Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60C9754A8E411EF9AB42C94762E951A.roa
File: B60C9754A8E411EF9AB42C94762E951A.roa (raw, json)
Hash identifier: TNj8QVq6uNa13U6KbjhbMU43cC3oQZlNmxl6dAJhDdA=
Subject key identifier: 2C:6F:42:0F:62:DB:20:8D:B8:0D:1E:84:A5:7F:41:6B:03:D0:36:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60C9754A8E411EF9AB42C94762E951A.roa
Signing time: Fri 22 Nov 2024 15:16:13 +0000
ROA not before: Fri 22 Nov 2024 15:16:10 +0000
ROA not after: Tue 03 Dec 2024 15:16:10 +0000
asID: 62240
IP address blocks: 154.194.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69823 (0x110bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:16:10 2024 GMT
Not After : Dec 3 15:16:10 2024 GMT
Subject: CN=6740a03d-be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:f2:84:bf:2c:76:06:2c:70:e1:81:9f:0c:
cf:15:20:52:e1:50:ca:ea:91:d0:52:42:f2:84:d9:
b5:23:7d:69:58:52:e4:02:f1:b5:df:34:bd:14:68:
38:02:46:15:a7:0f:02:48:f7:5d:e7:1b:5f:7d:66:
f8:e4:0a:51:72:79:ce:fe:15:9e:e4:de:97:85:f1:
83:a9:26:5f:0f:57:85:83:7a:38:5a:ba:4c:93:f5:
e4:b2:6e:37:b7:fb:c6:c0:16:47:1c:61:4d:fc:70:
6c:54:e3:2b:6a:58:16:94:55:77:4b:28:18:8a:ff:
66:af:8d:b2:ec:eb:81:b0:28:27:a4:97:18:43:14:
b2:0d:d9:39:74:b2:35:d6:a6:f7:cb:e2:67:e3:8c:
03:0f:f2:95:3f:d5:d6:82:c0:fc:84:ec:0a:fc:ab:
f6:28:b4:6c:d5:6c:28:b8:a9:17:43:3c:f9:90:82:
71:f4:dc:24:66:d1:a7:00:ee:bf:24:21:44:dd:29:
44:90:28:50:e7:cb:5e:90:45:9a:ad:9a:70:f1:aa:
53:28:54:34:6a:bb:e4:02:7e:22:f0:b4:50:31:6c:
ae:c6:c2:be:32:b1:e1:d2:0a:32:4b:2d:70:a1:70:
75:d2:25:73:bd:3e:ef:ad:b4:1a:59:10:b1:66:06:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:42:0F:62:DB:20:8D:B8:0D:1E:84:A5:7F:41:6B:03:D0:36:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60C9754A8E411EF9AB42C94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fe:47:7b:54:e2:09:76:cd:6c:52:10:7e:16:de:de:c3:3d:
76:b7:ac:57:e6:1f:6e:79:c3:b3:3e:83:8d:2b:bb:79:10:f2:
0b:6c:29:7b:b1:0a:ea:6b:9b:50:5d:66:00:8a:00:03:83:29:
1e:33:ec:71:f3:ae:eb:d9:53:97:b4:51:3c:34:19:75:a3:f3:
a5:87:47:2d:5d:4e:e2:22:ae:c1:13:f7:dd:53:d1:3c:14:24:
12:90:e4:fe:8d:b6:91:ea:a3:70:fa:ed:28:0a:87:a7:d2:51:
e8:c8:e9:b2:f5:f4:b1:50:67:c4:ad:e9:6a:71:97:f5:53:bb:
09:c4:95:96:28:52:85:9f:ee:5e:fc:31:5b:9b:d3:46:a1:cd:
48:fe:b2:29:ea:fb:e9:9f:e2:a8:fa:7a:fd:04:c6:d9:71:30:
16:7d:d4:90:89:a0:e7:1f:5e:82:10:de:df:14:21:f3:d2:73:
be:88:83:03:ee:a0:f0:42:9f:12:fc:8f:a6:b1:45:65:3f:25:
5c:75:0d:76:08:c6:16:72:fd:50:d7:7c:65:2a:bf:cf:49:ea:
de:d7:8d:54:63:88:51:d0:81:29:17:57:58:cb:e5:0f:e3:ee:
9b:07:ed:e2:8c:ce:88:39:a6:db:a1:4a:66:1c:d8:6e:26:78:
d4:50:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:44 2024 by rpki-client on console-fra.rpki-client.org