Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C804580E71A111EFBAD3E36F762E951A.roa
File: C804580E71A111EFBAD3E36F762E951A.roa (raw, json)
Hash identifier: AXUb4s/aBS07wWgaS/bTkP1BzaN+WbiOIqLJsXYzpEw=
Subject key identifier: AC:CF:0A:6E:42:1E:CE:EB:35:E5:69:F0:B0:4C:F2:87:1B:CD:66:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C804580E71A111EFBAD3E36F762E951A.roa
Signing time: Fri 13 Sep 2024 07:28:33 +0000
ROA not before: Fri 13 Sep 2024 07:28:30 +0000
ROA not after: Sat 30 Nov 2024 07:28:30 +0000
asID: 138152
IP address blocks: 154.92.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60806 (0xed86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:28:30 2024 GMT
Not After : Nov 30 07:28:30 2024 GMT
Subject: CN=66e3e9a1-150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:84:b9:73:ce:61:9e:d2:4c:dc:81:33:25:
d0:23:7b:98:f8:02:b8:df:81:eb:5e:37:24:bf:4c:
ff:89:aa:02:c8:3b:1c:6c:77:88:50:03:87:e6:34:
91:15:83:4b:ac:12:ee:e7:92:6e:d7:e8:3d:e1:cb:
88:7d:e7:95:5a:8a:79:da:e8:d9:bf:48:16:8a:5a:
2c:c7:b6:0f:c0:26:52:10:c8:92:b8:e8:3f:62:fe:
c9:e1:a3:72:69:ff:7c:08:c0:15:7a:6d:99:61:dd:
de:89:74:62:c1:04:25:aa:28:ba:fa:e1:f7:7b:11:
3b:a1:24:ad:0e:e8:6d:92:9c:a6:84:96:0e:51:e4:
17:e9:5a:80:fc:96:36:2a:a5:87:fc:23:1f:66:54:
c9:82:4b:47:69:36:fe:59:dc:6b:57:9a:90:6b:88:
ba:5d:f5:4a:ed:34:01:af:e7:6f:ed:dd:9b:2a:90:
98:f9:8c:81:6e:83:e2:bd:df:2a:14:56:38:09:e3:
1b:4f:a2:98:37:f7:60:71:b3:42:41:53:68:c9:f3:
d5:5e:0d:c5:25:ca:39:7d:cf:49:16:1b:d9:21:ba:
21:86:58:85:1e:a2:dd:a0:14:3a:aa:13:d4:bb:2c:
37:2c:79:d1:cb:68:cf:53:46:8f:cb:19:ab:68:4a:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:0A:6E:42:1E:CE:EB:35:E5:69:F0:B0:4C:F2:87:1B:CD:66:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C804580E71A111EFBAD3E36F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.23.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7a:c0:86:5a:b6:a7:e2:89:33:2f:77:4e:38:33:83:ca:9c:
29:04:e2:7f:9f:e1:ae:ca:b1:f4:5e:4d:c5:48:46:a0:df:99:
42:a4:26:fb:9a:aa:2d:a8:5c:dd:5a:12:87:83:8f:f9:a7:51:
f3:cc:e4:18:d8:6d:bd:17:a1:ae:a2:d4:34:30:74:a6:92:88:
56:b4:f9:32:93:6e:b7:e3:88:ee:0c:3f:61:e7:e9:18:ce:3c:
0a:29:d2:ba:6a:d0:12:5e:88:77:f6:53:47:f2:2d:48:40:38:
7f:a1:f0:a9:87:16:16:6b:2b:28:d6:98:d1:20:ec:d2:68:01:
7e:76:fc:34:24:cb:7e:9d:46:fb:21:79:b4:35:10:18:91:4e:
dd:fe:45:af:73:85:6d:87:fb:8e:76:4f:ba:d0:a4:b9:92:1d:
02:33:c4:fc:1d:39:cc:03:a0:49:57:71:48:9e:b2:02:dc:0e:
63:3b:a1:c1:32:04:67:9e:9d:37:26:de:40:69:ed:14:ae:87:
6a:88:70:8e:72:ce:55:ee:83:24:2e:9a:56:2f:f2:1a:48:13:
69:3d:f1:7c:dd:63:0f:a0:07:5a:6d:9f:9c:92:ed:e5:54:40:
e8:33:4a:0c:bb:7b:05:75:3d:a5:38:d3:83:4f:6c:9f:b9:c7:
52:ee:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:27 2024 by rpki-client on console-ams.rpki-client.org