Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD36A64C73FD11EFB43DC2AD762E951A.roa
File: DD36A64C73FD11EFB43DC2AD762E951A.roa (raw, json)
Hash identifier: 0iRAFUFk+wF681pYti+RQIbTdAk6GSEBea7fCtvYvXw=
Subject key identifier: DF:A2:67:99:6A:60:DE:1F:39:B4:A0:B1:7D:A4:CE:87:0D:E1:82:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD36A64C73FD11EFB43DC2AD762E951A.roa
Signing time: Mon 16 Sep 2024 07:32:45 +0000
ROA not before: Mon 16 Sep 2024 07:32:41 +0000
ROA not after: Sat 30 Nov 2024 07:32:41 +0000
asID: 138152
IP address blocks: 154.92.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61319 (0xef87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:32:41 2024 GMT
Not After : Nov 30 07:32:41 2024 GMT
Subject: CN=66e7df1d-a501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:f7:93:b7:df:af:84:30:13:d0:9a:b4:11:
d3:b6:a8:fc:50:ee:06:58:08:d1:6c:8b:e8:ce:f3:
98:19:91:49:78:b4:06:0f:bd:20:a0:85:ff:ed:a4:
7c:42:c8:f5:71:02:45:13:e4:91:db:c8:85:92:06:
bd:aa:87:c8:4a:b8:ee:71:37:b8:5c:fa:25:d4:d4:
b5:f4:4f:02:8c:dc:c2:d9:2c:8f:b1:39:52:86:e2:
98:f7:93:a2:3d:62:9f:b2:36:00:2b:58:9d:20:a7:
62:ea:cc:ee:e1:70:f0:b8:39:6e:8b:9f:f8:ce:1d:
79:5a:88:80:5c:d4:36:29:05:85:d0:1b:75:d7:2b:
c7:29:87:a5:9d:12:a6:83:88:5a:24:08:96:47:71:
66:d4:b1:b1:f3:66:8f:37:5a:cb:cb:8d:e1:dd:cd:
8b:68:d2:b1:9b:7d:d4:d5:7b:ad:0a:c8:f0:6e:c0:
dd:eb:c9:35:83:e5:36:7b:f4:05:c0:f6:26:8e:04:
d2:80:0b:27:52:23:07:6a:5d:08:b9:22:1a:0e:ba:
f4:69:0e:9a:93:0f:f3:68:e3:00:b8:22:52:85:42:
89:f9:1b:7a:6e:51:f6:0d:36:ed:06:1e:7a:0c:bd:
0c:a9:23:f6:61:07:3d:44:6e:25:91:28:35:73:c7:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:67:99:6A:60:DE:1F:39:B4:A0:B1:7D:A4:CE:87:0D:E1:82:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD36A64C73FD11EFB43DC2AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:4c:0d:00:66:46:10:65:a7:35:4e:ce:47:9a:ef:72:f2:64:
da:d1:ea:62:b9:e3:1b:fe:ca:41:d9:b2:ed:c2:16:3a:69:b0:
60:73:97:96:9a:a4:bb:75:a7:ec:a9:64:e6:9d:21:5d:6e:33:
a7:a6:bc:94:66:17:4b:f9:1f:60:f1:dc:17:5d:0f:a6:fe:fd:
75:a3:b6:50:0d:1e:b6:5c:c5:7d:1d:4b:db:dc:3a:5c:eb:82:
2d:9a:a7:1b:ff:a6:e6:e9:4e:69:c2:ae:4d:bc:2e:e1:2d:2e:
ba:3b:9c:bb:7d:ad:c3:50:e2:fd:2b:1b:7d:0e:5a:f9:bf:6e:
3a:8d:c2:49:df:52:8e:19:ca:ba:f5:5a:ab:68:94:d9:d9:e8:
c0:1b:93:fe:7d:cd:8e:17:bc:08:a3:f1:83:bc:97:f4:22:70:
0f:42:4c:e4:3f:1e:98:9b:27:6b:4f:63:dc:13:e1:06:23:01:
a6:10:a1:30:80:93:de:fa:be:c3:2e:93:ee:3b:d8:d8:95:c4:
d0:b9:a4:7b:7c:6a:6e:86:f9:72:ce:b1:76:4e:06:7f:3c:a7:
90:fd:11:8e:69:6a:89:71:54:97:9c:db:6e:90:7e:f3:33:f4:
d7:b0:7f:ad:8c:62:85:b4:8c:57:99:97:10:a9:76:4e:b9:25:
08:87:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:27 2024 by rpki-client on console-fra.rpki-client.org