Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C466B07F1111EF8A1C1262762E951A.roa
File: B1C466B07F1111EF8A1C1262762E951A.roa (raw, json)
Hash identifier: qHLZxPvgWzT/ooYUa3HSgGme11Qpk7VTitrlwHBq/Ss=
Subject key identifier: 79:D0:32:9A:92:58:B3:3B:3D:E5:9F:BB:23:6C:2F:FA:82:6C:0D:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C466B07F1111EF8A1C1262762E951A.roa
Signing time: Mon 30 Sep 2024 09:52:25 +0000
ROA not before: Mon 30 Sep 2024 09:52:21 +0000
ROA not after: Sat 30 Nov 2024 09:52:21 +0000
asID: 63139
IP address blocks: 154.94.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62926 (0xf5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:52:21 2024 GMT
Not After : Nov 30 09:52:21 2024 GMT
Subject: CN=66fa74d8-7897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:84:da:51:07:82:ae:f4:30:6f:5d:4f:5f:
92:21:bc:62:ef:4b:ca:f1:84:fb:b9:83:34:90:18:
5c:1a:b4:c9:26:51:47:bb:7a:32:d6:c3:0a:63:c7:
43:4f:9e:2c:d2:8c:d2:46:f7:c4:a0:f8:f9:13:7b:
2f:7f:29:70:87:e5:7f:88:54:26:40:25:5a:db:38:
20:32:ee:2d:2d:e8:48:1d:5a:14:c0:48:7f:90:00:
b6:bb:7f:8f:31:26:da:4f:43:16:b1:3d:0c:e4:12:
19:d5:9e:9a:34:1b:bd:6f:91:09:a0:33:70:63:a8:
74:a0:1e:ba:c9:2b:80:dc:d1:92:8d:6c:48:9a:43:
ee:19:8b:e9:45:dc:ff:2a:36:36:c0:c3:e3:f3:a4:
64:9f:05:10:41:5d:93:90:c9:2d:18:3e:89:94:9b:
9f:09:a8:81:53:0a:cb:8f:d3:f6:00:ac:c1:82:1c:
0d:69:06:cf:0a:4a:21:af:54:f6:1d:90:0e:70:12:
22:02:56:66:f2:10:3e:ed:af:20:42:d1:75:3d:77:
f1:0c:08:cd:8f:43:3e:29:b2:62:2b:94:16:c3:28:
c2:06:fd:3e:09:ea:2c:85:9c:cf:ad:c2:53:84:b6:
c1:d2:a4:78:de:20:c2:0e:86:20:18:a8:27:54:75:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:32:9A:92:58:B3:3B:3D:E5:9F:BB:23:6C:2F:FA:82:6C:0D:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1C466B07F1111EF8A1C1262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/18
Signature Algorithm: sha256WithRSAEncryption
90:e0:7c:80:79:bd:7c:6c:6d:4c:b8:4a:54:98:80:fa:c3:46:
4d:b6:67:0d:ee:d0:04:4d:34:f1:2b:c4:69:c5:78:2f:5b:6e:
a3:63:b2:5f:f2:cf:01:3e:ac:a9:21:f1:fe:e7:60:88:fd:23:
0f:83:dc:da:63:dd:51:52:12:d5:dd:b9:48:e3:a7:cd:9d:73:
51:d2:d8:6c:38:a7:9e:de:4a:fd:9a:81:48:88:59:e7:26:ad:
40:63:c3:16:aa:ba:ab:7c:40:32:d2:68:aa:6b:f6:9a:52:ef:
31:5a:51:0e:2c:bb:a2:91:72:a2:f7:45:39:4f:4b:ec:57:db:
bb:4f:18:9a:ea:0b:35:d6:a9:2c:f4:d7:27:4a:20:a6:61:fd:
80:a3:ab:b6:d5:58:a5:c3:2c:54:c5:52:4d:34:9c:fb:71:46:
63:69:3e:52:c4:f7:dc:d3:da:79:c3:09:d3:98:72:f5:81:87:
d0:2c:27:1b:46:f1:b8:6c:91:8f:23:be:b5:26:80:71:43:7a:
54:5e:62:52:53:af:d8:b4:11:bb:62:a7:01:ba:68:da:eb:8a:
02:77:bd:13:5f:12:23:8d:c8:18:d0:76:64:c1:ab:c4:71:30:
0f:e1:5b:cc:7b:5f:8e:13:ae:b8:cf:7f:ed:26:df:15:84:1c:
6a:15:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org