Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91788134986111EF97F0FD70762E951A.roa
File: 91788134986111EF97F0FD70762E951A.roa (raw, json)
Hash identifier: FKnlUe3TiU40PoqiuuUQAZznLjJ+dXO01FY7ut/7LjY=
Subject key identifier: 6F:79:A5:48:22:75:8F:72:EE:06:55:ED:50:D8:28:AF:31:F8:A2:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91788134986111EF97F0FD70762E951A.roa
Signing time: Fri 01 Nov 2024 14:57:09 +0000
ROA not before: Fri 01 Nov 2024 14:57:05 +0000
ROA not after: Tue 03 Dec 2024 14:57:05 +0000
asID: 203020
IP address blocks: 154.207.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66807 (0x104f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:57:05 2024 GMT
Not After : Dec 3 14:57:05 2024 GMT
Subject: CN=6724ec45-5382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:79:95:a3:f8:e7:93:c2:ce:06:86:6b:13:7f:
5d:d2:b6:a5:d2:dd:c2:a9:db:db:31:c9:4e:bf:bb:
41:1b:19:25:74:06:30:0b:b1:fb:a0:a5:eb:62:18:
d8:b9:d4:57:e8:0e:7a:89:76:ab:4f:67:de:c6:da:
7e:5d:3d:09:f4:3d:89:bb:a1:c0:17:20:ae:31:ea:
c2:1d:7b:e8:dd:4e:0d:97:90:aa:72:f9:06:e4:c7:
2c:0a:08:60:da:25:cb:3b:92:7f:32:73:8b:78:80:
51:3d:49:6a:af:b9:73:f3:95:08:5c:06:e7:8b:89:
b1:a7:4d:0b:70:4b:00:2c:d2:c5:46:64:cb:0b:29:
2a:52:35:b2:80:5f:21:00:05:a2:e9:03:6a:47:5e:
f1:06:6a:ad:2b:1c:d3:98:49:14:f1:0e:1d:8c:b3:
ff:01:de:7a:88:0b:4a:52:27:2a:3f:6f:70:eb:74:
61:ce:ea:3f:a4:d7:71:bc:6c:65:a8:04:c4:1e:4c:
e5:ec:c4:03:f0:4e:d6:80:cf:94:f4:35:8e:58:ec:
c1:90:72:e4:5f:c8:6f:36:19:0e:43:7d:94:b5:59:
79:13:b7:2f:6c:7d:30:63:52:41:07:4d:43:03:5b:
37:24:1b:b9:b7:f3:f5:e1:c2:e1:47:31:88:6d:9d:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:A5:48:22:75:8F:72:EE:06:55:ED:50:D8:28:AF:31:F8:A2:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91788134986111EF97F0FD70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.84.0/22
Signature Algorithm: sha256WithRSAEncryption
90:6d:d3:e9:71:f4:23:ac:92:37:52:6e:f6:a3:2c:28:10:c4:
87:16:7c:86:ef:49:ee:67:5b:7a:b6:aa:01:7b:19:94:c6:58:
2b:cb:f7:61:68:b2:ad:97:a5:e2:b8:c4:36:f4:ae:0a:99:fa:
34:4d:b9:0d:8c:8d:62:42:6a:d1:65:b2:e1:ed:44:75:73:de:
7d:1f:7d:96:d1:15:b8:3f:c0:d6:f9:df:47:57:6e:b8:e5:e9:
4e:0e:65:38:e3:da:d6:0d:2f:b2:2c:e2:26:0e:44:f8:4f:ad:
35:92:13:7b:b2:d4:15:3b:a2:4a:a1:59:99:bc:34:1f:7d:2d:
a8:82:9d:d1:6e:81:2d:c1:36:81:d5:94:8c:76:f7:1a:f9:83:
8a:c5:fb:00:2e:8e:f9:70:b6:fd:fe:1d:66:7f:ba:73:76:f2:
b8:72:42:6b:b0:66:39:f7:34:94:1a:36:f0:5a:e5:b1:8c:cd:
cf:6d:63:be:fe:91:41:7d:d8:0e:25:de:f9:f8:d7:25:af:7b:
ee:47:1f:fc:5a:96:45:db:39:ad:8a:17:57:18:d7:af:21:41:
54:5d:70:2c:9f:43:7e:65:3c:67:14:ce:3c:5d:1a:7f:db:be:
dd:60:01:67:b6:a5:21:b4:b5:5b:20:5d:93:63:01:3d:5c:b2:
85:e3:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:14 2024 by rpki-client on console-ams.rpki-client.org