Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B90DF94A74CB11EFB93625BA762E951A.roa
File: B90DF94A74CB11EFB93625BA762E951A.roa (raw, json)
Hash identifier: rlLLzZ4YwL26kHv1ZZ7zOrIDohaCBtrYLX6Xq65qqQs=
Subject key identifier: AB:5F:CA:1F:E4:1D:44:D6:70:19:B7:BA:18:48:1C:E2:56:FD:0D:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B90DF94A74CB11EFB93625BA762E951A.roa
Signing time: Tue 17 Sep 2024 08:06:20 +0000
ROA not before: Tue 17 Sep 2024 08:06:17 +0000
ROA not after: Sat 30 Nov 2024 08:06:17 +0000
asID: 142403
IP address blocks: 154.221.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61410 (0xefe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:06:17 2024 GMT
Not After : Nov 30 08:06:17 2024 GMT
Subject: CN=66e9387c-ad4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:ba:c3:2b:08:01:8c:22:09:85:82:6d:32:
c5:11:34:d3:65:ae:26:b1:a1:2a:76:44:c1:6e:1d:
a5:3a:51:c8:d2:6b:1c:68:2c:00:f1:80:9e:8b:a7:
c2:d7:0a:da:26:39:60:3f:be:80:ce:70:3a:43:31:
ca:54:48:00:48:84:f6:49:a9:73:ab:d1:33:61:d9:
8d:eb:83:1c:99:93:97:c2:23:ce:88:4d:c5:d6:d7:
5d:ea:e6:92:19:f1:44:1b:85:98:2e:92:01:bf:3e:
63:64:0e:5e:62:a1:e7:5b:8f:78:c3:c6:15:03:55:
6f:44:30:65:b1:88:17:c6:67:d3:58:1f:9e:0c:2d:
1d:59:b7:cf:48:02:cd:6f:36:54:7c:5f:f6:ca:d2:
94:13:30:f9:ce:a9:5b:41:6f:a9:1c:92:3f:09:46:
cb:17:cb:9d:e0:db:c6:73:06:25:ef:e3:56:ae:5c:
f6:e7:f2:81:6d:d7:32:3d:f4:a4:05:90:42:e4:ce:
33:4b:45:ec:6b:86:bd:73:8d:82:f7:ba:d9:d6:fa:
e4:f9:19:50:8e:28:a6:88:0b:88:eb:3f:1b:e5:d8:
43:59:82:83:24:bb:4b:5d:7f:cf:ee:3b:56:8c:65:
b6:a8:4c:29:cc:ae:e8:49:39:80:34:46:fe:63:71:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:CA:1F:E4:1D:44:D6:70:19:B7:BA:18:48:1C:E2:56:FD:0D:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B90DF94A74CB11EFB93625BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.24.0/24
Signature Algorithm: sha256WithRSAEncryption
36:90:17:15:9a:1f:08:8d:eb:ab:18:0b:f6:90:53:f4:f6:ae:
37:83:d4:3b:b2:fa:fb:de:0b:a9:27:c8:8e:3b:8f:4c:fc:64:
69:32:4b:35:ef:3f:37:3e:54:2a:f0:56:5a:85:93:a6:4a:1b:
cd:fe:54:4a:1c:c4:3c:8e:1f:a3:22:71:7b:26:13:c4:8a:6b:
8c:31:a6:bc:68:1b:d7:a0:c0:34:02:f8:d3:54:2d:f0:29:a7:
04:2b:15:67:5c:11:be:a2:c1:2e:ca:aa:8c:47:53:3d:c1:c8:
4b:fb:ce:22:54:1e:85:8c:9a:c1:f3:55:e5:84:81:ea:c9:78:
c5:ee:88:3b:cb:7c:15:64:bc:d1:ce:b3:ad:59:4a:75:c4:91:
5f:f4:c3:cc:03:a3:3b:7c:76:1f:dd:17:de:54:2f:6b:83:4c:
03:fa:4b:e7:fe:d0:05:c1:32:79:52:ba:d4:56:e4:ee:1c:18:
e8:85:34:f4:f0:57:67:fb:8a:82:88:51:57:0c:db:94:39:a0:
d4:62:60:f0:f5:11:01:47:7b:f0:26:d0:f2:8b:2f:18:6f:8c:
89:2b:75:cf:52:66:cc:39:4e:d4:6d:30:66:80:45:75:c0:68:
6a:b8:3b:34:e0:72:25:4d:d8:c8:76:70:c3:9e:74:2f:10:5e:
cc:57:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org