Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D90C75269A9311EF9226C650762E951A.roa
File: D90C75269A9311EF9226C650762E951A.roa (raw, json)
Hash identifier: sOYXorlosOeOa/MyRH+reuBiWyA90Dq3lk+0SuGeCQ8=
Subject key identifier: FD:27:DB:4F:7A:23:F0:8F:C9:21:28:A4:25:C4:F2:A7:7A:8F:14:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01068C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D90C75269A9311EF9226C650762E951A.roa
Signing time: Mon 04 Nov 2024 10:02:07 +0000
ROA not before: Mon 04 Nov 2024 10:02:03 +0000
ROA not after: Mon 25 Nov 2024 10:02:03 +0000
asID: 44559
IP address blocks: 154.94.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67212 (0x1068c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 10:02:03 2024 GMT
Not After : Nov 25 10:02:03 2024 GMT
Subject: CN=67289b9e-acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:ad:42:23:46:4d:63:f1:38:bc:44:b3:7c:
7d:d3:ab:af:e3:be:f4:c5:65:fe:fb:0f:6e:96:5a:
78:52:06:2b:55:d3:10:21:13:e0:b3:67:32:88:9d:
ee:f0:84:4c:27:9f:8b:e1:0e:e8:5e:39:24:00:c5:
9a:71:9f:bf:b6:d9:a3:7c:98:e7:e2:5c:87:90:39:
21:84:db:28:b5:6c:b5:97:d0:f1:c2:27:95:45:5a:
14:34:47:e8:36:68:8a:45:7c:e6:f5:c2:d2:f8:ac:
7a:58:04:97:84:03:c0:cb:d4:64:cf:08:2f:f4:89:
7f:f1:33:31:b8:9a:62:e0:2a:10:95:35:50:ca:1d:
8a:f7:62:84:1c:7b:47:19:3f:a4:cd:30:88:61:b1:
db:6a:76:13:65:8a:01:aa:9a:34:df:cf:3f:d3:7e:
9b:89:af:cd:32:03:0c:1a:08:b3:67:bd:d6:5b:77:
6b:f1:10:a4:be:c1:95:ff:c7:3c:68:c4:e7:07:0d:
c5:9e:fb:28:eb:97:35:ee:f8:f0:40:d5:a5:cb:24:
2f:ca:59:b0:d9:c7:87:c3:01:55:08:67:a8:c0:06:
2d:3f:2c:34:6b:d1:b2:39:e1:ad:61:71:de:c5:e4:
cb:e0:09:c8:97:e9:d6:87:dc:46:69:f0:3e:2a:22:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:DB:4F:7A:23:F0:8F:C9:21:28:A4:25:C4:F2:A7:7A:8F:14:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D90C75269A9311EF9226C650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:83:be:72:c7:c8:95:40:25:53:07:76:5e:9c:76:a8:ba:e9:
b4:2b:69:2b:8c:ec:d7:8d:5f:ef:dc:b3:9b:66:c4:4a:df:cb:
26:5d:88:71:08:f4:d0:9c:3a:ba:4f:3b:d2:e8:74:8f:07:c2:
da:ec:d3:18:3d:2b:1b:19:f7:3b:30:5d:f1:6a:ad:37:f9:a1:
f0:57:4e:b0:ca:a9:28:bd:c7:c3:38:ae:ec:d4:05:1c:e8:0b:
fb:0c:97:0d:f9:7b:0c:d9:9b:43:fd:3f:08:38:e4:c8:14:17:
97:c9:3a:91:f7:66:89:71:3e:02:b8:0a:77:67:85:23:f4:29:
7d:77:66:9c:c4:26:74:c8:7a:b7:19:62:7d:25:89:ac:bb:7a:
77:2c:27:8f:43:9e:db:d0:5e:0d:9c:46:10:ed:38:60:a2:50:
dc:92:16:c2:67:bb:8b:24:4d:1a:ca:14:85:f7:27:13:1c:06:
dc:94:1c:30:8e:ba:a9:81:f7:14:bb:f8:e5:07:59:8d:a3:5a:
d8:6a:f6:53:e0:02:b7:45:48:ef:b6:0d:50:c0:b0:e1:66:dc:
f1:10:07:13:04:18:b2:bc:ce:52:44:0c:22:a0:b7:d1:f1:a9:
a0:3d:55:18:2a:74:c0:fc:4b:3c:91:7e:6a:69:f6:3c:be:18:
77:87:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:27 2024 by rpki-client on console-fra.rpki-client.org