Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2B8608487CD11EFA1063063762E951A.roa
File: B2B8608487CD11EFA1063063762E951A.roa (raw, json)
Hash identifier: V9KCiNGvuZ5igaALcTCfTf75FuUQlOxMb0fqkSHyGYA=
Subject key identifier: 94:99:D2:AE:6F:E8:CC:B7:B0:DE:BD:2F:AF:A1:83:79:56:63:C3:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FD8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2B8608487CD11EFA1063063762E951A.roa
Signing time: Fri 11 Oct 2024 12:38:21 +0000
ROA not before: Fri 11 Oct 2024 12:38:17 +0000
ROA not after: Fri 20 Dec 2024 12:38:17 +0000
asID: 142286
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64908 (0xfd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 11 12:38:17 2024 GMT
Not After : Dec 20 12:38:17 2024 GMT
Subject: CN=67091c3d-5d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:59:39:95:d0:8c:e5:cb:25:d9:dd:82:19:
b8:9c:bb:22:e1:33:cc:83:70:9e:cb:f0:e3:cf:09:
ca:33:82:c3:c9:63:85:4a:63:f2:7c:37:e7:a6:2d:
9e:a6:74:71:ee:9e:aa:8a:95:6e:09:ed:5d:a2:59:
6a:a2:0e:02:a6:2b:f9:a9:6f:2d:c5:b2:17:01:67:
db:39:8d:f1:dc:b3:1d:3c:c1:65:d8:f8:71:c4:d1:
9b:29:19:6d:6e:4c:d1:05:5e:33:1a:85:40:37:cc:
66:f5:c5:10:23:dd:3b:b5:ba:44:b8:12:8d:d5:db:
5d:57:01:25:a7:b3:ce:f8:88:8e:99:4f:da:bb:41:
ff:13:8c:6b:08:7e:35:ad:85:8b:66:17:34:52:72:
53:d2:f0:b5:3d:76:cb:3d:d1:eb:79:11:0a:41:ab:
23:b3:70:69:6c:89:e1:38:11:e8:f2:34:ab:2f:26:
29:6b:ec:f2:62:47:d2:93:fd:cd:1a:b6:ad:ee:58:
5a:7d:ff:de:81:3f:53:cf:21:06:0f:b9:b1:10:ae:
cb:8d:28:17:34:2a:ae:59:38:c8:22:f2:24:29:8d:
68:d5:66:7a:ec:f2:42:46:d0:6b:0a:42:44:6c:9c:
5e:16:84:d6:1f:87:92:df:d5:ac:de:a7:32:06:ad:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:D2:AE:6F:E8:CC:B7:B0:DE:BD:2F:AF:A1:83:79:56:63:C3:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2B8608487CD11EFA1063063762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:ae:dd:69:92:b0:0d:71:7f:de:a3:6f:6e:dd:5b:9c:5e:a6:
92:a0:4f:34:47:29:93:6b:49:74:18:ca:0d:56:6b:9e:b4:c2:
fa:aa:b5:ff:9e:ef:f4:57:21:9d:7c:58:6f:b9:ad:99:33:c3:
9d:3d:48:04:7e:73:39:f3:05:b1:09:06:2f:f7:fe:0d:93:f3:
66:d2:be:cd:4c:ce:19:38:32:4a:09:22:11:db:79:1e:39:95:
ac:9e:cb:74:b6:78:00:0e:06:8b:3a:61:b1:46:6e:e8:43:9d:
30:7b:26:d6:74:72:ed:39:1a:97:5c:29:3c:07:2f:d9:ea:2d:
5a:77:e2:68:38:bd:a1:08:77:f6:b4:0b:d9:68:51:84:7c:b0:
99:98:39:b5:34:ca:bd:0a:f1:d9:6a:b9:c6:ce:90:18:5d:e6:
35:d4:fc:15:07:76:ee:ad:72:53:85:8c:3a:d2:b8:b8:ce:1d:
b7:87:cb:70:2b:de:5f:a5:48:7f:22:ca:dd:6a:40:25:ea:b8:
ea:df:86:ea:cc:21:c7:5f:e7:67:63:ba:80:42:bd:07:b9:86:
6b:01:ca:b0:9a:3a:60:ab:a8:bd:55:56:a7:5b:c9:d2:03:ea:
a6:c0:56:92:f1:97:94:71:22:48:e3:b6:2d:e9:17:5c:07:46:
f2:d8:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:23 2024 by rpki-client on console-ams.rpki-client.org