Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B941FC7E3811EF8CAF4B8F762E951A.roa
File: D8B941FC7E3811EF8CAF4B8F762E951A.roa (raw, json)
Hash identifier: GeFZQCfjhE4IIqY28dzNkm82OLABg5+DgArKj1OceCQ=
Subject key identifier: BB:D7:15:2E:61:49:2F:B2:D5:B1:4A:96:6A:5A:8D:06:2C:D9:84:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F47A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B941FC7E3811EF8CAF4B8F762E951A.roa
Signing time: Sun 29 Sep 2024 08:00:09 +0000
ROA not before: Sun 29 Sep 2024 08:00:05 +0000
ROA not after: Mon 30 Dec 2024 08:00:05 +0000
asID: 17561
IP address blocks: 154.85.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62586 (0xf47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 08:00:05 2024 GMT
Not After : Dec 30 08:00:05 2024 GMT
Subject: CN=66f90909-6022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:05:9c:d2:52:3f:20:c4:ba:39:f3:e4:63:
57:68:13:ba:88:cd:e7:db:18:15:1b:cd:af:a2:4f:
ca:f2:67:98:0d:4a:19:f3:f5:b0:36:30:70:11:8b:
65:b8:3a:61:fa:80:d6:69:a0:78:20:c8:52:89:a4:
08:08:f9:9a:11:8d:f5:96:bb:62:92:65:cd:4c:8b:
cd:1c:63:8b:1f:32:68:34:78:a3:a4:cb:f7:89:07:
e9:7b:a0:5f:bb:5c:44:32:0b:92:9b:17:0b:1c:90:
ea:95:a7:de:1c:b3:c4:55:74:c1:3d:16:ca:f5:f5:
6a:62:4d:04:18:4f:c1:b3:68:c6:35:0d:ff:64:28:
db:f3:a1:8c:f8:53:4c:b3:76:0d:df:aa:05:ed:cd:
60:a8:75:ee:77:fc:5d:b7:63:45:a3:91:cc:f7:54:
88:48:ea:05:b8:c2:bc:8e:12:6a:93:e9:e7:c7:c0:
62:10:9b:5d:d4:7c:9e:01:75:61:63:de:cc:64:ab:
f2:c0:46:66:98:e9:0a:30:cc:44:71:7b:dc:33:71:
d7:05:29:41:2f:17:65:cf:70:8d:5d:11:f6:c9:9b:
4c:a7:9d:c8:f9:65:6e:5c:4a:6a:0e:45:0e:47:92:
83:da:e8:ef:4c:df:4d:13:4d:91:33:2f:f1:22:70:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D7:15:2E:61:49:2F:B2:D5:B1:4A:96:6A:5A:8D:06:2C:D9:84:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8B941FC7E3811EF8CAF4B8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.99.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b8:25:50:93:44:99:72:7e:5a:a6:d3:05:b6:5f:1e:ad:34:
4a:7d:1d:f4:1f:4b:d1:be:54:a1:86:15:76:ec:0a:4e:07:64:
2f:38:44:11:fc:fb:0d:4a:a4:2e:8a:e0:db:4e:be:19:b9:5c:
06:89:5e:3f:d5:3a:35:83:f3:78:c4:e8:a5:14:22:4b:5b:05:
92:da:b8:71:a6:18:56:7c:df:7d:3f:81:29:60:a6:99:6e:96:
05:f1:cc:b6:a3:bd:cf:ed:8b:fe:15:af:5b:19:18:2a:1c:7e:
ba:3c:c2:54:35:a0:36:45:c5:0c:ff:d3:7c:92:90:4d:3d:2e:
2d:63:35:3e:8b:8d:bc:69:01:6a:ff:9d:dc:cc:e1:96:cc:06:
0a:17:c3:79:b8:bb:df:58:01:da:d4:ab:5c:b3:9c:cd:c9:71:
74:16:12:d5:62:58:a3:41:65:08:bf:ae:16:02:f4:73:1f:e3:
b9:0f:81:f1:94:a4:eb:a8:64:7e:3b:e5:74:db:c8:5a:9f:3d:
a0:2b:d9:24:0f:d2:69:7b:fc:d3:57:7e:29:48:08:45:7d:3e:
22:8a:de:30:87:bb:f8:85:98:21:ae:43:bc:50:f6:96:cf:d3:
1a:75:13:00:78:ad:ae:ea:56:3a:de:3a:6b:73:7c:8c:49:df:
87:3c:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org