Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CB492C89DA211EF9332AD9C762E951A.roa
File: 8CB492C89DA211EF9332AD9C762E951A.roa (raw, json)
Hash identifier: tORr6Sz740zoOaUbghmzqc6Rhg/oiq9VOXr3O+ilQoQ=
Subject key identifier: 59:6E:13:5A:AE:26:B4:7D:1E:C0:32:1E:B8:E8:B6:C0:0B:F1:EA:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CB492C89DA211EF9332AD9C762E951A.roa
Signing time: Fri 08 Nov 2024 07:24:54 +0000
ROA not before: Fri 08 Nov 2024 07:24:51 +0000
ROA not after: Sat 30 Nov 2024 07:24:51 +0000
asID: 150008
IP address blocks: 154.206.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68024 (0x109b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:24:51 2024 GMT
Not After : Nov 30 07:24:51 2024 GMT
Subject: CN=672dbcc6-b0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:6c:35:7b:34:be:88:ad:b6:b3:dd:c0:6e:
2c:55:ae:db:98:c0:be:cd:d8:ee:49:51:89:9a:fa:
65:c3:7c:a0:26:7e:e1:e0:63:32:69:47:c7:67:fd:
32:c6:53:2a:50:fb:7c:f9:0a:44:54:a4:1f:90:a3:
05:d9:fd:7a:61:14:55:b9:42:92:54:93:1c:53:e3:
ba:4c:95:a5:30:e7:41:cf:22:7b:39:3b:b3:7e:da:
a0:14:66:c8:d5:2b:00:34:5a:11:97:d2:cb:3b:46:
0b:9a:bd:2a:98:86:29:c0:1b:be:9b:8b:98:e4:e7:
f8:c1:a1:78:b8:03:32:ff:53:bc:30:5e:33:2f:bc:
bf:9b:56:6f:42:70:13:d9:01:df:5c:fa:3e:8f:c8:
65:69:db:a8:03:a3:e9:e6:bd:9a:d1:c0:fa:f4:fb:
8c:2d:c9:5d:a1:7b:4e:b1:1b:2b:06:45:83:85:3a:
ce:a2:05:be:05:03:8c:a6:29:18:aa:c9:f1:0b:fa:
cb:61:69:86:5f:ec:69:46:db:f2:c3:2d:39:02:cd:
17:c4:8b:6a:78:9e:9c:40:3b:70:6a:54:e8:c3:50:
d3:97:58:3d:5e:82:fc:8e:9f:d3:6c:cb:43:0e:48:
26:70:61:1c:6e:2b:c2:ea:85:3d:e6:c2:aa:04:64:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6E:13:5A:AE:26:B4:7D:1E:C0:32:1E:B8:E8:B6:C0:0B:F1:EA:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CB492C89DA211EF9332AD9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.24.0/21
Signature Algorithm: sha256WithRSAEncryption
23:fe:ae:74:96:28:c2:cc:c2:a4:c9:6e:ea:6e:38:e2:e9:0e:
83:52:48:70:98:cd:66:5f:50:ef:42:f6:c2:d9:74:12:0a:08:
8a:82:0a:37:e6:dc:dc:8a:24:7e:e2:7e:f2:b1:66:1e:21:f7:
b0:13:0f:a2:c7:06:13:7a:e2:17:32:09:02:f2:42:e6:25:8f:
81:a3:72:60:73:4b:04:81:f6:e1:cb:55:06:41:a1:d9:55:95:
99:28:37:62:89:b5:d7:28:d4:92:c5:29:0c:e5:e1:51:a7:bc:
3a:fd:6b:0d:81:b9:76:8d:71:1f:25:0f:0d:2a:72:55:49:e6:
d7:ab:42:c4:a4:95:f0:2b:38:30:f5:60:77:f2:02:c7:0e:28:
8b:f8:08:92:ed:98:c2:24:02:c3:15:a0:e9:3e:0f:c0:d3:5b:
9c:40:a9:c2:b8:56:a3:fb:f0:c0:4b:c1:8f:f8:20:e0:44:d3:
ac:51:be:05:05:b5:31:25:ff:b2:a0:d4:76:5b:24:4e:60:71:
be:3a:02:84:87:2c:93:35:32:b8:08:10:39:57:60:55:88:fa:
6a:30:97:f6:dc:5b:b4:16:12:87:d8:3d:89:dd:df:6a:ff:02:
ce:7a:3c:d8:ad:e9:b4:8d:17:2b:80:f4:bb:d8:83:fc:0f:0b:
b6:5f:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:38 2024 by rpki-client on console-fra.rpki-client.org