Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F14BDA726E11EFA9C14375762E951A.roa
File: 93F14BDA726E11EFA9C14375762E951A.roa (raw, json)
Hash identifier: p9l1rzFcsadiPNaJjHAU+qZonIjilR1Jyx7W34pNf2o=
Subject key identifier: 35:8B:6D:07:C1:11:31:B4:E6:A4:B0:19:B1:6B:98:43:89:F4:8E:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F14BDA726E11EFA9C14375762E951A.roa
Signing time: Sat 14 Sep 2024 07:54:33 +0000
ROA not before: Sat 14 Sep 2024 07:54:29 +0000
ROA not after: Sat 30 Nov 2024 07:54:29 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60952 (0xee18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 07:54:29 2024 GMT
Not After : Nov 30 07:54:29 2024 GMT
Subject: CN=66e54138-8731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:8d:ff:a8:56:f3:60:07:8a:89:d9:0f:3d:
b4:17:5d:4b:c1:df:1b:d7:54:04:36:01:d6:ae:ee:
6d:0d:f0:bc:be:15:51:21:91:38:f7:b4:24:da:61:
37:62:46:98:6a:ed:64:68:22:f8:16:d5:ac:ba:be:
55:bf:b6:53:41:d5:b3:68:f8:b5:de:01:a8:f7:d9:
3c:a5:19:e0:5f:5c:67:a6:c8:3b:ab:3d:8b:aa:f6:
26:58:76:0a:33:64:9e:ed:38:35:53:65:60:ad:51:
9b:19:f1:8c:e2:6d:e9:0b:02:8e:c1:d0:db:46:d5:
29:43:30:ea:66:71:fb:db:9e:90:e0:96:d0:3a:74:
fa:d8:59:6d:60:e9:69:11:3e:0a:f7:cf:b5:4b:3b:
14:61:24:15:b3:2d:4b:43:c7:47:26:64:aa:c1:66:
9b:9c:ff:61:20:60:d0:b3:61:75:b8:08:e8:bb:44:
1a:0c:27:6b:7d:9c:ce:08:83:8f:75:a3:a4:b3:54:
a8:2a:e5:43:37:56:4f:d3:cc:10:db:2b:93:69:51:
e9:b4:17:c0:85:65:ea:72:4f:02:f6:6c:c2:fc:e5:
86:2f:1c:4d:8f:c7:93:37:2a:7d:41:23:fa:5c:a3:
4f:9e:a9:67:16:12:6f:9f:d8:54:af:17:26:91:9c:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:6D:07:C1:11:31:B4:E6:A4:B0:19:B1:6B:98:43:89:F4:8E:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F14BDA726E11EFA9C14375762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:db:11:08:97:6e:7f:72:50:f7:4d:37:30:0d:fe:94:05:4b:
85:97:ed:97:c1:33:99:2d:49:f6:40:d0:a1:56:21:22:ea:49:
18:45:9a:ee:21:db:97:d3:68:c2:18:50:55:15:a3:60:e9:58:
8e:5c:e9:3e:57:61:7a:19:e5:8f:fe:6e:01:2a:0d:f6:d1:9f:
33:e9:d1:99:52:82:32:eb:b3:b3:97:6f:01:bf:39:52:db:2a:
96:58:57:4c:68:97:2d:d0:50:a0:fa:1b:74:75:3e:55:ed:81:
56:68:df:a9:9e:23:18:db:06:2c:b3:73:04:95:66:23:37:09:
d8:64:ed:35:23:b7:ba:0c:67:be:50:fd:dd:68:5e:27:0f:b1:
09:f6:a3:81:48:d2:e6:d2:9d:60:ee:c6:02:a7:2e:24:de:af:
2a:b5:b1:6b:13:18:8e:2d:1a:e2:28:cc:27:e6:2c:e3:30:9b:
5f:78:ff:ac:cd:db:80:7d:70:a0:db:54:db:9e:41:90:79:db:
6b:40:b1:ec:25:30:1f:cd:7d:7f:51:e5:02:bb:6e:58:b4:4d:
2e:d3:10:a6:7b:c0:db:80:24:61:6c:a8:c2:2f:c5:e4:ef:dc:
e8:d6:4f:d8:bd:13:9c:b1:51:b9:8a:45:64:a9:34:56:06:73:
a2:21:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:15 2024 by rpki-client on console-ams.rpki-client.org