Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789F04809C1711EF8EE5F660762E951A.roa
File: 789F04809C1711EF8EE5F660762E951A.roa (raw, json)
Hash identifier: JzbA/aPJyipCVOwXk/Le6HpOqTxqVmbv0icmPKzrWQc=
Subject key identifier: CB:BE:07:4A:A8:4E:23:7E:C7:A3:7E:27:FB:A8:55:4F:45:52:46:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01084C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789F04809C1711EF8EE5F660762E951A.roa
Signing time: Wed 06 Nov 2024 08:16:49 +0000
ROA not before: Wed 06 Nov 2024 08:16:46 +0000
ROA not after: Wed 05 Nov 2025 08:16:46 +0000
asID: 133448
IP address blocks: 154.92.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67660 (0x1084c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:16:46 2024 GMT
Not After : Nov 5 08:16:46 2025 GMT
Subject: CN=672b25f1-2cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:9b:b0:9d:de:a4:45:e0:18:83:c5:d0:25:
e2:e8:4c:a4:4e:b9:75:6b:a6:f2:66:cf:0e:ce:f0:
e0:59:2c:73:1f:f1:ea:0e:7c:e0:f9:a8:3b:c5:d3:
d6:34:c2:46:c2:61:64:ba:53:dd:ec:43:41:6d:9c:
72:c6:75:5d:19:07:24:2d:5c:ce:b1:cc:2d:70:3b:
c1:d4:73:2d:69:a9:b1:a9:48:cb:64:76:13:d2:03:
1c:7c:40:83:41:01:d7:7d:a8:73:9f:4f:e2:fd:62:
e6:2a:f7:79:70:22:ea:e4:70:e9:ad:51:51:99:1e:
57:20:e9:71:2c:3f:05:03:04:6a:ff:57:85:44:66:
cd:ea:44:23:16:a3:85:0c:47:a2:61:e4:d3:5d:c1:
9e:4e:11:95:6a:46:cd:35:a5:46:05:72:49:18:52:
e0:ea:7f:1f:03:f8:1e:b9:c6:b8:d4:60:5e:50:0a:
ba:e3:24:c8:67:02:46:21:b6:2f:5b:41:9b:2f:3a:
ac:e3:b0:09:05:4e:f3:cd:55:fe:e7:ca:82:38:d6:
2e:c0:1a:b9:ed:55:ff:44:3c:34:a1:3a:a5:10:58:
61:de:d0:0d:98:e0:47:7e:10:5c:71:10:5d:cf:86:
4e:ca:1c:71:53:8e:f6:d0:f4:e0:b0:ac:f7:97:1a:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:07:4A:A8:4E:23:7E:C7:A3:7E:27:FB:A8:55:4F:45:52:46:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/789F04809C1711EF8EE5F660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.6.0/23
Signature Algorithm: sha256WithRSAEncryption
86:c5:fa:aa:e9:01:11:1d:85:bd:61:b7:89:0a:35:8b:da:e7:
36:4c:1b:31:ae:04:92:e6:26:8e:39:e4:78:fb:5e:71:e8:8b:
c0:4b:66:7e:3e:82:78:31:8f:37:4b:ae:68:96:5f:fb:03:78:
2e:c1:26:61:87:c6:fb:95:32:e6:64:70:0c:6a:f7:0c:51:2d:
e9:a4:d1:45:81:8a:29:c8:ef:9a:62:f2:2c:ed:dc:d4:ad:bc:
df:83:d4:b2:5e:d7:1a:53:ea:14:88:37:68:df:d3:53:20:46:
82:ee:77:49:ad:c8:78:39:a6:65:38:75:c1:0e:e2:87:19:8c:
99:24:44:99:f3:00:8c:c2:61:2b:b4:59:1a:dc:71:ad:77:49:
45:cf:36:a8:4a:06:66:a6:d5:45:1f:91:8a:0e:67:74:31:77:
ca:6d:45:e1:19:15:97:02:bd:1a:9b:f8:b8:4f:cb:4c:f5:82:
cf:55:2a:30:66:69:a8:6d:e3:9d:54:e3:fd:7d:5b:30:88:7a:
7f:ae:b7:93:c4:ed:58:47:53:f2:be:7c:bb:a1:de:6f:f1:d4:
cd:4e:3f:60:9d:52:a4:22:75:60:3b:e3:33:be:ae:62:3b:89:
54:a5:63:38:ea:af:0c:bd:96:d0:eb:67:5e:00:c3:bd:0f:d6:
43:6e:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:31 2024 by rpki-client on console-fra.rpki-client.org