Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B93CE28C726E11EFA7368F75762E951A.roa
File: B93CE28C726E11EFA7368F75762E951A.roa (raw, json)
Hash identifier: wVCU1z7Wgro1JNpeV42mMLg0LmzleR43k7yBhFpmsOU=
Subject key identifier: E8:64:E8:6A:51:6D:4E:95:B1:08:66:D4:8F:A4:75:0B:1F:5B:7F:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B93CE28C726E11EFA7368F75762E951A.roa
Signing time: Sat 14 Sep 2024 07:55:35 +0000
ROA not before: Sat 14 Sep 2024 07:55:32 +0000
ROA not after: Sat 30 Nov 2024 07:55:32 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60954 (0xee1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 07:55:32 2024 GMT
Not After : Nov 30 07:55:32 2024 GMT
Subject: CN=66e54177-8821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:8b:f5:b4:1e:27:3c:3e:26:14:9c:84:c6:
4c:8e:29:d7:5d:e7:f7:90:dc:c7:80:14:98:c3:9e:
2e:ac:b9:96:94:a3:ee:62:55:18:c8:dc:3e:e3:4b:
a7:af:d0:62:8b:09:64:bc:7f:17:ef:ef:ea:54:d4:
4f:4b:ef:cc:12:27:23:f7:e1:a5:a5:5f:4a:db:3c:
90:ee:a1:d9:38:19:ad:e8:35:5e:22:28:7f:80:7b:
38:ec:1d:67:17:8a:b6:6d:49:9c:5a:d2:f2:3f:86:
a6:01:c9:2b:ba:e2:81:eb:23:21:65:d1:e0:94:0a:
70:85:ac:7c:45:13:a8:f3:fa:88:47:b3:57:dd:db:
08:9c:f0:f5:3f:8e:e9:51:cc:02:cd:e2:7d:f6:8a:
0c:44:f8:44:f6:80:5f:2b:6a:31:52:0b:d3:37:20:
1c:de:13:81:56:b4:b8:5e:c4:94:38:3a:5c:91:56:
3b:5f:33:3a:8c:e2:f2:91:2f:95:84:95:99:a1:93:
7d:d4:5e:63:1f:29:e5:95:28:3b:39:7e:06:c5:80:
56:78:b6:99:fe:cc:4e:67:82:ad:ac:fb:49:57:58:
72:c9:15:b8:ba:49:da:3b:38:35:1a:29:52:85:21:
0c:58:bf:66:31:f0:a3:71:1d:55:03:44:3f:bc:c9:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:64:E8:6A:51:6D:4E:95:B1:08:66:D4:8F:A4:75:0B:1F:5B:7F:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B93CE28C726E11EFA7368F75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:15:aa:9e:e6:ed:0f:58:d0:87:3f:0e:70:f2:4d:c4:8f:3e:
a5:f7:28:67:f8:21:31:8b:32:51:7e:25:76:76:d5:f4:11:a8:
83:0d:38:3c:40:2f:47:3c:91:8f:6f:4a:7d:bc:fc:03:5d:ac:
a2:88:a6:0e:7d:87:00:44:8f:5a:5b:14:dc:27:58:2e:4d:bc:
a5:58:a2:d8:25:fe:fd:12:bb:6b:7e:07:12:cb:26:ab:87:e7:
f0:9f:0a:10:21:27:4d:ca:c6:50:8b:87:6c:13:9c:15:6b:be:
21:ed:53:e6:cc:6a:9f:45:82:dd:54:b8:af:5c:bc:10:00:d5:
7f:a4:26:34:47:16:12:2d:c5:d5:e5:c1:5d:36:46:dd:27:5a:
00:a0:60:3e:f7:88:39:58:48:a2:ce:ad:ef:ed:b3:2e:af:38:
98:04:0e:ca:ef:fe:20:d0:2b:39:53:4d:b6:be:10:c5:a2:d3:
b4:48:0e:7b:82:a2:59:d8:7a:47:bf:19:66:be:a7:e7:91:9f:
5f:f2:e2:89:8b:b5:8a:21:ed:ab:16:9b:f4:0a:d3:53:2b:dc:
ac:62:66:3d:f6:ca:75:c2:b0:4c:f0:47:82:16:1a:1a:18:9c:
98:7c:4b:81:d6:ed:e7:f2:ce:05:84:40:a3:e1:eb:74:5d:ae:
00:42:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org