Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A599E1DA736811EF80D7B44C762E951A.roa
File: A599E1DA736811EF80D7B44C762E951A.roa (raw, json)
Hash identifier: 82oYQ0RmRbqpTYvxGb0c8Rk75JbThJwuy5asDzEXI6c=
Subject key identifier: 9A:09:B8:F1:81:33:B4:EC:D3:7F:CA:0F:81:0A:D9:E8:D0:38:4B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A599E1DA736811EF80D7B44C762E951A.roa
Signing time: Sun 15 Sep 2024 13:44:36 +0000
ROA not before: Sun 15 Sep 2024 13:44:33 +0000
ROA not after: Sat 30 Nov 2024 13:44:33 +0000
asID: 142403
IP address blocks: 154.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61230 (0xef2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:44:33 2024 GMT
Not After : Nov 30 13:44:33 2024 GMT
Subject: CN=66e6e4c4-abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:68:7c:b7:a0:d9:ec:11:2b:7f:ef:92:71:
29:f5:e2:f9:23:78:2a:56:b8:de:07:51:8b:a2:4b:
b7:57:f9:6f:ca:82:ca:0b:51:b5:7e:df:14:b3:3a:
3d:d4:d1:3c:38:e9:3e:94:62:ba:10:1d:d2:39:0f:
fa:86:4e:c5:c7:c7:be:aa:16:bb:40:92:c2:d9:4a:
6f:e0:ab:6a:36:39:8f:89:d3:c0:99:65:18:07:0e:
94:96:c4:f1:f4:00:a5:eb:e8:4b:7b:1f:e2:f7:89:
de:97:1f:d3:5e:d1:43:0e:fd:45:65:2b:be:55:3f:
00:a8:01:04:ec:76:16:e3:eb:9c:72:d7:4e:ec:4d:
ed:f5:50:09:2b:0a:5a:53:59:57:34:ce:9e:1b:06:
a4:e9:10:c1:02:2a:11:9a:ea:5d:05:25:cc:a3:c6:
8b:1e:3e:65:68:95:52:3f:58:d1:ef:04:65:8c:ff:
8e:58:bc:00:7b:51:87:84:b9:26:6c:07:ab:35:68:
ee:70:47:08:8d:84:f6:79:8b:78:20:cd:14:05:83:
03:3d:99:40:08:57:9a:28:66:3a:3d:a8:d8:e3:c0:
14:8e:73:0f:df:88:fc:7c:f6:2d:ba:31:46:85:bd:
a2:cb:e8:d7:e7:be:e6:e1:50:36:1e:77:da:9d:43:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:B8:F1:81:33:B4:EC:D3:7F:CA:0F:81:0A:D9:E8:D0:38:4B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A599E1DA736811EF80D7B44C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
46:54:eb:41:31:32:bc:25:89:e2:53:50:21:df:4c:7a:b5:e6:
8a:fa:73:55:95:66:e0:58:48:1a:42:35:8d:28:98:f5:69:d2:
a4:9f:c9:2b:6f:2c:1a:88:f8:8f:88:3d:8a:3b:91:ac:5e:28:
05:b1:90:52:27:ed:e4:cb:f0:9a:b4:22:4a:86:46:76:2b:19:
0d:54:f6:25:49:ee:32:96:7d:1a:ff:b0:19:99:8a:93:b3:7b:
2d:21:70:ab:f9:a1:84:77:a2:a7:53:be:68:85:96:ea:3e:c8:
a8:b7:21:92:26:45:eb:07:df:87:7f:76:c9:88:05:66:68:a6:
4a:18:82:13:fb:27:40:3c:19:54:94:d3:21:b3:79:9c:8f:19:
ba:de:34:49:32:0e:c0:5a:a8:32:63:a0:2b:a9:d1:40:5d:16:
70:f7:d9:ec:c7:e8:2e:26:06:92:1a:b5:d0:6c:8d:41:43:73:
22:86:f0:23:c2:e2:8d:47:c9:ff:6e:a3:12:20:8d:83:a2:67:
fc:bd:d0:55:62:97:08:8f:2e:88:a3:f4:b1:3d:ee:8a:b4:bf:
18:69:37:7c:43:aa:c7:e8:bf:4a:7c:99:e6:1a:90:f5:b1:3e:
36:71:49:af:de:cc:d3:88:16:9e:28:90:57:32:ff:8b:e3:17:
88:c9:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org