Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F13B92F88ACB11EF950FE95C762E951A.roa
File: F13B92F88ACB11EF950FE95C762E951A.roa (raw, json)
Hash identifier: TFWVzTbQkXzHugK6gU9+2RJ3UKt/FMMYOmupP35M0tE=
Subject key identifier: 5A:70:CA:E0:A9:33:21:F9:2C:B3:F3:C9:19:1F:6F:65:B4:FC:D6:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F13B92F88ACB11EF950FE95C762E951A.roa
Signing time: Tue 15 Oct 2024 08:03:20 +0000
ROA not before: Tue 15 Oct 2024 08:03:17 +0000
ROA not after: Wed 27 Nov 2024 08:03:17 +0000
asID: 210542
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65076 (0xfe34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 08:03:17 2024 GMT
Not After : Nov 27 08:03:17 2024 GMT
Subject: CN=670e21c8-27c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:56:96:26:38:9d:d3:c1:88:78:d7:84:35:
2e:51:12:0b:a0:4f:b0:eb:d2:a1:dd:22:f9:70:41:
9a:4d:2a:42:40:51:6a:11:b1:34:aa:91:ed:c6:51:
75:37:fa:4b:be:d2:ba:b5:0c:54:12:8b:59:58:2d:
71:7c:b7:74:bb:e4:c4:18:a0:c3:63:e3:48:89:a0:
e9:66:54:20:e1:4f:90:ac:0d:e2:2a:e6:4e:e6:61:
9a:5c:d6:93:a1:61:4c:56:6a:fd:e7:41:ce:5e:a4:
92:99:fb:a2:e5:b0:c2:47:55:f1:6e:bb:c3:e2:26:
db:3a:5c:47:82:2f:cc:bf:6f:7d:86:1e:b2:e8:6d:
5f:01:a7:26:4f:ec:ae:6f:ac:a0:48:0b:95:e0:b5:
38:eb:76:c2:d2:be:4e:4f:0f:1e:66:89:a9:5c:52:
28:42:1a:0a:1e:40:26:80:1c:34:1c:87:a6:5d:de:
bf:02:a2:7b:d9:cf:04:8a:0f:ab:29:c1:10:f7:f8:
b6:c5:b9:76:0b:b8:6d:e5:20:bc:3e:7d:96:a8:72:
e3:08:32:e5:75:f7:e2:9a:54:80:3f:77:01:ca:6c:
10:5a:af:7c:ef:b5:bf:f8:02:52:5d:5f:37:45:6e:
38:ac:09:5f:d5:58:02:a0:7f:4c:9f:6b:3e:e3:45:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:CA:E0:A9:33:21:F9:2C:B3:F3:C9:19:1F:6F:65:B4:FC:D6:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F13B92F88ACB11EF950FE95C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7c:b6:7f:08:ff:14:f7:80:fa:64:2f:72:c0:af:58:49:52:
aa:94:5c:6c:93:a0:73:3e:40:b9:1f:89:f2:ce:2c:0d:e8:b7:
00:00:1d:11:46:a8:d9:7d:90:43:f7:d6:39:67:50:b1:82:0b:
1e:46:eb:a3:7f:03:a7:91:d4:44:05:b7:85:c3:17:d5:98:7c:
3b:cb:f9:3c:cf:97:a0:a2:5b:68:d2:ba:7d:b8:fa:0e:4a:92:
93:77:0c:4c:c5:c9:17:9d:08:15:b1:67:93:30:f4:20:00:5c:
4a:40:f7:6f:fc:81:23:12:8d:fd:e2:f6:94:df:f4:c8:8d:78:
24:14:1c:a0:74:00:f8:42:2b:62:ff:be:07:b5:c5:0c:b6:d7:
ab:77:d5:1a:83:e0:f6:59:4b:97:db:87:6a:de:ea:38:e2:a8:
8a:06:8b:c0:4f:27:7d:2e:83:8a:02:27:2c:aa:04:68:9e:f7:
eb:4f:3d:1b:10:0a:77:19:89:9b:0b:88:cf:1d:81:62:a1:e7:
74:70:70:82:bc:7f:49:a2:ec:a9:11:23:4b:ed:dd:10:fe:80:
0d:13:e1:7c:b0:9c:d5:79:43:f8:d1:98:15:39:fc:49:b0:d8:
bb:a6:87:21:e6:3b:e8:dd:fd:62:5d:4b:8e:dd:11:50:95:49:
ea:dd:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org