Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929E92029EAA11EFA8EB9A8F762E951A.roa
File: 929E92029EAA11EFA8EB9A8F762E951A.roa (raw, json)
Hash identifier: iKucTdxQKy6l8JO528xesg8xK70agdVrfVP3WwvE2lU=
Subject key identifier: 10:51:F8:C0:AD:DE:E4:47:7E:37:9C:C4:F7:CB:48:62:16:41:B4:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929E92029EAA11EFA8EB9A8F762E951A.roa
Signing time: Sat 09 Nov 2024 14:54:51 +0000
ROA not before: Sat 09 Nov 2024 14:54:48 +0000
ROA not after: Sun 01 Dec 2024 14:54:48 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68119 (0x10a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:54:48 2024 GMT
Not After : Dec 1 14:54:48 2024 GMT
Subject: CN=672f77bb-09f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:f1:1c:40:eb:50:e3:0f:b0:68:93:32:c8:
47:7d:8e:ac:29:6d:75:99:c9:fc:1c:cf:f9:a0:a8:
a1:26:b9:0c:01:6f:38:0d:c2:34:d7:19:9c:54:cd:
78:06:f2:df:e3:01:05:02:1b:ef:1f:e7:5f:3c:3e:
87:e4:22:6f:a7:c1:93:eb:ef:ac:f0:6c:81:f2:46:
6a:73:9b:66:5e:ab:b3:84:e4:86:49:39:6f:c5:71:
db:4f:84:24:2e:4c:84:cb:5a:d0:92:02:de:ae:3a:
4d:24:83:ed:42:4b:ef:66:7e:86:b2:74:6a:26:ef:
b5:bc:a1:31:fd:e9:16:5f:e2:6d:d8:e5:5c:65:42:
bb:3b:1f:bc:f5:16:87:d3:8a:05:8b:7e:61:f9:4d:
8c:f3:e6:09:d5:e9:54:0d:9c:a2:e6:62:ec:e4:34:
bc:ec:95:7a:5d:6a:d9:9f:ce:7a:5d:07:fc:4a:77:
dd:e4:9c:db:df:9c:4a:5d:7d:24:98:7b:ad:bd:7d:
11:85:52:6b:0f:c6:2c:a4:e7:ad:74:cb:f5:84:45:
39:98:fa:67:b6:b6:1c:e2:5a:7b:5d:c0:7a:f9:f2:
f6:62:f2:72:25:6d:0d:2f:12:56:8c:e7:7e:df:fe:
e8:82:d9:af:22:02:4e:6f:2b:45:c6:1b:69:9f:9f:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:51:F8:C0:AD:DE:E4:47:7E:37:9C:C4:F7:CB:48:62:16:41:B4:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929E92029EAA11EFA8EB9A8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:c3:02:2d:37:ec:54:d0:50:28:8d:11:60:b8:e8:46:cb:be:
32:21:12:78:74:c6:92:18:40:bb:b0:ac:27:ad:75:4b:ec:f5:
c3:de:ac:18:13:d4:bb:08:a1:55:92:06:6a:4a:27:6a:e1:92:
32:85:1a:ca:90:d7:46:bb:49:32:e7:4d:e9:92:57:48:f5:11:
d0:2b:ea:ee:43:03:68:c5:ea:a4:1b:6d:a6:1a:17:f4:34:30:
25:67:55:9f:59:d4:d4:3a:34:98:85:df:0a:44:04:9a:67:cc:
91:63:19:7b:85:72:46:82:96:33:c0:9f:16:1e:18:24:d8:8d:
9f:d4:28:2f:ec:38:09:0d:be:bd:b1:56:26:4f:c1:17:0b:a7:
8d:81:a0:f1:8d:c5:51:5c:98:67:f7:07:0f:13:27:dc:ac:9e:
57:14:6b:29:d1:61:0c:5b:9d:f3:fc:52:14:6f:c8:1d:fe:f4:
f2:e4:27:3e:37:90:90:0f:9d:34:59:7e:46:c8:24:ba:80:00:
3d:14:a6:47:1d:5c:ff:c4:0c:93:c6:95:6e:61:b0:45:a1:93:
19:5d:fe:fc:a6:3b:d2:a3:4e:91:18:67:d4:d6:6e:a9:85:3b:
86:c5:7e:1f:b2:c1:f3:f1:30:3d:1c:62:a8:87:ab:5b:79:e5:
5d:91:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:16 2024 by rpki-client on console-fra.rpki-client.org