Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7CC1A2A4D011EFBA8A0A76762E951A.roa
File: BD7CC1A2A4D011EFBA8A0A76762E951A.roa (raw, json)
Hash identifier: EKKzVv7SWRiJYkT789i6fy0h1qMbJghKqxaI73/8uL8=
Subject key identifier: 96:93:13:52:95:52:2F:08:34:3A:5F:12:8D:37:DB:77:9A:24:D0:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7CC1A2A4D011EFBA8A0A76762E951A.roa
Signing time: Sun 17 Nov 2024 10:43:11 +0000
ROA not before: Sun 17 Nov 2024 10:43:07 +0000
ROA not after: Mon 25 Nov 2024 10:43:07 +0000
asID: 9009
IP address blocks: 154.92.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69300 (0x10eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:43:07 2024 GMT
Not After : Nov 25 10:43:07 2024 GMT
Subject: CN=6739c8bf-2dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:5d:dd:91:a7:ec:eb:74:2f:b1:f5:c4:06:
6a:f6:69:d7:98:c2:de:c6:d4:f7:a3:fa:8d:1f:dd:
a1:c2:58:37:53:69:8e:ed:de:d5:13:dc:2b:c8:6a:
ab:32:f0:4c:fc:60:46:2f:8f:65:d6:5a:ea:98:b9:
e1:d6:92:66:67:59:c1:32:56:07:78:17:fd:de:ab:
69:ff:57:fc:09:99:b6:e0:21:b7:8e:9e:89:85:d9:
d5:9c:bd:a9:42:58:69:60:5d:18:34:53:6c:91:f2:
13:cf:04:56:2c:e6:fb:73:3e:5c:66:09:c0:39:dc:
7a:d6:c9:84:59:4b:b6:8d:50:e4:10:7a:27:bc:52:
0c:a9:3e:5b:15:82:04:b1:0c:e2:2c:0f:a0:d2:b6:
b7:47:62:1c:47:8b:a3:10:aa:22:6d:4f:5a:41:c9:
09:20:1a:cd:31:7b:93:7b:28:52:ce:07:de:a0:ff:
35:e0:fd:45:35:22:9a:77:3f:65:b4:8e:6e:5f:b1:
67:db:1f:77:b7:f3:7d:5f:ee:45:e3:0d:c0:b7:02:
99:d2:97:88:1a:20:62:a8:b1:29:6b:0d:c5:60:71:
7f:6f:df:c6:fa:33:0c:3a:64:3d:2c:23:f0:1b:cf:
0b:ea:0b:ad:38:32:79:de:3f:85:35:9c:b7:b2:37:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:13:52:95:52:2F:08:34:3A:5F:12:8D:37:DB:77:9A:24:D0:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD7CC1A2A4D011EFBA8A0A76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
43:47:41:87:71:49:81:bc:55:c8:8a:95:7f:10:bb:82:f2:61:
65:7a:fb:e3:6b:23:19:db:7f:e5:3f:ce:13:4a:c1:b5:6f:94:
22:93:84:29:7c:1d:e4:22:3d:db:3a:d4:a4:5b:8e:a9:4a:f4:
6a:af:4e:22:86:f0:f3:ce:64:9f:16:0b:b7:42:74:00:7e:c5:
07:ed:96:cb:db:ed:11:ef:e3:55:c9:65:c8:00:24:78:0a:fa:
90:e2:ac:2a:48:de:48:f0:35:c1:29:54:97:ee:d4:6e:cf:ee:
01:4f:b0:a0:0d:05:40:4a:f4:2b:e0:d7:02:7c:de:75:df:d9:
ea:43:9d:18:32:56:1f:4d:1e:0b:23:d2:84:1d:7e:64:2c:50:
0b:d6:74:d5:c0:7e:10:88:a8:27:d1:1b:d3:6a:b9:eb:f0:ac:
b8:4b:ab:60:69:d2:d4:3f:c7:3f:87:33:42:3e:a5:05:4d:76:
e4:60:70:d0:39:23:70:2a:30:f5:d0:19:2f:df:50:fd:b1:04:
ae:9b:f0:0e:ae:77:a6:b2:04:9e:f3:25:40:4c:74:0e:b8:d0:
b9:a2:52:5d:93:eb:7f:d8:18:3f:69:b4:b8:75:8b:7f:95:b3:
5f:ab:06:dd:e1:0f:e0:e0:52:3b:48:17:d6:fa:4a:4f:ce:29:
5f:c9:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:04 2024 by rpki-client on console-ams.rpki-client.org