Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B12922A33011EFA5BC6B43762E951A.roa
File: 98B12922A33011EFA5BC6B43762E951A.roa (raw, json)
Hash identifier: Bt0Dy5Bhwqxfo/PEA2fAwxvuYsDjQyhG+nIQpRKaKas=
Subject key identifier: 23:6C:2C:CD:4A:71:22:57:E8:2D:6D:18:5C:71:1D:30:F2:BE:5C:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B12922A33011EFA5BC6B43762E951A.roa
Signing time: Fri 15 Nov 2024 09:04:19 +0000
ROA not before: Fri 15 Nov 2024 09:04:15 +0000
ROA not after: Sat 04 Apr 2026 09:04:15 +0000
asID: 55967
IP address blocks: 154.222.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68974 (0x10d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:04:15 2024 GMT
Not After : Apr 4 09:04:15 2026 GMT
Subject: CN=67370e93-4e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:ed:49:24:77:73:38:c6:7e:ca:f0:3a:6a:
41:f2:a1:dd:59:18:e9:01:02:0f:ff:12:df:ee:ca:
e5:d6:bd:dd:a5:86:31:f8:e0:95:1d:93:a7:e1:ea:
a3:bd:29:6a:97:db:b6:13:2a:a2:bf:c1:79:8d:83:
fd:54:42:dc:ff:53:24:fb:6c:15:f3:77:2d:c2:97:
90:1d:fb:4a:d6:33:7a:70:da:22:47:d1:e4:1a:d8:
c7:ea:81:a8:52:19:82:49:18:94:34:f2:b9:04:64:
31:40:ca:2d:e0:27:32:95:83:18:fc:5f:0b:4e:ac:
3a:57:71:b0:8f:bf:69:33:65:9f:79:ae:6c:a1:ca:
bd:23:d5:43:24:24:23:f0:41:92:2f:0e:f5:89:0d:
0a:06:20:38:1f:ad:28:e0:e1:6e:2f:9d:bc:19:33:
73:19:85:39:e2:d5:11:aa:15:36:9a:89:03:b1:06:
3a:01:7f:64:63:36:e3:a0:b7:53:90:e1:d2:88:c6:
76:a1:44:78:f5:ee:c6:c0:de:25:11:3a:93:bd:70:
75:e1:8d:5f:af:43:f9:4a:cf:8f:b0:d8:ab:7c:08:
7e:c4:dd:97:d4:c8:55:ba:36:ef:d5:27:6e:33:8b:
76:25:48:70:ec:7a:c6:6a:5b:9a:ed:81:69:dd:e1:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:2C:CD:4A:71:22:57:E8:2D:6D:18:5C:71:1D:30:F2:BE:5C:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B12922A33011EFA5BC6B43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ef:ca:ba:51:fd:e9:ad:8c:40:8f:10:76:14:d8:47:d3:03:
56:95:b1:48:6c:56:84:c2:1e:52:1b:70:64:12:d6:8e:81:66:
96:3c:8f:d2:16:5d:a4:18:c6:ad:1e:2b:c1:69:57:10:84:c6:
02:41:f7:1b:51:fb:7d:a1:92:6c:84:e6:0d:84:13:ec:ff:85:
4b:df:11:32:7d:c8:22:ad:13:90:25:45:df:2a:c0:fb:91:13:
25:87:c5:b9:88:56:54:53:e9:4f:7a:18:fc:de:63:3d:ea:b2:
87:3a:00:b2:cc:50:fe:30:51:3a:ac:b0:95:89:4b:64:97:49:
fd:e2:10:0b:84:1e:74:e9:0b:ee:ab:59:1f:1f:a8:92:f4:fb:
a4:45:d7:0c:5a:3d:ed:38:6d:25:e0:ef:5e:66:a8:11:02:7a:
65:3f:9d:73:f9:78:1f:6c:69:33:f1:a9:c2:18:bc:d3:ed:ea:
24:9a:9c:e0:80:79:86:91:f5:70:ca:f4:cb:3d:3f:36:bd:18:
4e:53:93:dc:11:08:88:83:f7:fc:df:37:87:a3:8a:3e:f2:39:
f5:01:d7:ff:47:2e:e7:fa:a2:7d:10:dc:e2:c8:8e:73:a6:f5:
4b:1a:ec:50:89:1d:e3:e1:92:66:05:ae:70:3a:5d:dc:b1:10:
29:f9:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:25 2024 by rpki-client on console-ams.rpki-client.org