Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0FBB9292B211EF9D0F799F762E951A.roa
File: 7B0FBB9292B211EF9D0F799F762E951A.roa (raw, json)
Hash identifier: BYPbf7siQ6NPacieVoRoVcs6RdxEQJiwSoyHaO0D/G0=
Subject key identifier: 69:99:9A:50:F0:DC:29:09:AA:3C:B3:8E:5E:67:88:6B:C0:0C:54:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0FBB9292B211EF9D0F799F762E951A.roa
Signing time: Fri 25 Oct 2024 09:21:14 +0000
ROA not before: Fri 25 Oct 2024 09:21:10 +0000
ROA not after: Mon 30 Dec 2024 09:21:10 +0000
asID: 138915
IP address blocks: 154.93.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66014 (0x101de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:21:10 2024 GMT
Not After : Dec 30 09:21:10 2024 GMT
Subject: CN=671b630a-1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:59:20:75:f1:5a:a6:13:10:e0:ce:1b:ec:
1b:76:cf:5a:e2:9a:19:1a:03:65:14:66:6e:ed:f6:
6e:a6:53:85:bb:43:41:11:de:bd:5b:89:f8:6e:e1:
06:85:88:04:b7:50:f6:b5:15:a0:93:39:f7:7c:b4:
56:0b:13:60:32:af:6f:68:ae:ad:2a:29:a8:14:ce:
74:ef:2f:ad:3d:2a:fa:69:6b:8b:4c:5e:51:f3:9f:
80:1e:6c:44:54:b8:2c:18:f4:88:12:8e:1d:73:42:
da:6f:74:a6:95:4d:4d:3f:49:7d:cc:54:3f:e4:09:
cb:34:62:df:40:2f:9d:1c:f0:8e:41:74:89:89:f2:
2c:f5:33:aa:0f:5e:bc:05:95:23:42:d2:41:b2:fc:
b4:80:7f:c8:e3:ad:09:83:bc:dc:2f:20:d0:69:c6:
f7:34:08:12:fd:86:58:f0:7a:4f:1f:cf:d0:db:c1:
4a:c2:b2:91:2d:7c:b2:00:2f:06:66:5e:ba:3f:bd:
e7:05:7e:bc:be:9f:08:39:1c:28:28:e0:6d:9f:29:
6b:69:45:5f:7c:88:73:4c:87:f4:55:e5:5f:04:0a:
b5:2a:09:88:87:f0:78:59:23:a5:67:ee:2e:e8:47:
76:35:ba:ad:8b:74:4c:79:72:aa:a0:9f:3f:28:c2:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:9A:50:F0:DC:29:09:AA:3C:B3:8E:5E:67:88:6B:C0:0C:54:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B0FBB9292B211EF9D0F799F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.110.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f7:ef:b2:c9:7e:f1:e6:d1:2a:21:16:ee:74:d4:e3:40:21:
03:56:5f:73:3e:21:58:d9:0e:61:22:03:b8:7f:d3:26:4e:f5:
d3:cf:d9:b2:2f:40:9d:d5:90:35:18:2c:24:4a:fc:f7:5b:01:
03:6f:94:e7:88:f7:1b:f8:79:c6:0f:79:6e:b8:17:d0:3e:c4:
97:52:af:05:e0:c9:67:f6:24:d5:97:d9:09:e7:10:6e:c4:10:
37:e7:be:05:2d:38:14:84:35:e6:21:4b:fc:4a:3d:09:5f:49:
91:7c:14:46:6d:d2:9f:ba:5b:3f:51:73:5e:12:81:14:14:dd:
8f:93:11:84:7d:2e:2d:aa:7e:c2:43:1b:35:11:b0:1c:b9:01:
af:cd:b3:4b:9e:0f:03:9b:8b:18:b3:5a:a4:bd:94:06:d3:e8:
2c:12:76:86:38:59:6c:91:7d:9e:22:f0:42:1b:fb:88:91:85:
4d:95:30:64:ef:23:0d:73:69:9f:12:f1:96:af:2e:f7:88:9a:
81:e1:f2:1c:bf:76:d2:6a:8a:aa:3f:af:51:48:a6:83:8e:5d:
5e:4b:54:30:98:e1:5f:fa:61:3e:2e:c7:b7:7e:4d:ca:93:3a:
ca:f5:b4:a2:be:c5:e7:bd:6a:7f:67:14:25:a2:3e:be:86:84:
bc:a6:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org