Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911F3A6727111EFAC61DF88762E951A.roa
File: D911F3A6727111EFAC61DF88762E951A.roa (raw, json)
Hash identifier: bDZ+EMhK+5myJCGwEmX3IWzdj1dVZ63vO9vU3aVpOhw=
Subject key identifier: 7F:2D:1E:13:79:55:FF:17:49:84:72:97:09:B2:65:AA:FF:52:1A:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EE34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911F3A6727111EFAC61DF88762E951A.roa
Signing time: Sat 14 Sep 2024 08:17:57 +0000
ROA not before: Sat 14 Sep 2024 08:17:54 +0000
ROA not after: Wed 25 Dec 2024 08:17:54 +0000
asID: 29802
IP address blocks: 154.91.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60980 (0xee34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 08:17:54 2024 GMT
Not After : Dec 25 08:17:54 2024 GMT
Subject: CN=66e546b5-039c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:b2:e0:07:27:7d:37:f0:cc:a4:bb:5d:e8:
c2:24:c8:07:22:01:d0:ea:16:b3:4d:88:ac:7b:af:
1e:b7:3c:f5:f8:70:16:02:4b:9f:8b:11:70:6d:de:
e5:b5:c2:0c:30:a5:6e:a8:84:9c:83:10:e5:fb:96:
07:3f:4a:3a:68:15:66:92:49:2b:71:59:e2:25:52:
da:bd:07:c1:4b:c8:17:14:13:3f:b8:14:9d:e9:b2:
6d:38:3f:65:1d:20:d0:d7:05:a5:9d:2b:f2:e3:65:
a5:ef:f9:3f:c1:26:5d:b3:c4:33:b9:43:46:3d:e3:
75:c0:8b:de:d8:a2:ce:ab:83:c6:4a:59:5e:b9:bf:
b8:76:1d:f4:09:98:c1:10:ce:ea:bf:03:b7:fa:7b:
8e:fd:9c:56:7c:7c:99:dc:08:84:38:b0:82:d0:e2:
08:b7:90:ce:3e:10:4f:90:05:1d:e5:a2:29:bb:01:
fc:db:63:be:6e:c3:74:7b:f9:74:06:d4:e0:58:6e:
53:33:3e:55:42:13:d8:b3:f4:42:94:84:c4:95:4e:
b3:9a:ad:19:c6:1e:bf:b0:d1:26:e5:57:0a:7c:4c:
64:92:af:fb:3b:65:d0:86:b0:8b:93:d2:af:7d:79:
d9:68:7d:12:04:f5:36:35:47:f2:df:a0:b9:30:5f:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:1E:13:79:55:FF:17:49:84:72:97:09:B2:65:AA:FF:52:1A:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D911F3A6727111EFAC61DF88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.166.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9b:31:83:74:7d:c1:23:af:85:c4:1a:61:49:82:62:90:03:
8d:cb:bf:3a:03:c2:35:1a:fd:b2:c5:2a:d7:24:13:3a:8b:83:
ef:ad:0e:30:82:64:83:93:93:35:fc:f2:9e:2f:8b:f9:10:e2:
c1:da:7c:43:00:7f:e8:d3:e4:e1:21:55:06:7b:98:fb:9c:e3:
d4:fb:62:7b:d9:cd:57:eb:21:2a:ae:ec:fe:61:32:e2:b6:1d:
f0:fa:90:2d:ff:04:b2:c2:ed:c0:9b:d5:c8:3b:5f:c6:2b:36:
c4:c5:a4:4e:ca:5c:94:00:3d:63:75:e7:34:96:63:19:54:9c:
e3:75:d7:28:e9:ab:62:2c:df:1f:86:aa:e0:c9:78:b6:03:47:
4e:f6:14:4c:56:64:53:6d:e6:6a:10:2d:02:9b:94:33:ae:f7:
cf:12:05:cc:d8:2b:53:a4:e8:35:c5:9f:61:4b:ed:00:18:55:
19:42:26:50:a4:ae:d8:7f:d4:d8:8f:6d:e7:c8:bd:37:a5:4e:
ce:5c:15:f4:eb:56:e3:6a:73:d9:09:b7:08:6b:48:8d:dd:58:
0b:56:bd:01:72:4e:98:e7:de:6f:c4:ef:42:fb:d9:9b:98:a1:
28:7a:73:e5:fc:3b:b4:9d:e7:17:17:fc:a0:ce:b8:09:91:9e:
d3:a7:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:22 2024 by rpki-client on console-fra.rpki-client.org