Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631229947F1111EF97141F60762E951A.roa
File: 631229947F1111EF97141F60762E951A.roa (raw, json)
Hash identifier: 1rwfVBTlYcNH7K9+CAgZQKy5Lhy+n0jIaynLO7nEVw8=
Subject key identifier: 51:56:C8:8B:40:A6:C1:46:7F:F4:F0:98:93:EC:30:F1:44:92:3E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631229947F1111EF97141F60762E951A.roa
Signing time: Mon 30 Sep 2024 09:50:13 +0000
ROA not before: Mon 30 Sep 2024 09:50:09 +0000
ROA not after: Sat 30 Nov 2024 09:50:09 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62922 (0xf5ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:50:09 2024 GMT
Not After : Nov 30 09:50:09 2024 GMT
Subject: CN=66fa7454-1669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:e9:52:2f:c4:fd:b5:ce:d4:6d:bd:b9:5a:
e9:d5:43:19:d0:77:58:77:92:2a:41:09:29:37:16:
86:f8:3e:c2:d2:c5:d1:77:6d:62:63:56:88:2b:a2:
c3:0f:f5:5c:01:21:93:52:c6:96:0c:66:16:62:e0:
c7:34:87:75:46:e2:e4:63:64:0d:a3:ff:2f:fb:4e:
2a:37:a9:9a:ef:b4:b4:70:e3:e6:c5:55:94:93:b6:
ce:11:cf:34:4d:a9:9c:3d:8f:f9:79:c1:34:5a:84:
92:47:f1:cb:ef:c5:f5:57:ba:eb:ef:3e:09:b2:48:
a2:09:8b:a6:70:ac:fe:a0:11:20:63:9c:5d:bc:63:
cc:31:d0:d2:02:17:fc:51:80:e8:d0:cc:a3:92:a7:
a6:da:f2:f3:aa:e8:25:51:f8:32:49:de:56:e3:f7:
c6:37:24:a3:7b:af:c5:72:b3:13:80:44:a1:d2:81:
13:c1:e5:e9:b1:68:9e:f5:71:56:76:d8:22:8b:44:
08:e2:9f:14:83:04:0e:8e:45:59:a7:f1:c9:98:65:
ca:8a:88:5b:7e:e1:20:fb:9b:4a:4d:4c:ac:79:23:
c5:f0:8d:b4:a1:57:55:a0:74:5d:a9:25:71:c7:96:
10:db:59:30:6d:23:16:ae:3c:e0:78:7d:e8:54:f2:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:C8:8B:40:A6:C1:46:7F:F4:F0:98:93:EC:30:F1:44:92:3E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631229947F1111EF97141F60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d3:a0:82:6d:c0:c7:02:b7:f2:4e:e7:80:ac:be:52:48:f0:
5d:08:83:6c:35:28:5f:76:8c:a1:14:44:33:a9:7f:06:1b:b0:
54:72:b0:b8:74:a3:56:e1:07:fb:c8:59:e0:62:38:2b:cf:be:
c1:c9:03:71:6b:64:41:20:ad:f2:87:6b:df:d6:e8:36:60:a8:
e5:32:6d:e0:f2:9c:b5:69:bd:f8:56:d9:5c:8f:5f:e4:56:56:
7e:d1:d8:88:c9:b6:42:22:bc:39:2e:c2:4c:20:22:c5:8f:5b:
a0:9a:8e:00:89:61:e5:0e:95:ea:b7:e1:67:32:27:90:a4:57:
13:65:2c:dd:d3:a8:ac:82:bf:bd:a9:4c:03:e7:3c:98:f1:34:
6a:ed:12:1b:2d:14:63:61:f5:9c:c6:bf:b0:22:d0:fe:ff:be:
3c:f4:64:2d:b4:9f:b6:49:cd:2b:43:78:94:9e:19:93:70:0e:
a3:50:5b:03:8b:47:1e:00:12:f9:c1:16:ca:a5:99:4d:86:e5:
13:21:70:8f:cd:d5:ca:b8:e6:23:cb:61:4a:46:3b:e6:36:37:
1c:f2:7c:78:4c:75:a0:f7:79:a6:24:7c:fd:a1:6f:38:d8:23:
f1:ae:46:4a:f2:49:69:b3:f3:29:9d:56:10:c7:66:1f:36:cd:
2a:a6:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:32 2024 by rpki-client on console-fra.rpki-client.org