Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9862D2FC74CF11EF85BD6155762E951A.roa
File: 9862D2FC74CF11EF85BD6155762E951A.roa (raw, json)
Hash identifier: 0xnFlDn8+6cLQZNODeXsYTm08KBvZ4ebbLnzIexEmqc=
Subject key identifier: DA:6C:DE:A1:B3:BB:F1:27:CF:DB:37:CA:1E:F9:E3:2F:E0:C7:E5:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F012
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9862D2FC74CF11EF85BD6155762E951A.roa
Signing time: Tue 17 Sep 2024 08:34:04 +0000
ROA not before: Tue 17 Sep 2024 08:34:00 +0000
ROA not after: Sat 30 Nov 2024 08:34:00 +0000
asID: 138152
IP address blocks: 154.94.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61458 (0xf012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:34:00 2024 GMT
Not After : Nov 30 08:34:00 2024 GMT
Subject: CN=66e93efb-6754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:ec:4a:c3:54:b5:f2:dd:50:41:4c:6f:de:
e5:15:27:82:c3:d7:16:6e:1a:15:ed:9f:64:e9:79:
37:1f:e4:f9:c3:f0:cc:aa:67:63:f6:da:5a:d1:66:
03:7f:c7:1d:b7:34:96:63:a5:8b:55:61:a4:5b:28:
b4:05:f8:99:48:1a:42:83:5c:bd:4c:9b:09:b9:fc:
eb:33:e6:66:bc:66:04:71:a1:34:b2:bb:29:46:15:
eb:0f:4d:d0:ab:01:45:34:da:d8:8b:0c:2d:95:e2:
11:3c:db:65:f5:18:3b:8a:4a:34:50:71:34:41:9f:
f8:e5:b7:e4:f1:20:0a:02:ec:a0:f0:10:ef:64:21:
87:9f:53:29:90:89:40:79:21:4e:2e:f2:30:0a:51:
51:0b:8d:57:26:99:7b:b6:d0:f7:d7:bd:1d:95:40:
f6:94:17:7c:7c:27:d7:0c:5d:2f:3f:92:ba:67:13:
16:0e:71:b1:0d:02:af:89:66:c4:2e:01:dd:e1:c2:
40:ab:8e:0c:8d:c6:0d:be:0d:94:f7:6e:a6:f3:56:
a2:ce:7c:69:11:5d:0a:c3:44:64:19:25:f8:ed:15:
45:76:8c:df:4a:d9:30:ba:1c:cd:9c:b6:28:dc:bf:
4d:f5:aa:5d:30:e4:97:54:f3:4c:c0:91:83:36:97:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:DE:A1:B3:BB:F1:27:CF:DB:37:CA:1E:F9:E3:2F:E0:C7:E5:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9862D2FC74CF11EF85BD6155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.4.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b4:60:16:ac:d9:4b:40:73:81:4f:ea:cc:72:94:61:88:3f:
20:e0:96:8b:c8:38:34:d9:df:d5:cd:1c:33:d6:a1:14:98:ee:
74:6f:b1:22:72:93:f7:b1:61:ff:9e:d6:4b:97:03:c2:e9:00:
c5:76:b2:f7:96:e2:67:34:31:e1:c7:4e:f0:f2:73:13:61:ed:
82:c4:ca:52:5e:57:6c:3a:2d:db:87:ba:58:3b:89:03:be:8b:
83:a9:60:0d:86:69:b1:a0:7f:1e:a0:af:17:f7:1b:d9:cc:be:
65:2c:85:17:a6:4a:4b:5e:bf:05:bd:fe:84:ca:5d:90:86:ea:
41:1e:01:1c:5d:f0:33:3c:b2:05:12:eb:7b:d2:ef:d5:ed:9e:
7d:df:a6:79:62:9a:52:bb:15:a1:92:58:20:9a:8e:c7:38:a0:
9d:9f:f1:ed:07:ab:88:80:f4:2b:1d:6a:e4:e8:75:66:71:e4:
e7:ba:95:c0:7d:53:3c:42:e8:11:4a:46:98:1c:31:aa:0d:f3:
b0:28:5c:be:a9:d7:d2:18:69:c6:99:46:b4:b0:a0:c7:92:9a:
d5:cf:22:a4:d3:ba:25:d0:bb:0d:fb:65:f5:89:6f:12:d0:64:
e2:31:bc:f8:4b:77:90:6c:a3:0d:03:a5:90:0d:51:80:0b:74:
c1:50:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:19 2024 by rpki-client on console-ams.rpki-client.org