Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EEEADAA0DB11EFAFDBE35D762E951A.roa
File: 92EEEADAA0DB11EFAFDBE35D762E951A.roa (raw, json)
Hash identifier: W1WJcv9F+aEWxM3JOq+BK4b4wSe1cAuccBBrWlzlw80=
Subject key identifier: AA:4B:7A:87:4C:E6:46:AA:77:CC:AA:AE:E9:52:BF:91:CD:AE:86:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EEEADAA0DB11EFAFDBE35D762E951A.roa
Signing time: Tue 12 Nov 2024 09:50:40 +0000
ROA not before: Tue 12 Nov 2024 09:50:35 +0000
ROA not after: Sat 07 Dec 2024 09:50:35 +0000
asID: 138915
IP address blocks: 154.223.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68660 (0x10c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:50:35 2024 GMT
Not After : Dec 7 09:50:35 2024 GMT
Subject: CN=673324ef-85f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:eb:bd:81:6f:a9:aa:58:d3:37:ce:45:cf:
68:0e:8e:d4:66:24:1b:a7:f9:3a:7d:a2:57:a1:07:
e2:0d:78:1c:37:5f:05:77:ff:fd:c8:cc:4f:80:4d:
b6:26:76:7b:49:88:42:2a:c5:a6:4a:3a:5a:6d:37:
2e:24:83:5a:da:0c:3b:c7:35:3e:06:a5:00:3c:11:
fc:76:39:f8:9e:a4:fb:18:49:fd:7d:db:6d:aa:b3:
8b:42:d9:2d:8d:2d:b6:d6:10:35:61:b4:5c:49:b0:
79:9a:fd:4a:e6:3a:bf:50:78:aa:ec:db:de:dc:5f:
be:0d:14:d3:e6:31:1e:b7:92:9e:0a:0d:78:df:3b:
50:2c:89:25:c3:af:eb:dc:77:f4:22:1f:47:3d:47:
ec:64:ec:ad:61:91:fd:03:26:59:8e:88:9c:7a:d1:
2c:4d:3b:1e:49:d0:f4:47:0d:87:e7:ec:45:32:25:
2b:5a:d2:ac:12:69:df:fc:08:08:c2:30:0e:a4:0e:
b2:00:03:88:5e:05:45:87:57:41:03:3f:28:6b:49:
f9:c5:60:ec:29:b9:4d:bc:4e:b1:96:86:4c:94:f9:
8a:07:f7:0c:35:a3:74:cf:d0:e5:b7:1f:41:a7:d4:
22:53:c3:36:9a:e5:53:68:00:6a:a7:2c:25:c4:29:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:7A:87:4C:E6:46:AA:77:CC:AA:AE:E9:52:BF:91:CD:AE:86:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92EEEADAA0DB11EFAFDBE35D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.24.0/24
Signature Algorithm: sha256WithRSAEncryption
24:5d:c9:4d:d3:d2:3e:d2:39:0d:9d:2c:3d:8a:e6:3c:b7:b9:
42:ec:7c:2b:4f:e7:c7:97:7e:55:eb:26:84:e3:ce:b8:e9:0b:
be:62:7e:60:6d:31:b5:80:c4:e4:7b:cd:10:2b:17:8b:02:07:
64:8b:a6:c3:36:8b:33:0d:1a:9e:0f:75:bc:93:8f:6e:aa:74:
ef:27:ac:dd:6b:44:0e:22:19:ec:e7:43:12:fb:a2:76:e6:f1:
ca:04:21:0a:f1:20:1c:05:8f:92:85:4a:7b:71:98:42:73:d5:
83:97:55:9f:39:65:0e:40:17:e2:90:79:c0:51:27:e8:4c:b0:
cc:85:e2:7e:7c:be:5d:37:35:2b:eb:62:c4:ed:d5:91:66:6b:
ce:22:06:ac:a5:f1:2d:b5:38:1a:6c:6c:e6:e1:33:11:53:fa:
44:c8:8c:42:c9:5a:61:9f:6f:04:d9:1b:13:39:ec:84:1d:77:
70:97:21:1a:38:8f:15:02:88:e0:d6:f3:64:37:89:70:f4:76:
18:f9:41:fd:7a:77:45:19:e0:27:be:51:2e:32:ea:da:12:ec:
9c:cd:4a:7c:bb:48:c4:dc:19:89:0f:fe:e0:6a:d4:ca:0c:6c:
8a:ba:cd:51:c0:fc:d1:75:f6:2a:97:40:19:0d:51:9c:0c:84:
99:c3:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:39 2024 by rpki-client on console-fra.rpki-client.org