Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA142BCA8E311EF818A758D762E951A.roa
File: 8CA142BCA8E311EF818A758D762E951A.roa (raw, json)
Hash identifier: rUECCRFIU8UvRwcoV+i/wh2qWrrRSphIWBrDDaCWrcs=
Subject key identifier: 11:DA:41:41:E8:20:4D:59:1A:0D:2B:A6:8C:C4:60:BF:35:69:22:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA142BCA8E311EF818A758D762E951A.roa
Signing time: Fri 22 Nov 2024 15:07:54 +0000
ROA not before: Fri 22 Nov 2024 15:07:51 +0000
ROA not after: Tue 03 Dec 2024 15:07:51 +0000
asID: 62240
IP address blocks: 154.194.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 29 Nov 2024 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69809 (0x110b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:07:51 2024 GMT
Not After : Dec 3 15:07:51 2024 GMT
Subject: CN=67409e4a-6b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:a8:95:1a:ab:a1:42:aa:60:da:0c:88:90:
da:ac:ad:a6:37:ab:90:5d:15:fd:6f:97:53:ce:8d:
9c:8f:a7:9a:61:c0:08:af:81:78:ef:4b:96:90:45:
74:49:e2:b9:f0:f7:c6:d2:12:c1:89:b8:5b:e7:62:
2a:dc:31:66:2c:96:d2:77:48:7d:8e:bb:d2:d6:62:
73:3b:70:2c:8c:29:0c:45:4f:ce:9e:39:4f:bb:ec:
08:2f:12:60:f3:d7:91:22:f7:62:69:e9:14:50:63:
5e:08:b1:e7:23:7c:08:4c:60:ce:3c:4f:6a:b3:e5:
c9:39:4e:d8:fd:64:62:8b:72:ba:b6:34:ae:eb:73:
27:f1:c0:c1:f4:10:7e:cd:83:5c:a4:8d:e1:e1:be:
35:e3:b8:a0:6b:85:92:c2:56:44:94:ef:a5:1a:cf:
2b:97:40:83:f8:4f:4e:33:bc:0c:da:13:fd:4b:04:
9c:8e:d6:c5:6c:20:99:f5:df:11:23:6b:26:82:63:
76:33:54:8f:6b:d9:ff:95:4e:22:2a:f6:08:ab:b9:
7e:6e:27:e1:28:d1:ac:a4:ba:b8:0b:9e:af:2e:11:
cc:03:26:56:c9:14:8f:4d:9d:c1:d7:7b:e9:44:2c:
05:57:86:5e:be:46:1a:55:87:4b:f2:bd:22:50:f6:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:41:41:E8:20:4D:59:1A:0D:2B:A6:8C:C4:60:BF:35:69:22:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA142BCA8E311EF818A758D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:54:19:a8:0b:b4:b7:ec:a1:3f:84:71:db:8c:cc:ad:6e:0a:
e8:a9:77:af:6a:af:83:b0:65:b4:51:8f:2b:47:53:d5:b3:37:
08:b7:81:f8:0e:9b:ad:7c:8a:2a:c9:b2:e1:26:76:0a:46:ed:
f0:b1:02:b2:f2:8a:b9:9d:3b:78:60:7f:01:89:ec:0a:75:38:
7c:f7:d3:98:e1:ec:d7:df:ca:e2:29:e0:8d:42:4d:78:38:b8:
87:11:f9:aa:b0:29:81:ef:5b:a3:11:e7:11:cd:8b:90:5a:85:
84:18:01:58:ca:c0:60:87:aa:f8:eb:0c:3f:04:97:22:c6:ae:
71:74:f6:2d:11:00:db:bc:71:2c:95:9b:1c:66:46:75:d3:35:
00:92:b2:28:20:68:fb:74:c0:d1:f3:ab:8d:1a:98:64:41:a8:
28:2b:d4:a9:58:59:c4:b8:86:f4:65:93:2e:62:9f:88:70:50:
a7:cd:4d:8a:43:8b:5d:77:88:68:c8:b3:ad:9d:b7:0e:ee:86:
95:94:fe:73:2e:6a:3a:89:e2:8d:90:36:28:58:b0:17:6b:c5:
79:f7:7f:22:67:40:42:94:de:89:af:23:62:37:04:d5:1b:40:
c1:ab:df:90:16:2b:86:bc:74:ca:a3:d9:86:ad:8e:4a:32:3b:
00:a8:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 16:09:37 2024 by rpki-client on console-fra.rpki-client.org