Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE389B6A7F1111EFB46B2964762E951A.roa
File: FE389B6A7F1111EFB46B2964762E951A.roa (raw, json)
Hash identifier: 8KINYwzKv5d16a/5T9C2F1SDdY237DT1FbsiehDg6Rg=
Subject key identifier: 54:D8:57:F0:E3:D4:E8:E0:6A:3F:6E:E5:BB:F0:FB:3C:B4:58:AF:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE389B6A7F1111EFB46B2964762E951A.roa
Signing time: Mon 30 Sep 2024 09:54:33 +0000
ROA not before: Mon 30 Sep 2024 09:54:29 +0000
ROA not after: Sat 30 Nov 2024 09:54:29 +0000
asID: 138915
IP address blocks: 154.93.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62930 (0xf5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:54:29 2024 GMT
Not After : Nov 30 09:54:29 2024 GMT
Subject: CN=66fa7559-cb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:f5:79:eb:d0:3a:6c:59:69:9a:03:00:f7:
d2:1b:6c:59:f0:11:f9:d7:90:2a:95:36:91:e1:b5:
3f:27:6e:41:45:0a:f4:f5:4e:8a:69:b0:f1:7d:08:
08:3c:a4:c9:f8:80:db:38:bb:64:94:83:91:fe:d2:
94:d3:d4:8e:b8:17:36:f7:1e:fc:85:34:5f:49:b7:
5d:3e:ea:30:bf:96:c9:a8:2a:96:c5:c2:d8:a8:fe:
9b:95:99:35:4b:8e:37:b4:e8:15:61:4b:7d:a6:7e:
f5:c9:65:be:bc:00:9e:29:7e:77:6a:05:36:83:fe:
ca:f3:51:76:8d:c6:28:90:71:47:34:39:77:92:cd:
9c:d3:88:58:8b:00:fd:a5:93:70:36:54:8f:54:91:
75:20:04:25:ad:50:3f:73:77:02:3a:17:5d:0d:00:
7a:3b:4d:69:cb:21:94:71:a1:93:18:ad:e9:80:bc:
f9:b5:99:04:5e:5f:0a:13:a6:4a:79:5a:98:06:f6:
54:86:a0:b3:c2:9a:3b:eb:f4:e5:ce:42:a0:78:a1:
46:b0:40:4a:85:23:2c:88:94:b0:62:be:fb:41:9e:
06:45:a3:a9:25:69:50:ac:24:02:6b:28:92:eb:36:
f4:bc:a9:61:85:72:ce:fe:c0:96:a3:6c:b0:58:2b:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:57:F0:E3:D4:E8:E0:6A:3F:6E:E5:BB:F0:FB:3C:B4:58:AF:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE389B6A7F1111EFB46B2964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:e3:c4:4d:3c:e6:d6:7c:d8:ce:e2:94:b1:75:f5:61:16:7a:
ad:7e:bd:af:93:ad:f5:72:68:81:9f:6d:e8:8e:c6:ef:9c:89:
2f:93:b9:06:cc:45:b4:81:60:78:13:21:73:78:3e:9f:43:4a:
6f:44:cc:27:6b:b3:8c:db:12:42:d3:97:d9:26:2a:cc:ce:f1:
f9:5d:e5:5d:2f:7c:3b:86:e9:b4:41:18:92:a2:2b:48:8b:c2:
fd:82:46:6c:36:ea:de:57:62:6b:e7:21:99:4a:c5:5a:fa:f2:
39:ff:61:33:91:3d:f1:5c:5e:82:62:76:a8:84:64:1f:56:4d:
22:cb:96:da:0a:af:67:36:19:08:8a:e8:fe:01:06:a7:e3:e1:
e8:05:1f:c5:e1:b8:f5:ed:5d:df:75:57:b2:93:a7:c4:56:ec:
1a:0c:1f:73:3c:45:07:be:de:bc:0e:bc:8a:d0:56:05:09:0d:
ca:52:d6:c7:bc:d7:03:a7:93:d3:e5:fb:a7:68:51:5b:a0:47:
d7:d3:9d:da:53:36:71:2a:fd:ee:4c:c5:30:c1:26:22:19:bb:
21:41:d3:10:56:22:62:10:56:66:3d:76:ba:05:d4:dd:6c:eb:
ba:b9:25:58:a3:d5:77:a8:e7:0b:14:72:cf:86:89:17:7b:65:
c5:49:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:55 2024 by rpki-client on console-fra.rpki-client.org