Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F50D446A5F11EF9A6ECB4B762E951A.roa
File: 99F50D446A5F11EF9A6ECB4B762E951A.roa (raw, json)
Hash identifier: 4z09wz6HSVQ1sakMSgjojoPU+e8/tWISaAcE8jnUbmE=
Subject key identifier: 2E:97:02:FD:E8:54:FB:14:18:22:18:37:54:7A:F3:2D:6B:81:E0:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F50D446A5F11EF9A6ECB4B762E951A.roa
Signing time: Wed 04 Sep 2024 01:47:11 +0000
ROA not before: Wed 04 Sep 2024 01:47:08 +0000
ROA not after: Mon 30 Dec 2024 01:47:08 +0000
asID: 17561
IP address blocks: 154.207.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59909 (0xea05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:47:08 2024 GMT
Not After : Dec 30 01:47:08 2024 GMT
Subject: CN=66d7bc1f-90cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:39:5a:5f:4f:f1:2f:bd:76:0b:7a:58:6c:
cf:9c:ef:8c:28:ce:41:1c:2c:77:1e:e4:4d:a1:4d:
cc:6b:3d:2d:df:2f:e9:08:fc:a0:83:7d:50:38:bd:
a7:bb:7e:58:69:d4:71:a3:1e:bf:78:47:3a:e8:27:
a2:3c:95:ea:f8:fd:3a:06:b2:27:f8:76:2a:e2:e8:
86:37:3b:7d:48:4a:6d:0d:9f:65:ae:03:81:e5:74:
68:88:20:39:18:24:0b:bc:5f:cf:2a:11:ca:d2:77:
18:45:4c:65:55:31:8d:7b:2f:12:09:c4:0a:8c:4b:
ca:8e:93:92:31:24:c5:85:02:ea:3b:ec:40:7e:d4:
17:c3:b1:75:d2:5a:9a:b5:15:fe:de:2b:d4:bd:e5:
5e:f7:67:f9:d6:90:0b:c9:48:2c:cb:29:0f:e6:e1:
09:a8:bc:69:b8:47:0e:a6:35:88:ce:68:83:40:ff:
cd:03:34:ad:11:47:bb:91:7b:9a:cf:e9:b8:67:c6:
d6:03:6c:cf:1e:14:5d:ac:f8:6a:52:68:de:67:36:
f2:8f:58:9e:f7:8d:f7:67:51:bd:54:9b:68:d6:56:
a5:22:2b:1e:24:38:c4:59:66:0f:2e:de:69:21:19:
aa:5c:81:30:14:77:9e:07:2d:f5:38:21:39:dd:12:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:02:FD:E8:54:FB:14:18:22:18:37:54:7A:F3:2D:6B:81:E0:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F50D446A5F11EF9A6ECB4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.88.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:d2:6d:ea:4f:b5:2c:25:b1:37:08:22:9e:90:e8:52:eb:1a:
8b:19:55:19:5a:df:7a:39:3b:3e:e6:64:1e:83:32:99:8c:b5:
52:f5:a1:cc:12:e9:fb:e4:4d:91:5c:5c:05:a2:e6:50:98:a1:
d2:c7:e3:12:01:6d:19:a7:54:32:58:f2:ee:74:06:57:e8:a0:
7a:4c:9d:ea:1b:e5:49:c0:57:8b:13:9b:f8:10:53:f5:37:09:
01:a0:7e:a9:53:83:da:e9:94:94:db:0d:8b:3f:c4:11:96:8f:
ac:e8:88:e2:9d:de:ec:2c:3e:a9:41:e2:49:1e:d9:b8:d9:e2:
05:cf:51:45:df:0d:2d:74:f4:61:5f:45:fe:fb:ac:18:7f:c6:
98:89:a2:58:87:b1:7d:c1:64:e1:57:a7:cf:19:38:88:c7:a4:
2d:1f:4c:e8:37:0f:88:8d:33:73:f2:0c:c3:a3:ce:f7:f5:8b:
4a:a3:30:75:07:8e:7a:dd:3a:86:f1:bd:53:d3:25:5c:63:5c:
a3:a6:40:12:f1:a7:25:4f:10:2e:5d:f4:b2:16:8c:be:d0:2e:
66:03:ef:0f:f2:ac:e9:d3:44:c2:35:da:a3:73:70:5d:49:dc:
13:5a:42:89:8f:95:33:6a:59:c4:39:40:c0:40:8b:14:8a:d5:
da:e3:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org