Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EAE397CA73911EFA52EF690762E951A.roa
File: 2EAE397CA73911EFA52EF690762E951A.roa (raw, json)
Hash identifier: +3zk3wOVegle8gkpLLowUtUpb7/B27XlPMsdCkdM0so=
Subject key identifier: 7D:48:F6:12:96:8C:06:21:C1:11:96:BA:03:53:AB:60:8B:41:84:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EAE397CA73911EFA52EF690762E951A.roa
Signing time: Wed 20 Nov 2024 12:15:51 +0000
ROA not before: Wed 20 Nov 2024 12:15:47 +0000
ROA not after: Tue 13 May 2025 12:15:47 +0000
asID: 137951
IP address blocks: 154.215.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69519 (0x10f8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:15:47 2024 GMT
Not After : May 13 12:15:47 2025 GMT
Subject: CN=673dd2f7-7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:78:46:43:d8:13:d0:04:ef:69:d9:bb:b0:
48:34:e1:3b:ee:1d:a3:56:5c:3c:f1:ec:56:f4:2f:
d9:99:2f:62:d3:81:f3:d9:7a:38:2f:2e:04:f3:ca:
69:ae:3f:e4:f9:79:fb:cf:6e:a8:10:5a:66:ad:42:
75:14:da:3b:8b:77:1a:96:c1:af:7e:00:14:c7:9f:
4c:9d:23:44:60:e2:ce:ca:eb:b5:58:b5:b2:c0:72:
75:94:c4:70:37:b5:11:a7:e4:01:72:2d:1b:b7:80:
89:d8:4c:45:5a:2d:6c:55:94:e7:88:0e:a2:ab:09:
14:61:40:9f:ba:d0:08:b0:8d:83:9e:8a:45:ec:66:
56:fb:80:79:8e:f3:fa:02:63:e7:8f:87:b1:d1:c9:
be:d4:44:00:c4:fd:4b:8f:71:73:5c:b2:5a:36:61:
8c:2e:d8:4e:24:ba:f3:96:4f:1e:2c:c5:0d:20:a9:
3b:ed:5a:89:e1:da:82:dd:86:51:2f:43:ed:cb:8f:
10:ad:1b:aa:31:03:0c:4d:ee:58:ac:15:a4:6a:0b:
9f:c8:ca:a3:98:30:6f:8c:d7:4a:14:a5:a4:a5:35:
59:52:d4:7e:1d:28:81:4f:94:65:df:f8:f3:a7:13:
0c:68:e3:16:e3:08:3f:fc:cb:d3:96:d1:45:ff:4d:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:F6:12:96:8C:06:21:C1:11:96:BA:03:53:AB:60:8B:41:84:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EAE397CA73911EFA52EF690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.8.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8c:db:88:9b:05:2a:ce:6f:d2:24:d0:e6:33:b7:fc:58:ef:
e6:7d:b1:e5:5c:ba:fb:fe:1c:a1:8c:e7:af:97:7f:f4:65:d7:
d0:7b:f7:ac:0d:70:e5:88:c4:01:ac:a9:49:d7:b5:88:89:31:
6c:71:fb:f9:8d:d8:06:ff:60:03:47:33:c9:55:1b:89:11:02:
bc:5f:7f:c0:2a:4e:57:a9:c5:16:74:44:15:b9:c7:1e:db:a1:
6f:55:01:3c:57:87:c1:ec:28:f2:c0:72:d7:a0:63:02:fe:84:
d9:30:a3:37:5a:d5:ad:ec:93:25:5a:1b:d6:25:39:52:91:8b:
e8:83:dd:c1:b2:e2:a4:36:09:84:88:e2:c9:1d:87:31:a4:87:
a9:78:af:43:d4:f7:bc:43:23:00:a2:e7:62:e8:8a:62:b2:24:
45:38:b4:96:12:1d:d9:30:90:2e:ea:07:2a:af:bf:c4:53:1d:
d3:8f:19:1e:05:fc:88:c0:c8:f0:00:47:e2:a8:12:51:c5:6b:
0d:d3:f2:15:33:1b:8b:20:49:b7:c5:86:21:2d:a0:a5:b5:41:
8a:9f:46:dc:15:9c:ad:b0:5e:a0:5d:c4:39:7d:f8:aa:6d:60:
6a:0c:f4:6b:30:c4:6f:c7:58:fc:b8:ac:ef:51:a0:a9:64:80:
87:4c:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org