Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF737E85B9A11EFB016FE45762E951A.roa
File: 2EF737E85B9A11EFB016FE45762E951A.roa (raw, json)
Hash identifier: WuR8ntD14TzKFJlfLcv0lr6JX+tKOnNO8M7O32LKbY4=
Subject key identifier: 22:73:22:67:FC:0B:97:22:D4:45:45:03:C6:45:2B:45:E6:40:3E:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E098
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF737E85B9A11EFB016FE45762E951A.roa
Signing time: Fri 16 Aug 2024 06:38:44 +0000
ROA not before: Fri 16 Aug 2024 06:38:41 +0000
ROA not after: Mon 24 Mar 2025 06:38:41 +0000
asID: 132513
IP address blocks: 154.84.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57496 (0xe098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 06:38:41 2024 GMT
Not After : Mar 24 06:38:41 2025 GMT
Subject: CN=66bef3f4-9bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:a8:bb:83:98:e9:5d:06:7c:ba:a8:6d:2f:
4c:80:95:48:ae:bf:c6:7f:ea:02:7f:80:8d:fc:09:
2c:d6:be:2a:5b:be:04:4d:cd:91:3d:e5:99:5e:8b:
4f:e4:ab:1b:46:9d:44:33:d4:63:46:a9:11:53:4a:
25:81:a2:d8:09:db:3d:dc:0a:66:06:ca:f1:bc:90:
cf:a2:8d:d0:8d:76:6a:99:d0:1f:f8:4a:3d:1d:54:
95:27:59:f9:01:0d:9d:1b:bf:fd:f2:bd:ee:8f:0a:
aa:35:d5:40:0d:c5:bd:16:69:d1:7d:d1:9e:1d:14:
b3:e6:5c:cb:bd:13:19:7b:c2:94:95:a5:a0:22:0c:
33:8f:0f:35:81:b5:47:5a:14:d5:16:c7:c0:c0:90:
b3:9f:90:91:b2:61:77:cb:08:6e:f1:a7:cd:9d:e8:
9b:0d:ab:ef:8b:8b:3d:61:9e:1d:13:0b:e4:13:92:
a3:7e:ed:2e:f1:9e:78:6c:86:69:9f:04:5e:f6:ac:
01:98:d4:39:e7:e3:ed:df:e4:7b:4a:26:9f:b3:61:
cd:9e:de:e6:6d:2c:06:92:41:93:09:c7:10:f0:81:
5a:6a:69:32:d3:89:d3:45:fe:bd:10:f0:12:dd:41:
8e:14:42:ab:bc:eb:23:4f:3d:63:17:61:00:c7:7a:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:22:67:FC:0B:97:22:D4:45:45:03:C6:45:2B:45:E6:40:3E:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF737E85B9A11EFB016FE45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:12:b8:3f:ae:95:f4:65:02:51:6a:f3:55:d4:81:48:16:f9:
fb:23:c5:71:e6:40:20:00:17:db:33:82:6d:f7:95:f3:79:37:
53:e2:34:8e:09:08:b4:47:a7:d9:cf:c1:6f:8e:9d:cb:23:d6:
f4:14:21:fb:12:20:e2:59:65:01:bd:0f:57:b3:65:af:62:c0:
03:9a:78:b3:10:70:dd:cc:10:12:4a:bf:70:4f:37:e1:2f:e6:
c1:e8:9e:39:ef:46:1f:9d:59:4b:43:b6:cd:e1:5f:18:55:d5:
62:3f:11:cd:ed:2f:28:90:58:55:25:b6:0b:1a:74:d2:fb:fa:
4c:3e:ec:6f:b6:d7:98:bb:49:6e:df:05:8e:98:40:b2:a3:ba:
39:49:35:e6:1b:c6:19:e6:06:04:39:62:2c:6c:4b:b6:d5:19:
23:06:f1:d1:a5:de:a3:32:91:82:67:10:6d:14:48:56:cf:9f:
85:f8:45:8d:90:ed:18:af:44:5e:64:54:f7:23:39:fa:b9:1e:
3d:c5:d9:11:8d:ce:36:b2:a0:3b:98:37:fb:5b:e8:46:f2:4d:
5a:4b:5d:90:91:bb:62:7f:19:ee:06:ea:c0:ab:fa:b3:c2:a3:
da:73:ef:aa:98:74:c8:23:e0:52:61:53:34:cd:5c:8b:38:4d:
2b:a3:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:02 2024 by rpki-client on console-ams.rpki-client.org