Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE1813A92B611EFA61A11B6762E951A.roa
File: 1EE1813A92B611EFA61A11B6762E951A.roa (raw, json)
Hash identifier: eXTECod+VAelTv+NM2YA2uAEZRAGAUeYvpcqWKhPCY8=
Subject key identifier: 39:5B:16:5F:2E:EE:08:14:EA:2F:FC:53:47:63:0A:6E:FC:62:32:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE1813A92B611EFA61A11B6762E951A.roa
Signing time: Fri 25 Oct 2024 09:47:17 +0000
ROA not before: Fri 25 Oct 2024 09:47:13 +0000
ROA not after: Sun 01 Dec 2024 09:47:13 +0000
asID: 202656
IP address blocks: 154.221.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66046 (0x101fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:47:13 2024 GMT
Not After : Dec 1 09:47:13 2024 GMT
Subject: CN=671b6925-e6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:87:b4:3f:8b:d3:f1:e7:d4:6f:41:09:1b:
61:0c:9b:6c:a4:dc:e6:fa:b4:96:83:b1:1d:f1:a9:
81:08:26:10:48:b4:2f:cc:48:b0:1c:4f:b1:5d:a5:
ed:9c:3d:17:36:b4:76:6d:c1:1b:03:cc:00:10:22:
35:48:25:67:5e:c9:d6:5e:b7:85:a0:9a:37:20:e3:
ec:80:ba:cf:4f:0e:67:6c:52:d1:8a:eb:5e:fe:81:
80:b0:2d:35:40:e7:56:01:ed:31:c9:a1:4f:cc:34:
f7:b1:4c:07:d3:07:55:35:16:4c:d7:ec:bf:c5:7d:
b9:5d:c4:41:91:a5:38:10:50:18:c4:06:3a:cf:89:
4b:df:ab:e2:af:3f:62:be:7a:43:85:b1:a1:52:51:
99:d6:e4:98:3c:92:20:bc:0f:96:7f:ea:1a:f2:c6:
b6:68:62:be:bd:0e:9e:dd:17:9c:69:31:e9:f0:48:
bb:61:0f:5f:ef:b4:3a:32:f8:33:cb:77:22:95:6d:
d6:8a:a8:c3:35:16:ca:61:f1:8f:0c:62:19:d6:ab:
8b:1e:44:07:54:e8:8d:8b:9c:44:e1:ad:d3:5d:00:
1f:8e:74:8a:68:d1:32:61:09:c0:46:c1:d5:1b:0d:
29:bf:2f:59:5d:a1:ef:da:95:91:fb:b4:f7:e1:93:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:16:5F:2E:EE:08:14:EA:2F:FC:53:47:63:0A:6E:FC:62:32:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EE1813A92B611EFA61A11B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:29:c7:c5:67:e0:30:08:2f:2f:5d:28:2e:68:d3:ee:43:66:
0c:a3:22:7b:d4:f5:86:43:eb:be:fd:f8:83:4b:ed:40:2c:c0:
ff:19:39:1c:af:72:02:58:df:90:07:b7:b6:10:3c:ca:74:24:
53:c2:ab:f6:21:45:e6:76:92:8c:2b:81:04:6d:dc:fe:34:d8:
37:71:62:30:74:31:ce:ac:66:7d:86:ab:43:4f:8a:02:15:cd:
bb:12:8e:41:2c:6e:76:1a:2e:13:21:45:02:a1:c0:3b:2e:d7:
9b:74:b3:b0:82:ea:e5:63:79:c8:b0:10:14:41:0b:4c:bc:05:
f7:b5:34:cf:df:60:73:e9:4e:fb:30:72:af:c2:a9:b0:03:ae:
1a:1d:d8:69:db:b2:4f:b3:d0:df:50:70:6f:b2:a4:df:f0:e7:
e2:2e:4f:66:6e:fd:99:5d:5e:6f:da:af:81:6b:04:d3:9e:36:
f3:1b:42:fa:78:b1:51:09:1f:16:14:e7:e5:ad:e9:b6:3e:d6:
b3:cb:27:99:23:68:55:ae:c8:fe:da:7e:92:2a:9a:fd:99:f8:
39:3e:e0:42:ac:da:6b:45:84:04:45:ba:3d:99:b8:e5:3b:96:
4a:40:99:f3:23:80:c9:0a:6d:42:95:33:f7:e5:8d:62:c3:8f:
13:ee:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:59 2024 by rpki-client on console-ams.rpki-client.org