Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62F079AA4D011EF8F922776762E951A.roa
File: E62F079AA4D011EF8F922776762E951A.roa (raw, json)
Hash identifier: 8qqTmx6c8NIDCKDqxZnNpejsAhrrj7Qfy+upMqhr3L8=
Subject key identifier: 1A:28:C9:B3:A2:3F:21:7D:09:EB:E4:EC:DA:A2:25:57:15:D2:A5:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62F079AA4D011EF8F922776762E951A.roa
Signing time: Sun 17 Nov 2024 10:44:19 +0000
ROA not before: Sun 17 Nov 2024 10:44:16 +0000
ROA not after: Mon 25 Nov 2024 10:44:16 +0000
asID: 9009
IP address blocks: 154.92.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69302 (0x10eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:44:16 2024 GMT
Not After : Nov 25 10:44:16 2024 GMT
Subject: CN=6739c903-5c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:17:00:88:2a:d3:04:da:2a:a5:bf:fb:0a:
07:a0:18:25:68:0d:1e:9f:0a:39:8e:c7:15:11:8f:
b0:ee:2c:64:3a:a3:01:46:a5:8e:2b:a3:1b:fe:ff:
a5:76:7e:0a:da:e7:fb:d9:93:16:4d:c6:63:e3:99:
75:5f:7d:25:03:e0:a1:8e:21:fa:e4:4a:e3:4f:5f:
7f:ad:5d:47:19:50:ac:92:ba:97:cc:ab:dc:82:32:
b1:fd:3a:81:bb:ac:52:0d:42:d4:d2:f4:98:23:e4:
11:c5:96:44:a6:7b:cb:e7:d5:02:16:4e:7d:51:4c:
2f:43:28:33:cf:f6:90:5d:4b:7a:46:e8:06:60:12:
12:83:81:8f:0d:f8:fd:35:dc:83:99:72:f9:a2:d2:
25:b6:ac:63:53:49:c1:8c:63:8e:48:9f:d4:9b:65:
1e:b7:8d:07:67:7a:a1:79:8d:ec:b2:40:6c:f1:c1:
e7:98:04:90:44:63:cf:16:e9:5c:ae:8a:59:20:4f:
4e:67:bc:7b:55:92:16:1c:66:f4:34:ae:8a:24:72:
8e:8b:c6:65:72:86:57:b1:76:dd:f6:c9:c1:45:1e:
25:5a:62:0e:1f:4c:85:65:89:18:46:dd:3b:06:0d:
f8:18:77:6e:34:88:3e:08:89:36:ff:5a:cb:38:e7:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:C9:B3:A2:3F:21:7D:09:EB:E4:EC:DA:A2:25:57:15:D2:A5:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E62F079AA4D011EF8F922776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e6:1c:1a:74:43:34:fc:d1:cc:6a:57:88:e3:ca:1f:ce:80:
89:9e:9e:7d:28:85:bb:c6:00:c3:da:c0:c7:e9:8f:ec:e0:c8:
fb:5f:0e:a6:31:d5:09:48:b3:b8:e5:d3:04:da:35:c4:9e:fc:
8d:4f:59:fa:bf:5d:c8:b9:2b:5b:67:4f:85:db:33:b6:79:59:
11:7c:ee:8a:c6:ef:62:3e:be:0d:cb:6b:79:84:71:29:61:2a:
9f:07:2e:96:bb:dd:fe:d8:bf:4e:9b:60:72:02:b7:75:29:5b:
48:53:76:d4:11:38:2e:47:65:ea:13:52:84:7e:3a:3c:c8:78:
53:9d:08:21:68:7c:3e:67:86:35:63:ab:be:94:25:ec:4f:e9:
2c:f4:ee:84:1c:16:e2:76:0b:c9:2b:29:0c:de:8e:ab:84:47:
dd:7b:fe:02:5a:53:0c:01:1c:bc:cc:6c:2a:f5:96:3f:98:46:
9f:88:dc:1d:5f:23:ef:59:d5:7b:ab:44:63:3a:1f:a9:65:2c:
34:44:fa:d6:6f:e1:89:46:05:a3:3b:34:a4:3c:91:bd:a8:01:
b3:8b:e4:6b:86:b4:d7:1b:c2:34:6d:5e:c4:55:2f:21:69:38:
56:a0:ab:48:9c:c8:c9:91:16:6a:b9:10:e1:c6:20:81:83:0f:
7a:4a:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:12 2024 by rpki-client on console-ams.rpki-client.org