Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A5184CA4D011EF90FA3374762E951A.roa
File: 94A5184CA4D011EF90FA3374762E951A.roa (raw, json)
Hash identifier: zOeFvhdhxZlot+IeGJ5R2v+GQMUhZMypNcv59bKLnxw=
Subject key identifier: 79:77:E6:83:E4:7C:F8:B3:AC:A6:C6:FB:35:26:35:25:1D:A3:19:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A5184CA4D011EF90FA3374762E951A.roa
Signing time: Sun 17 Nov 2024 10:42:03 +0000
ROA not before: Sun 17 Nov 2024 10:41:59 +0000
ROA not after: Mon 25 Nov 2024 10:41:59 +0000
asID: 9009
IP address blocks: 154.92.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69298 (0x10eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:41:59 2024 GMT
Not After : Nov 25 10:41:59 2024 GMT
Subject: CN=6739c87a-d12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:17:49:11:53:b2:6f:7a:c1:77:9d:a0:c5:
da:b6:1c:e8:bb:6a:cd:ef:e9:c4:5e:a6:71:02:49:
26:8e:d4:74:6a:3c:18:27:a0:3d:44:59:e7:b7:6e:
c7:fb:16:e7:b5:b1:06:94:ed:d1:ec:0e:4c:50:d1:
a3:0f:96:a2:62:25:1c:75:19:db:43:09:10:a9:e8:
15:d7:5b:73:72:85:9a:80:35:02:cc:be:47:d0:c5:
5d:48:17:93:7f:0e:7c:c9:75:dc:dc:2f:6c:17:40:
8e:72:68:1d:ec:07:6c:b5:49:c2:b8:d7:ee:34:a3:
75:34:5a:72:1f:78:09:eb:c7:0b:12:57:e3:b6:c2:
7c:2b:da:fa:c8:2a:06:67:ec:8b:51:02:9b:c2:41:
b0:33:20:24:9c:5a:65:d5:11:9c:2b:d9:7a:d9:83:
e7:79:c5:ea:13:a9:cc:93:0e:35:eb:3a:1a:ee:88:
cc:0c:d9:55:77:55:09:3a:3e:5d:d8:92:7d:32:8a:
5a:07:15:75:49:1d:d8:00:f2:e2:73:46:f1:69:99:
2b:34:26:1b:b4:71:e4:0d:d5:34:ba:75:f1:1e:17:
ab:37:ab:34:24:98:2d:4e:26:29:a1:0f:55:01:41:
52:53:2e:3d:7d:4b:79:24:29:8d:56:8d:bf:6e:4c:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:E6:83:E4:7C:F8:B3:AC:A6:C6:FB:35:26:35:25:1D:A3:19:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94A5184CA4D011EF90FA3374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7b:9f:0d:d5:c6:a9:4b:9a:17:17:e9:3c:0f:16:6f:9a:30:
79:7c:c9:8a:4d:72:f9:bc:54:06:8f:a8:51:84:a7:0a:2b:58:
e3:ba:fd:bb:8c:38:3c:9b:19:18:98:51:d0:ec:3a:db:7e:0b:
7f:5c:db:8f:32:43:07:0e:4b:0f:fa:87:31:3a:35:5a:9e:1d:
0e:1f:1b:a8:82:ea:1b:8e:84:44:08:e3:6d:e7:bc:4e:43:2a:
57:46:7a:45:d8:ae:d0:01:85:28:e0:4f:ec:0a:0d:39:d7:60:
0e:31:ed:11:03:48:61:33:0d:d1:36:71:78:f8:48:b6:2e:9b:
14:13:6b:1b:ef:33:f2:e2:ca:88:18:87:06:de:8f:d4:d5:b3:
8e:4b:42:aa:8f:74:51:e4:a6:64:52:8f:97:bc:71:9c:6d:4c:
ce:8e:5d:84:44:6c:1e:4e:87:4f:14:08:7d:71:95:76:4e:ab:
27:a2:5f:c7:25:c0:70:22:cd:a7:8d:91:53:d3:56:9c:4b:39:
78:06:8f:36:60:71:a3:7d:f8:da:ec:2c:7a:dc:54:0a:22:83:
c0:43:2f:c3:c3:b4:de:a9:c0:dc:a9:62:19:bf:f8:d1:3a:4d:
4e:55:93:c1:02:8e:32:17:c2:3b:dd:76:4c:c9:26:45:5f:c5:
18:ef:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:57 2024 by rpki-client on console-fra.rpki-client.org