Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91395C2274D311EFA9C66C6E762E951A.roa
File: 91395C2274D311EFA9C66C6E762E951A.roa (raw, json)
Hash identifier: TEyH+Ad0Ve+FPBXTqz5ZvwDBsIkJTKuQTa50nd6B3FE=
Subject key identifier: 7F:15:1B:26:0D:4E:38:A0:99:B8:8E:07:EC:D9:C8:69:F4:E2:90:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F03A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91395C2274D311EFA9C66C6E762E951A.roa
Signing time: Tue 17 Sep 2024 09:02:30 +0000
ROA not before: Tue 17 Sep 2024 09:02:26 +0000
ROA not after: Wed 10 Sep 2025 09:02:26 +0000
asID: 135600
IP address blocks: 154.205.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61498 (0xf03a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 09:02:26 2024 GMT
Not After : Sep 10 09:02:26 2025 GMT
Subject: CN=66e945a5-f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:2e:2a:cf:47:9e:a8:0e:31:eb:45:70:f1:
f6:6f:c2:bf:9c:22:91:9f:14:37:27:a1:d2:b6:dc:
a2:11:3b:b8:4e:94:77:d3:d8:1f:fd:fc:0d:e6:f0:
03:d7:0f:b1:63:84:a3:3e:84:9e:10:44:eb:84:57:
83:7d:27:cb:77:b8:2e:0c:05:7e:53:b2:2a:51:c1:
0b:a4:c8:fe:04:00:e2:82:e5:6a:6a:a7:52:5c:dc:
4a:77:cb:d2:be:84:ec:94:e7:78:63:04:30:2f:e6:
bb:b8:9d:f8:3e:a1:57:7c:cb:66:a5:0a:a1:35:e8:
6f:da:41:ee:45:e8:32:ad:33:8d:3e:01:4a:20:c3:
7e:79:a5:31:d9:e0:15:9d:10:56:34:c3:14:a6:f8:
9e:50:27:77:cd:69:9e:e2:6f:5a:b0:50:16:b1:92:
ca:0a:02:9e:6c:b6:fe:8b:0a:81:8f:45:a8:04:d6:
2c:e2:bc:59:5d:f0:f4:7d:fa:39:5b:bc:c1:d8:41:
f6:57:6e:46:1d:72:a6:94:a5:6b:81:09:ff:82:50:
00:74:7e:d7:db:88:77:cc:da:72:e9:f5:3b:4e:c5:
49:7c:38:6c:a5:ed:1c:3a:37:08:c7:26:70:6f:88:
51:c8:32:df:ad:5a:87:c2:46:14:b1:e1:fd:63:be:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:1B:26:0D:4E:38:A0:99:B8:8E:07:EC:D9:C8:69:F4:E2:90:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91395C2274D311EFA9C66C6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.12.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:0b:ca:68:32:4c:bb:20:b6:6d:47:a6:df:a3:51:7b:28:e4:
04:39:17:f7:7a:b5:a8:8c:85:d8:b4:6d:a0:07:73:2a:fc:14:
3c:82:dd:6a:68:a8:02:a8:81:0b:1d:76:4a:04:41:72:f3:f9:
b6:a5:a4:01:4b:b7:45:66:96:9b:d6:c7:50:8f:6f:b1:5f:bc:
8a:a7:82:0f:8e:07:b2:32:7a:64:21:79:73:6d:9a:44:23:9d:
e2:2e:18:a0:79:54:92:f1:94:4f:06:a4:26:f6:99:77:f3:7f:
44:57:70:06:55:5d:04:ed:eb:19:bf:9e:26:79:cd:b3:7d:b8:
db:b1:14:da:9c:b1:98:88:e3:ee:10:1d:09:23:43:ce:8d:a8:
01:4d:48:ec:6c:15:8a:e3:6a:76:86:1e:ce:71:3e:26:0a:cd:
f1:b4:6a:f2:e3:40:89:77:60:74:ea:a1:2d:01:6a:7b:b6:27:
2b:5d:2d:ca:89:cd:52:6a:b1:55:d9:d9:f4:83:26:d8:81:cf:
c8:ee:4e:a8:ee:46:22:bf:ca:01:99:d6:1d:aa:12:ed:a3:98:
db:4d:02:80:8a:63:48:d0:54:2e:e8:08:89:ab:11:0a:35:ff:
9a:ce:4b:72:60:ce:f6:af:c5:87:94:3d:f9:0f:fe:72:f8:29:
49:ee:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:59:02 2024 by rpki-client on console-fra.rpki-client.org