Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/896D0D3E905011EFA7158CA0762E951A.roa
File: 896D0D3E905011EFA7158CA0762E951A.roa (raw, json)
Hash identifier: iGysN63ZM8VMzurhNI7pY5KCtcni6OA2VLy/lpaTOOw=
Subject key identifier: 3A:6C:52:FC:67:22:99:AB:C9:46:77:12:65:09:35:0E:39:0D:88:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010085
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/896D0D3E905011EFA7158CA0762E951A.roa
Signing time: Tue 22 Oct 2024 08:35:05 +0000
ROA not before: Tue 22 Oct 2024 08:35:01 +0000
ROA not after: Tue 26 Nov 2024 08:35:01 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65669 (0x10085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:35:01 2024 GMT
Not After : Nov 26 08:35:01 2024 GMT
Subject: CN=671763b9-e140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:31:a6:09:0c:70:83:83:8c:b7:2f:12:41:
e0:b0:6c:17:65:e9:c6:33:25:4c:41:ae:17:86:6e:
d9:f8:0b:b8:19:5f:5b:fc:44:7b:9a:a2:1f:d4:20:
6b:37:ec:2c:00:87:53:1e:03:9d:26:68:ff:06:bc:
4b:30:bf:26:c2:c0:9e:b3:f4:9c:38:78:c9:67:30:
a6:9b:a2:39:fa:e9:48:8a:d7:5f:ce:68:4c:5f:89:
41:6a:e8:5f:90:c5:17:92:2f:03:6a:e7:f0:e3:16:
62:b9:11:42:d0:5d:81:8d:b4:81:34:f1:51:ff:c2:
16:f5:c6:c9:a5:db:1f:10:f6:b6:84:fb:33:83:ff:
73:b0:71:e7:cd:75:fb:4f:3d:59:cb:82:13:35:0f:
d9:1c:22:49:c3:4b:d6:34:e2:ac:3b:f4:59:57:c9:
fe:52:53:64:c4:f6:36:af:92:49:8d:f1:fc:34:37:
89:50:af:5f:bc:7f:d7:ed:6d:d4:65:70:3a:44:93:
de:e8:ec:11:e7:f3:0f:bb:31:c7:96:9e:3a:ba:cd:
f0:47:b6:d2:3d:a3:d3:05:e0:e3:40:84:1b:24:b5:
56:57:c1:39:14:4e:f3:b6:05:54:71:fd:eb:28:23:
6c:f2:de:4f:fc:17:c3:4c:1d:3c:36:99:21:46:7b:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:52:FC:67:22:99:AB:C9:46:77:12:65:09:35:0E:39:0D:88:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/896D0D3E905011EFA7158CA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:77:0d:01:46:4c:bf:7d:76:e5:cd:64:fd:52:6e:af:31:e9:
f2:4d:e4:cd:37:61:68:46:67:1c:5a:10:7e:ac:c2:fe:9a:88:
e7:ee:d7:c0:d2:42:0e:45:51:74:88:a7:38:f6:75:a8:ae:0b:
f4:06:a0:bd:0b:cb:25:20:0e:94:15:2c:df:ad:5f:87:52:4e:
7f:2a:29:bb:f4:95:4f:70:ef:d2:4f:33:66:56:cd:75:92:79:
5e:fa:9b:ff:49:c5:74:04:db:72:27:41:ad:d8:cb:4c:95:a2:
78:33:73:3b:b7:ce:88:eb:03:ae:a6:a2:97:2c:bb:e8:4b:bb:
e1:b8:c4:b1:cf:1f:3a:04:19:9c:bc:d6:a3:7d:81:bc:0c:d5:
b4:f3:22:31:25:5f:41:dd:3d:b8:d8:de:68:ad:cf:71:cc:49:
eb:78:54:2d:d9:81:23:f8:66:a0:e6:4c:f2:41:1d:96:88:68:
b4:b5:c1:e4:8b:d1:3f:55:80:3b:54:04:85:70:b7:8d:ac:34:
65:4e:26:51:53:ae:df:91:e1:4e:d2:8b:53:f8:d4:c6:e2:c1:
1f:b2:30:d1:43:a5:dd:29:21:b9:4a:ba:4c:e3:b0:96:96:f2:
19:1b:43:1a:3d:5d:c1:96:34:9f:10:1a:2a:c4:6f:f7:2b:c9:
49:0c:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:38 2024 by rpki-client on console-fra.rpki-client.org