Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66220E909A9311EFBC7D524E762E951A.roa
File: 66220E909A9311EFBC7D524E762E951A.roa (raw, json)
Hash identifier: ap2TJfbGQwn4PeqO72yc+gp200wEeAIQeITyzNPod1s=
Subject key identifier: 2F:CA:0C:1F:CB:93:BA:E5:E6:4B:B0:6A:75:10:68:35:0D:B5:BF:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010686
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66220E909A9311EFBC7D524E762E951A.roa
Signing time: Mon 04 Nov 2024 09:58:54 +0000
ROA not before: Mon 04 Nov 2024 09:58:50 +0000
ROA not after: Mon 25 Nov 2024 09:58:50 +0000
asID: 44559
IP address blocks: 154.210.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67206 (0x10686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:58:50 2024 GMT
Not After : Nov 25 09:58:50 2024 GMT
Subject: CN=67289ade-ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:0a:6e:18:24:8b:3b:0d:38:be:25:88:60:
6f:38:70:71:fc:e5:66:c1:4b:5d:cd:e3:65:63:d0:
7d:cc:54:07:7e:21:0d:91:20:7e:60:a8:0e:8e:b5:
ef:13:37:33:f1:f1:6a:35:3e:34:32:47:d1:02:98:
a8:77:63:ec:fb:7f:0a:64:e2:5c:bb:72:42:32:e8:
98:94:01:7f:49:2c:60:b3:51:f2:2b:80:98:1c:fa:
4e:80:23:6b:aa:39:f1:8e:2f:2f:dc:62:b0:ee:8d:
3c:24:bc:3d:cb:36:31:85:d6:c3:33:9b:1f:5c:a8:
22:5d:ad:59:31:57:c2:12:78:e5:70:8c:73:81:a7:
1e:0c:2d:b2:83:b8:b9:8f:bb:c0:18:91:1b:16:9e:
19:2f:d4:d8:53:98:7a:ed:35:b1:0a:51:51:d4:66:
a8:2d:1b:4c:c7:9e:19:83:20:29:6d:7a:24:eb:f9:
e8:3c:30:5d:7d:fc:48:f9:14:4e:00:0a:03:7b:5a:
46:8a:88:23:1a:e7:6f:17:17:f8:50:52:ac:93:31:
90:90:0b:d4:a8:fe:93:5a:c9:d1:db:58:4d:82:ee:
dd:93:c4:d0:7e:38:fb:f2:f6:d9:7d:b8:89:c7:a2:
3f:71:00:29:39:a5:35:93:2b:fc:0b:6c:ad:2d:31:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:0C:1F:CB:93:BA:E5:E6:4B:B0:6A:75:10:68:35:0D:B5:BF:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66220E909A9311EFBC7D524E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bc:c5:7d:56:38:e6:af:65:75:8a:14:2e:9c:3d:f1:f9:8e:
2c:2c:36:ca:6a:49:00:da:e4:54:42:02:3d:e8:66:ec:b1:76:
38:dc:b2:a8:37:30:94:10:3f:42:d3:1d:a9:4c:39:52:e0:81:
d2:6d:a0:19:44:aa:7c:c7:d5:9a:14:fd:9b:75:d5:c3:25:20:
34:6e:d4:11:8a:b3:c8:76:12:3c:14:64:ec:cc:82:22:40:16:
5f:7f:0b:d9:12:40:82:3c:b4:8d:3a:bc:4e:08:d3:49:1f:39:
63:fc:99:fa:af:e7:b2:eb:30:86:8f:d2:3c:45:32:7c:35:8e:
fa:7c:22:cd:a5:b8:f5:49:91:ae:8c:64:b1:21:b0:f7:f8:cf:
ce:6f:14:4f:b3:94:ce:83:6f:d8:44:c3:7d:29:13:ce:47:62:
02:6e:e2:81:cc:6c:27:64:a3:58:8a:35:fc:2c:69:d9:2b:75:
e4:33:2e:10:b6:20:42:16:a0:74:6a:8b:ae:bf:12:90:c8:47:
7e:27:e2:9b:8e:1e:bd:e4:3a:08:68:8f:23:7f:2b:03:36:80:
52:3b:24:e9:f7:56:6f:ef:d4:97:c9:f5:2d:9b:d5:f1:5b:65:
ba:db:46:59:d5:59:a6:2a:f5:9d:72:52:9c:97:4d:3c:e2:5a:
2b:18:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:08 2024 by rpki-client on console-ams.rpki-client.org