Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EF7986A8D811EF8730324A762E951A.roa
File: F2EF7986A8D811EF8730324A762E951A.roa (raw, json)
Hash identifier: B/lS/mo/egp8CjoVIJiQznJG7J+rCVXqcfAqkExdDwo=
Subject key identifier: 2B:ED:65:96:79:52:89:4A:2E:0D:69:40:62:50:CA:DF:D0:53:5D:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01103D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EF7986A8D811EF8730324A762E951A.roa
Signing time: Fri 22 Nov 2024 13:52:01 +0000
ROA not before: Fri 22 Nov 2024 13:51:58 +0000
ROA not after: Mon 02 Dec 2024 13:51:58 +0000
asID: 44559
IP address blocks: 154.210.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69693 (0x1103d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:51:58 2024 GMT
Not After : Dec 2 13:51:58 2024 GMT
Subject: CN=67408c81-16b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:79:f1:2a:2b:73:e7:79:15:36:08:c1:51:f6:
2d:d9:10:c6:03:87:87:a6:95:e4:2a:2a:83:0a:d8:
04:08:b7:40:e5:4e:ec:0e:fb:2e:1e:3e:8b:9e:56:
95:11:93:66:14:b3:91:9c:d5:31:61:37:31:9d:50:
b1:0a:40:09:46:53:fc:fd:4b:a0:85:62:d6:dd:0b:
20:ef:90:e7:fe:6b:bf:e0:57:d0:35:e3:28:0a:8c:
8b:ef:29:6f:e7:26:67:e4:95:ba:c4:03:d8:cc:cf:
1e:db:d1:5a:81:6e:fc:27:99:d0:8a:df:fb:5f:76:
23:1e:ff:ad:10:24:fa:03:18:4d:d2:67:59:4e:e5:
9a:bd:ef:20:3d:9f:08:8b:8b:b7:20:3e:23:c2:24:
89:a1:bf:61:3b:4f:81:83:08:75:c9:74:20:a8:94:
0b:0e:7c:c5:ba:b5:0b:4b:cb:69:8b:cc:82:86:8f:
2f:cd:ce:80:ed:90:7d:23:d1:87:1d:96:73:b1:89:
3c:e5:e1:d3:6d:ce:96:e0:87:36:3a:c2:50:d8:62:
3e:ca:f3:99:2e:c6:c0:f0:94:56:64:83:89:b0:d8:
94:43:6c:fc:f8:ba:bd:a2:f6:04:c4:28:6f:17:d4:
61:99:2a:c0:93:c6:2e:03:f6:8e:0c:60:4c:2c:34:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:65:96:79:52:89:4A:2E:0D:69:40:62:50:CA:DF:D0:53:5D:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2EF7986A8D811EF8730324A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f6:d0:66:09:a1:b2:4d:b4:3c:43:32:9b:db:7f:c4:bf:c7:
a6:e6:4f:0d:40:b3:1c:68:b4:45:47:b3:a1:5f:65:be:6a:fe:
49:c1:f9:38:38:49:90:3c:98:0c:d4:8d:55:3e:cc:46:95:1a:
4a:11:86:9a:5b:e6:b8:da:04:71:67:16:b5:f6:62:d4:f9:2b:
6d:28:e5:d5:f1:54:4d:4a:0d:c6:98:22:c6:2f:0a:b5:06:8a:
4c:8b:cf:fb:f6:9e:86:7e:37:1c:61:1e:c4:2c:61:06:2e:f4:
a9:70:2c:e0:43:47:59:b8:21:db:7c:dd:e0:26:39:1a:11:d1:
7e:c3:8c:f0:5a:bd:28:e0:f6:0b:e1:b8:03:6a:64:0e:7e:b3:
25:88:dc:cf:6b:84:c3:bb:e5:d6:5a:09:cc:f3:6a:9a:69:a1:
a8:e7:aa:6d:a2:29:d7:b2:62:69:ff:7e:9b:5d:74:ea:90:3d:
84:79:38:97:78:97:c7:79:0b:f3:10:df:74:1e:b9:14:59:d5:
7c:5b:ab:db:83:95:78:6e:26:91:8d:00:28:54:5d:30:5b:41:
d6:cc:75:d4:9d:3b:82:aa:c5:4c:5c:44:fe:e0:a3:49:d4:95:
48:20:cf:cc:20:2c:65:15:0c:e9:ac:c1:e8:0a:f1:d5:be:c4:
82:af:db:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:54 2024 by rpki-client on console-fra.rpki-client.org