA:3E:A0:40:20:7E:EB:54:30:2C:AD:97:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FF0D34736811EF807BDF4A762E951A.roa
Signing time: Sun 15 Sep 2024 13:42:41 +0000
ROA not before: Sun 15 Sep 2024 13:42:38 +0000
ROA not after: Sat 30 Nov 2024 13:42:38 +0000
asID: 142403
IP address blocks: 154.92.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61228 (0xef2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:42:38 2024 GMT
Not After : Nov 30 13:42:38 2024 GMT
Subject: CN=66e6e451-4421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:2b:d5:de:ac:3d:3b:49:f4:53:8c:db:35:
e7:e2:61:81:57:58:3a:93:db:a0:c9:89:95:aa:80:
02:14:f6:23:ed:04:09:7e:88:5c:f2:c6:a9:0f:6f:
18:8d:60:43:19:98:fb:2c:ca:5b:11:ed:ce:61:bc:
9f:1e:4e:4b:13:a5:f0:26:e8:e6:e7:41:2e:13:cc:
03:42:9c:11:91:a5:fc:7d:ae:3f:cd:16:12:77:3c:
6b:bf:5e:41:da:90:b4:fb:4d:03:6e:da:ca:4b:33:
bf:2a:89:f8:7b:13:a4:eb:71:c6:9e:d3:f8:cc:1f:
ff:01:c0:0d:a1:a8:25:bc:4b:35:10:c5:38:ff:33:
12:c6:2c:26:8f:9a:3e:4c:f2:1f:58:ee:44:68:9a:
51:33:71:c2:10:e3:97:09:8a:12:16:8c:86:b4:ee:
49:10:ce:9b:bd:67:05:0d:00:cd:f9:c2:da:d0:55:
2c:9c:62:f2:d6:74:e6:31:1e:82:d7:7a:1f:1f:9c:
3d:fa:89:f8:a7:f0:2c:79:ec:74:72:51:16:69:c4:
33:ce:c0:61:e7:a1:43:ae:29:3e:cd:ee:d9:6f:3b:
28:13:fa:8a:e2:b2:94:55:04:1d:2f:eb:d3:02:11:
57:25:62:4f:14:45:8a:9e:14:ed:d3:77:06:4a:ee:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:DF:2D:77:AE:7D:BA:3E:A0:40:20:7E:EB:54:30:2C:AD:97:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60FF0D34736811EF807BDF4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.19.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cc:ab:a9:54:ff:9e:f1:a1:30:b5:68:52:e4:93:fc:81:c2:
61:6c:92:a1:74:57:c9:ca:fe:41:39:77:d9:ba:e1:f3:0a:a5:
4e:3b:b2:f1:a2:52:9d:99:6b:7e:1c:6f:cc:e9:7e:0d:55:ee:
06:6e:ba:2d:92:e1:8c:1a:ca:bf:08:bb:4e:eb:5e:d1:b1:a4:
76:4c:8c:ba:81:d4:ca:5e:61:1d:65:84:2e:52:30:b8:8c:77:
ae:49:6a:6f:9a:9b:b3:b1:63:0d:03:c1:ee:cb:93:aa:f0:82:
ae:84:6e:9b:f2:2d:0e:7a:73:6f:67:b0:2c:57:7a:26:9e:be:
33:54:5f:a2:96:cd:76:09:83:13:7b:fd:e8:d5:91:7d:b3:43:
3d:3d:3f:b6:5c:2f:3c:fb:cf:64:fd:f2:8d:c2:8f:bd:07:10:
86:5b:f0:af:8a:b4:16:d4:1b:49:57:0c:7f:9b:44:f0:e1:a3:
6f:8c:32:9b:bb:47:48:15:18:b1:02:ca:92:21:f3:c0:83:19:
20:6f:11:e0:f3:93:79:40:66:12:c6:65:86:08:95:f4:4c:b1:
56:84:ca:89:09:d0:4e:1c:d0:0a:1e:db:7a:3b:bf:27:14:e0:
80:f2:3d:da:da:a7:57:cd:3b:a2:e8:bc:11:ff:6a:bf:4d:42:
ce:68:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org