Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64B0E12A19211EF9BF6F78B762E951A.roa
File: F64B0E12A19211EF9BF6F78B762E951A.roa (raw, json)
Hash identifier: fKnePhUMiODMWK5a0rxIae2XeBvdfbkx6T8VAOPTifg=
Subject key identifier: A9:E2:19:77:14:86:68:87:16:4E:70:8C:7A:1C:77:CD:E3:EC:31:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64B0E12A19211EF9BF6F78B762E951A.roa
Signing time: Wed 13 Nov 2024 07:43:24 +0000
ROA not before: Wed 13 Nov 2024 07:43:20 +0000
ROA not after: Thu 06 Nov 2025 07:43:20 +0000
asID: 139057
IP address blocks: 154.92.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68759 (0x10c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:43:20 2024 GMT
Not After : Nov 6 07:43:20 2025 GMT
Subject: CN=6734589c-ac55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:6b:4e:9d:cc:cd:42:6a:ff:02:0a:a5:a6:
e7:af:24:e4:58:00:f3:65:bd:80:dc:90:63:dd:b6:
a8:68:69:3c:d4:92:5a:4c:93:33:8b:0c:a3:e7:c5:
18:3f:e4:58:d8:e5:98:95:fa:3b:57:36:0a:a3:c6:
bc:14:7d:30:35:3f:3c:51:8d:ea:83:dc:94:ff:dc:
a2:20:1b:83:82:51:db:f2:65:32:f4:0a:54:ce:d2:
f1:2c:bd:27:0f:2b:54:04:b4:7c:f8:3d:5a:98:b6:
35:61:c7:04:f6:b3:5e:02:97:32:04:3c:a1:fe:35:
37:8b:6f:79:d5:5b:59:bd:73:94:19:03:9b:1a:78:
b7:a1:81:61:9b:f4:9a:68:5c:6c:6d:ba:69:f3:3d:
fd:31:de:3d:61:61:89:2d:b8:b9:43:73:bc:8c:55:
68:2e:72:55:f4:9a:0a:55:98:b7:38:c4:de:ab:90:
56:60:a2:16:6e:ff:2d:33:a5:ab:72:df:ee:ff:2b:
a9:1a:f4:82:79:68:88:71:93:23:ea:85:36:45:b5:
82:f3:d1:e0:5e:ef:86:6e:7e:0e:14:11:33:e4:5f:
49:47:7d:10:77:64:fa:0d:ca:12:b8:5f:4e:76:16:
a5:4e:c4:20:00:80:4c:ba:3d:83:4f:cf:bd:ca:41:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:19:77:14:86:68:87:16:4E:70:8C:7A:1C:77:CD:E3:EC:31:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64B0E12A19211EF9BF6F78B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:be:cb:60:88:d5:3b:40:aa:45:ed:09:16:7c:8b:9a:39:8e:
a1:a3:6b:5a:80:ba:08:44:1c:0a:c5:5e:30:10:b1:ff:0b:6a:
3b:1b:76:31:9b:e8:bf:e2:9a:d6:58:b7:e3:c8:0f:2f:d2:45:
f8:da:7e:38:c0:5a:6b:c0:9a:64:d3:67:85:42:a1:f2:56:dc:
85:33:fc:b0:da:0c:cb:49:17:50:6a:f8:3e:fe:a0:1a:54:4e:
fe:20:74:0e:97:4d:6f:0f:2d:34:2b:f2:9d:f4:97:2c:bf:3b:
25:55:23:0f:e3:02:10:b1:95:d0:3e:4d:c6:8c:62:be:a9:e5:
a1:61:a2:66:09:ad:a1:db:3c:97:38:60:61:0e:92:e9:2d:fd:
85:4e:5d:cb:c1:27:19:95:2d:58:96:08:86:55:d9:fd:a9:88:
e3:77:d6:90:8d:86:3f:6a:99:f3:c8:30:04:e2:01:7b:e4:a4:
b6:43:e2:40:59:8a:5d:03:1a:a3:07:e2:fc:ff:18:87:b5:59:
22:57:f3:81:9a:fe:e5:e4:b9:15:be:e0:98:d4:bb:ea:e5:b4:
5e:2f:bb:04:65:f5:f7:d4:bd:b2:7b:f6:4b:cc:2d:0c:d5:44:
61:c5:5f:9a:51:5a:c5:48:b1:9d:fe:92:e1:17:51:66:38:48:
3c:63:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:35 2024 by rpki-client on console-ams.rpki-client.org