Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A541906A9D1211EFBAD0B08C762E951A.roa
File: A541906A9D1211EFBAD0B08C762E951A.roa (raw, json)
Hash identifier: u81ddEkHjMiD0y7cDaLPrwnZpzS59Z9FWmq7iuoEfGs=
Subject key identifier: FE:9F:16:C1:DF:DE:F5:48:2F:55:04:85:06:CB:27:2F:51:0A:D4:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010939
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A541906A9D1211EFBAD0B08C762E951A.roa
Signing time: Thu 07 Nov 2024 14:14:48 +0000
ROA not before: Thu 07 Nov 2024 14:14:44 +0000
ROA not after: Fri 13 Jun 2025 14:14:44 +0000
asID: 139811
IP address blocks: 154.91.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67897 (0x10939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:14:44 2024 GMT
Not After : Jun 13 14:14:44 2025 GMT
Subject: CN=672ccb58-c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:ea:19:98:87:a0:2c:9b:1a:bc:58:03:0f:
fb:42:d6:2b:8e:08:4a:5d:84:7e:60:e4:d2:b8:a3:
5e:aa:fb:b6:7d:a8:11:8f:d8:c8:d5:c2:05:4f:a0:
f5:c7:af:bd:8d:b0:c5:8e:f3:72:9e:a1:1a:71:9d:
2c:9f:3c:86:c0:85:f9:d2:6d:2f:c2:2e:fa:cc:e4:
8b:be:54:32:0d:a2:ed:b4:7d:56:f3:8d:29:3d:12:
83:88:62:70:79:c8:ec:bb:c5:a2:49:8c:57:ad:a0:
c3:fc:ea:6d:26:61:fc:e4:30:1b:9e:19:b9:db:80:
90:ae:9d:bb:65:fd:b2:e5:00:67:74:4d:92:5b:38:
70:b9:89:88:16:a0:95:5f:bc:ff:8d:66:76:71:de:
b3:47:63:43:0e:f2:f3:c7:f8:33:84:7e:93:f7:05:
61:27:d9:f6:45:f1:bf:bf:13:2a:54:ee:bd:88:8d:
10:03:e8:d9:c4:46:63:a3:95:de:f7:7d:6e:15:5c:
25:dc:73:94:91:44:13:aa:af:6e:40:8f:d2:12:94:
54:14:8d:0a:31:79:3c:70:66:a8:95:2c:4d:00:66:
25:2e:6f:5f:00:f6:c9:39:ac:45:e5:12:a7:6c:ac:
d4:c6:01:10:b2:cd:de:b0:39:90:74:b5:58:b9:e6:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9F:16:C1:DF:DE:F5:48:2F:55:04:85:06:CB:27:2F:51:0A:D4:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A541906A9D1211EFBAD0B08C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:df:09:19:6e:d6:eb:8e:f0:68:7b:fd:e5:5e:0d:88:65:
e7:88:67:a9:61:5b:e1:c3:3b:a7:4a:37:77:4f:38:de:11:9d:
99:27:75:3e:80:83:74:6c:08:88:45:5f:0c:a2:b0:4f:b2:d9:
5d:d9:c6:2f:0c:30:a0:11:9d:7b:c4:48:32:2a:be:66:75:5f:
44:b3:5f:f6:28:62:1a:5e:94:20:ac:4d:cd:4b:d5:8f:06:8b:
10:fa:ba:a6:60:47:55:38:98:76:b7:32:27:a4:63:c4:f8:04:
6c:0f:ab:8a:e4:b1:13:77:0f:0c:a1:9d:e7:8e:14:60:e0:05:
f2:1d:0f:18:3f:27:b5:7e:d1:49:6d:da:53:01:b7:a2:47:93:
f2:a5:2b:b1:df:41:5c:ec:6b:2c:2f:c4:a7:96:47:9a:e5:36:
14:84:34:a0:55:fb:99:a9:8a:a4:bd:02:e2:f3:78:3f:b6:11:
9a:00:c6:66:c7:05:9c:be:42:6b:0c:30:b8:9d:cb:e1:f1:94:
70:dc:26:e7:0f:12:c7:32:57:3a:db:0a:fc:20:4f:3c:5c:99:
96:41:7a:ed:3c:35:b3:86:e6:09:99:1b:2b:42:c4:da:8a:a8:
59:9a:e9:3c:65:3f:aa:4e:35:05:f7:e5:a9:3b:29:7c:e8:bf:
a2:f6:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:18 2024 by rpki-client on console-fra.rpki-client.org