Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF67B309C1911EF8A57B66F762E951A.roa
File: DEF67B309C1911EF8A57B66F762E951A.roa (raw, json)
Hash identifier: /LiXf+mZm+FZwVC8u1nMaFZcX5RJe10OhmiAH4BmspI=
Subject key identifier: 34:65:BB:EC:28:1F:C1:83:C8:24:F1:05:1E:B4:56:A3:4E:74:BC:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01084E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF67B309C1911EF8A57B66F762E951A.roa
Signing time: Wed 06 Nov 2024 08:34:00 +0000
ROA not before: Wed 06 Nov 2024 08:33:56 +0000
ROA not after: Mon 30 Dec 2024 08:33:56 +0000
asID: 138915
IP address blocks: 154.93.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67662 (0x1084e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:33:56 2024 GMT
Not After : Dec 30 08:33:56 2024 GMT
Subject: CN=672b29f8-1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:e8:c3:9a:51:bb:80:ae:9b:e8:7d:54:dd:
9f:46:04:d1:d1:36:cd:05:b9:18:b5:b4:24:4c:b8:
83:de:4d:de:67:18:49:c8:80:d7:65:6a:9a:e6:c5:
9c:c4:55:07:44:aa:13:42:0a:76:8a:e6:a1:47:73:
f2:a2:d5:af:0b:22:3f:88:0d:11:d0:d1:06:76:f9:
ae:13:53:5c:10:12:72:46:1b:07:43:de:5f:a9:ba:
37:ee:a1:50:ba:43:c6:b0:7b:23:89:ba:b4:18:f1:
41:56:7a:af:29:05:dd:25:ab:33:70:28:53:5c:de:
46:7d:ec:64:1a:ba:06:c8:9d:86:06:0f:a9:85:c7:
86:83:fd:19:0f:3c:02:97:39:24:8b:91:80:95:9f:
1c:73:c1:2d:f4:d1:f8:3a:8f:6c:1d:8e:17:2f:98:
24:be:91:2f:24:be:b7:43:f3:70:3e:06:8e:c5:dc:
41:60:d8:d8:b7:53:27:10:95:e2:7c:99:1e:f5:33:
5b:90:9f:d9:0d:02:41:f4:5d:66:3b:b5:6f:ca:db:
09:76:3f:03:6c:b7:90:63:d5:15:ad:1b:26:eb:04:
a6:2b:d3:12:bb:d7:27:49:4c:01:6f:76:c4:42:a4:
ab:14:6c:f0:ae:f9:08:ec:a2:f0:03:3d:d0:1b:91:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:BB:EC:28:1F:C1:83:C8:24:F1:05:1E:B4:56:A3:4E:74:BC:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEF67B309C1911EF8A57B66F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:65:31:5d:b2:70:ac:ee:b2:63:96:99:ef:9e:79:d7:b3:b0:
22:2a:f8:2f:87:7d:7e:6b:d4:59:0c:4a:79:b1:c1:c8:ac:c3:
d0:48:cd:73:e6:8a:af:36:5d:97:23:a9:b1:1b:2f:8a:c8:88:
98:ce:fe:56:c7:ea:5b:a4:37:bb:b2:3a:33:9d:1d:10:55:a1:
22:52:a4:20:0b:84:93:e3:a7:c6:21:bb:99:90:ce:18:79:14:
94:fc:9d:b3:67:a6:38:2e:bf:b2:d6:89:cc:3c:75:39:7b:f5:
3d:68:33:ad:49:cd:f2:95:51:2c:b4:2a:46:0d:52:52:fa:63:
ca:b6:99:d5:28:4b:64:73:4a:03:47:fd:68:1f:ea:92:e3:da:
06:16:c6:92:1f:c8:1e:e2:88:3f:da:87:41:36:16:33:7a:ba:
f7:6b:58:3f:3a:0e:95:d2:24:73:46:84:2d:84:02:a9:53:e3:
d9:3e:17:cd:7e:5e:4f:ad:c4:7b:b8:89:db:57:3c:13:b3:ad:
14:bd:5f:1c:bc:d1:c3:96:8e:96:d7:99:5a:5c:e8:00:6a:8c:
ac:a8:75:e9:dc:8e:4b:96:e9:91:06:bb:1d:3f:10:2f:1f:a7:
93:c7:6f:fa:9a:ab:72:0b:60:a6:51:e3:f8:b3:bd:53:4c:30:
71:a6:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:42 2024 by rpki-client on console-ams.rpki-client.org