Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E04E4BE725811EFA7C5F669762E951A.roa
File: 2E04E4BE725811EFA7C5F669762E951A.roa (raw, json)
Hash identifier: oI7zIsmMHvEtbf1LjZ8kK/RnCjtxJAVzqsvQYRPsqEk=
Subject key identifier: 09:2E:16:DA:60:C8:D6:68:B4:00:91:D0:0A:19:C6:99:5A:93:22:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E04E4BE725811EFA7C5F669762E951A.roa
Signing time: Sat 14 Sep 2024 05:14:13 +0000
ROA not before: Sat 14 Sep 2024 05:14:09 +0000
ROA not after: Tue 31 Dec 2024 05:14:09 +0000
asID: 17561
IP address blocks: 154.217.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60892 (0xeddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:14:09 2024 GMT
Not After : Dec 31 05:14:09 2024 GMT
Subject: CN=66e51ba5-95b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:b6:de:ff:fe:0d:7e:f2:72:4b:55:c1:59:
ba:55:3d:2f:bc:4a:ab:32:4a:31:23:11:b9:ed:97:
d6:c4:a1:43:7f:bc:7a:13:d9:4f:ad:65:e0:79:5d:
b7:28:69:59:07:f3:61:74:07:a5:85:b0:24:92:71:
6a:f7:bb:80:b0:52:7d:7f:ae:e2:6c:5e:2e:75:24:
37:06:27:6c:b8:d3:fd:9d:d7:06:42:a7:40:e1:fd:
24:85:24:87:85:13:52:f3:89:f3:02:50:72:26:d3:
bd:8e:86:eb:12:37:22:7d:75:53:87:85:ed:bf:ab:
6e:41:60:41:9f:a3:2a:78:c9:65:5d:c3:c8:81:3d:
a7:99:b9:3f:b4:c6:a0:b7:2f:e0:ba:76:84:e6:c2:
24:bb:5c:d3:f9:8f:a7:ba:a7:3c:91:d2:cb:ce:5a:
38:09:8e:ac:ce:53:24:cb:1c:22:16:d4:92:ba:9a:
1b:e5:68:55:b4:20:c2:6d:e9:6f:bb:c1:6a:34:36:
a1:7d:de:ca:21:c3:35:07:83:40:87:32:cf:d7:13:
d1:89:6a:36:a8:91:b6:60:88:e0:47:5c:33:33:0e:
90:33:c9:77:5b:e0:7e:71:ef:33:bf:82:89:ad:ca:
b2:5e:d0:3a:1d:84:c2:42:d2:1d:dc:7f:8d:c6:8a:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:16:DA:60:C8:D6:68:B4:00:91:D0:0A:19:C6:99:5A:93:22:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E04E4BE725811EFA7C5F669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.128.0/20
Signature Algorithm: sha256WithRSAEncryption
50:b2:87:b5:0e:0c:46:7b:ca:d9:71:bc:ee:a3:62:f9:90:10:
20:19:77:11:53:eb:b4:42:5a:46:65:40:32:e7:9a:52:04:37:
7c:61:2e:4f:19:ae:48:f7:5f:07:30:08:14:db:54:35:6d:ab:
91:10:c6:3a:5a:38:1b:0a:f5:19:31:f2:82:e5:c8:39:da:55:
2e:e7:36:e0:d7:45:23:28:10:41:86:4e:da:a0:12:28:5f:9b:
c5:d5:90:71:b3:6a:0d:2e:cd:8d:f1:d6:88:65:1c:fa:95:ef:
27:f9:11:d7:79:bd:9d:50:47:8b:97:35:0c:58:34:3d:41:4e:
27:2a:03:1e:8e:19:6b:4e:4e:db:10:04:48:14:7f:b4:82:1f:
0e:0e:62:62:3a:a4:1b:be:ed:3b:45:6e:d9:03:6e:de:ff:b8:
92:f7:ee:b5:f8:3e:c3:74:62:e9:bb:02:43:c2:fa:7d:e7:de:
f3:c1:e1:c4:a9:b6:e6:8e:b2:7f:87:64:8f:8b:fb:eb:6b:64:
25:2d:92:fc:1f:e0:20:8a:cc:92:42:44:e3:e7:e8:91:31:77:
4b:68:8b:51:13:6b:84:96:34:bf:33:95:3f:81:2f:f6:90:af:
12:ef:0f:f7:eb:35:86:6a:f2:5f:53:fa:cc:7a:40:40:20:fb:
8c:e7:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org