Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF462340A8E911EFA4252FB4762E951A.roa
File: FF462340A8E911EFA4252FB4762E951A.roa (raw, json)
Hash identifier: Mypm3MiiECznkJRumKB9G+wwQGzkdAIgJBVPTtUhO+Q=
Subject key identifier: F2:52:B5:BA:2E:AD:D5:C7:92:DB:7D:0E:01:0D:12:88:EB:B6:A3:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF462340A8E911EFA4252FB4762E951A.roa
Signing time: Fri 22 Nov 2024 15:54:03 +0000
ROA not before: Fri 22 Nov 2024 15:54:00 +0000
ROA not after: Tue 03 Dec 2024 15:54:00 +0000
asID: 8796
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69887 (0x110ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:54:00 2024 GMT
Not After : Dec 3 15:54:00 2024 GMT
Subject: CN=6740a91b-0c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:e5:88:5c:d2:47:70:fd:fb:25:66:45:22:
34:78:1c:a3:26:52:56:ce:ac:9c:ce:1b:09:88:1d:
d5:85:83:28:a2:d3:3d:0c:9c:c6:2c:37:6d:7d:2f:
a7:f6:d0:61:ec:a8:af:55:de:a1:bf:59:ab:f4:cd:
00:43:dd:34:30:08:40:a1:38:ac:9f:cd:ea:e2:c5:
57:ba:0f:19:a9:44:4b:39:3d:57:a6:84:d6:6e:16:
c2:21:fb:3f:a4:fe:20:50:16:64:31:9f:af:19:e1:
c9:cd:86:b0:92:d3:00:63:06:25:d4:c6:dd:b0:d2:
b2:7c:50:39:6a:44:56:52:50:9f:61:99:c5:13:36:
1c:bd:07:33:63:38:a0:94:a6:58:be:ed:e4:e6:e0:
30:2a:c8:75:2e:cf:8f:85:d5:94:9d:e1:af:33:31:
c7:98:b5:11:51:cb:2b:54:57:20:0c:23:03:44:12:
c7:3f:4c:8b:0a:21:6a:55:1a:1c:48:e0:52:b6:f9:
85:35:3d:53:0c:fd:bc:da:f0:ae:d7:8f:a8:0a:04:
8a:58:78:ff:c0:06:af:55:c2:fe:d7:6b:9f:ba:e7:
9b:f7:1e:90:b3:f4:9d:36:a6:12:d7:a6:56:62:3c:
39:fc:55:16:23:40:1c:90:8d:cf:e2:18:52:96:f0:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:52:B5:BA:2E:AD:D5:C7:92:DB:7D:0E:01:0D:12:88:EB:B6:A3:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF462340A8E911EFA4252FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
96:5d:26:7e:df:4a:81:ed:d5:78:d4:54:71:97:d8:4c:d2:b6:
11:40:5f:39:37:eb:7a:b8:7b:1c:b7:d7:31:b4:bc:17:2c:09:
29:9c:26:30:9b:60:19:6e:a9:8b:c4:fd:c4:50:dc:36:d5:4b:
c8:fe:07:45:46:3e:05:90:a2:6c:c9:8b:2e:f0:ff:0c:ff:85:
98:8a:b1:27:8f:cd:a5:2a:19:d1:d0:8b:68:0c:b4:f4:78:4b:
cc:58:08:34:33:6a:9d:69:f3:f2:83:5d:87:18:92:fa:e9:8a:
cb:ba:f2:71:d4:c7:06:a3:76:cd:04:91:5b:44:28:8a:eb:b4:
09:30:3d:4b:bd:93:45:40:d9:9c:4a:27:b3:fd:df:06:72:2c:
a5:59:f8:c9:2a:f7:46:ce:d8:f4:d8:1d:29:e9:a0:4f:5a:64:
b8:a3:5e:9c:f6:55:ef:c6:91:95:b5:e3:14:6e:ef:8a:fe:82:
81:24:0f:3a:04:da:e2:6a:b0:34:6e:5d:ef:8b:34:b9:28:ef:
55:05:bb:5c:b9:be:da:8f:37:dc:1e:6f:f3:1f:4f:70:f2:c2:
90:3d:60:2f:e5:22:98:82:89:7e:be:57:8b:ff:b5:56:bd:17:
1f:3e:d9:58:68:49:bc:cc:53:3a:00:d6:60:d8:ed:66:e3:34:
70:e9:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:48 2024 by rpki-client on console-ams.rpki-client.org