Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEEBB5299F811EFB6E78479762E951A.roa
File: 8EEEBB5299F811EFB6E78479762E951A.roa (raw, json)
Hash identifier: OyCZqKa4R7LdIdppYZfG03ecOhcu1O30ZVK0wi2dYno=
Subject key identifier: 44:39:AF:62:9A:08:EC:80:AD:ED:8D:93:23:28:E3:67:BF:D9:21:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010667
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEEBB5299F811EFB6E78479762E951A.roa
Signing time: Sun 03 Nov 2024 15:30:30 +0000
ROA not before: Sun 03 Nov 2024 15:30:25 +0000
ROA not after: Fri 06 Dec 2024 15:30:25 +0000
asID: 134351
IP address blocks: 154.200.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67175 (0x10667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 15:30:25 2024 GMT
Not After : Dec 6 15:30:25 2024 GMT
Subject: CN=67279716-b5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:17:2c:8a:95:4e:ae:a2:0d:ec:ac:6d:b2:
6d:0c:aa:67:a4:22:55:c3:a5:22:76:8a:cf:df:b4:
02:48:11:25:16:aa:95:15:a8:d1:09:0e:da:c2:46:
2a:47:3f:62:e7:41:3e:73:02:50:d1:d7:ad:c6:5b:
25:8d:be:dc:ab:6d:31:4e:e6:4a:51:aa:ee:32:5f:
bb:a1:67:8f:ee:6b:c8:be:a4:b7:a7:15:f9:e9:69:
73:8d:c4:6c:6a:3b:b3:73:fd:62:34:b6:ba:0b:79:
2d:60:a3:49:75:82:ef:1d:ee:8c:ab:db:a5:cc:a5:
6f:a9:d8:17:51:17:64:a5:f0:b9:c6:3f:42:ad:2e:
d1:2d:5a:f6:da:de:0b:44:10:d6:a9:1f:03:83:b9:
37:fb:1a:9c:8f:1f:ac:38:4c:2c:77:e9:27:a6:b3:
d2:3b:df:ab:fa:22:84:87:7e:28:93:c9:da:f1:a8:
f5:62:0f:94:eb:94:83:39:ee:9a:66:e7:28:ab:a0:
6a:e1:0d:7a:7b:29:b5:c2:4e:d5:22:ae:11:6d:ab:
cc:f8:cd:24:77:16:f8:e9:38:0d:14:bf:cd:72:f0:
2f:36:31:8d:20:2d:3c:d0:0c:33:eb:dd:30:ac:fe:
5b:03:01:d3:72:e6:a2:1e:0c:aa:cc:4f:77:f1:38:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:AF:62:9A:08:EC:80:AD:ED:8D:93:23:28:E3:67:BF:D9:21:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EEEBB5299F811EFB6E78479762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.93.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2b:d8:0d:ab:6a:a9:50:9b:e8:b1:89:af:b1:4d:da:c6:58:
06:37:96:9e:32:c6:72:d3:07:2b:b7:99:26:e8:96:d4:02:0d:
06:2c:5b:50:20:31:ae:e3:c4:2f:4d:50:2c:8d:63:23:6c:8d:
bd:07:f0:a1:f3:4d:f0:72:5b:92:aa:0e:eb:bc:59:f1:5a:98:
85:07:86:4b:4d:22:2f:cb:7d:40:23:66:0a:26:8c:e6:ec:d8:
97:f9:72:d0:c9:ac:03:ca:b9:bc:99:ed:c4:7e:d5:77:b4:fd:
c7:34:a4:0a:f4:64:fc:9f:33:71:82:bc:01:cb:b7:f2:2c:59:
1a:22:10:66:ff:c4:4a:3d:84:a9:ea:c6:ec:f8:07:bb:da:82:
89:a8:70:38:f5:18:76:ca:f4:81:49:0d:9f:20:82:6e:2a:5c:
77:10:ba:3d:9d:cc:01:2a:92:18:83:48:c4:24:24:2d:00:47:
96:4f:ff:61:30:04:22:91:fb:d3:b6:b4:5d:f6:73:6b:71:12:
d2:4c:7e:0f:2c:07:16:15:59:f8:e3:ba:58:c0:58:ed:a8:10:
74:02:9b:ff:34:1f:94:54:96:b7:d8:10:07:8c:fd:3f:fb:d0:
9e:6c:ea:58:82:6d:c1:15:a6:81:e4:e6:d0:3a:e1:2e:63:19:
87:a8:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:16:28 2024 by rpki-client on console-fra.rpki-client.org