Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0902DA2A8E311EFAAD9CB8F762E951A.roa
File: E0902DA2A8E311EFAAD9CB8F762E951A.roa (raw, json)
Hash identifier: y7/5aK2Bxr84Fuj9Kou4Ebc8g3QA6e6h0JTnXZ+wEtI=
Subject key identifier: B8:31:0F:4F:A0:DD:20:48:52:37:23:71:C2:74:51:D4:05:E8:BE:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0902DA2A8E311EFAAD9CB8F762E951A.roa
Signing time: Fri 22 Nov 2024 15:10:15 +0000
ROA not before: Fri 22 Nov 2024 15:10:11 +0000
ROA not after: Tue 03 Dec 2024 15:10:11 +0000
asID: 62240
IP address blocks: 154.194.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69813 (0x110b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:10:11 2024 GMT
Not After : Dec 3 15:10:11 2024 GMT
Subject: CN=67409ed7-bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:5a:47:49:10:3c:71:83:95:01:22:a8:37:
60:9f:00:61:d5:6c:b2:59:b6:8f:3e:c2:c4:f7:9e:
ee:63:f6:a0:eb:14:60:63:67:40:8e:b5:fd:c1:f9:
4d:48:9d:d8:b7:f5:f3:03:ef:e8:cc:69:14:7f:9c:
ec:c7:ef:86:4e:95:6f:3f:ff:38:af:94:78:f0:bc:
7f:12:7a:a3:8f:38:48:d0:2f:97:b5:84:c7:c1:f3:
23:50:27:15:de:ae:ad:21:c6:a0:5a:0d:75:27:90:
98:7d:d8:8c:08:e5:cc:a8:60:ba:22:e1:86:f4:4d:
5e:23:37:4a:c6:26:2c:1a:5e:d2:bf:31:e8:7f:8e:
e5:b2:e0:f7:b8:30:20:bb:01:6c:32:02:50:99:12:
5b:90:95:46:0a:ca:9f:95:54:ff:6a:20:da:31:5d:
2d:6d:ff:b3:ac:f5:14:90:52:72:db:4a:f4:a7:6f:
09:38:4b:f4:ed:bc:c4:81:9d:aa:5b:d4:e3:f1:0e:
d3:02:22:8e:ea:3d:2a:6f:82:19:ef:10:0c:18:e2:
ed:b2:e9:21:c6:9f:d9:93:55:bc:b7:34:51:21:7b:
65:96:4d:27:d1:08:cd:49:9c:59:1b:33:d4:71:48:
7f:1d:dc:a6:28:d6:b5:93:b6:58:a3:df:5e:d3:05:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:31:0F:4F:A0:DD:20:48:52:37:23:71:C2:74:51:D4:05:E8:BE:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0902DA2A8E311EFAAD9CB8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b8:02:02:0c:66:dd:5c:4e:fa:2a:d3:08:9f:f9:d7:db:26:
fc:11:46:b7:84:ca:6b:81:93:48:58:83:ab:bc:f5:ac:1c:ae:
b9:1e:e1:fd:5d:d5:06:8c:4b:c5:81:9d:4b:47:7d:32:2f:af:
e2:53:ef:63:3a:a7:c1:2c:a8:5a:11:9b:41:cd:2c:07:19:c7:
13:7f:66:c8:1b:c6:67:7f:84:dc:f0:45:05:06:e8:4f:0e:2c:
47:17:5c:14:cf:07:2a:bc:e2:be:15:14:c3:55:af:9c:c1:94:
b2:27:25:56:10:0d:a5:83:7f:bc:55:d9:23:7d:f5:71:cd:ec:
69:ec:c2:91:0b:f3:f4:14:89:a9:e7:6b:24:c5:8f:c3:f4:4b:
0a:38:fc:43:26:ee:83:c7:3a:de:1f:4c:05:c3:ff:1c:2b:b3:
82:09:cc:a6:9f:e3:9b:b0:37:c5:28:f7:f8:f8:af:96:5c:6e:
24:6f:b9:9f:80:30:53:9f:4e:8f:d7:44:dc:27:98:00:28:a0:
3a:aa:0e:98:ed:8d:83:f6:dd:44:5b:b4:85:a5:f0:da:f9:dc:
49:51:31:34:38:f0:57:51:c2:4f:98:d6:11:8d:4d:e0:d7:35:
7f:eb:57:1c:52:73:02:33:4d:71:bf:76:35:90:a5:ef:b4:59:
1b:64:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:42 2024 by rpki-client on console-ams.rpki-client.org