Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8BEEE9B5D11EF8EEC584B762E951A.roa
File: CEA8BEEE9B5D11EF8EEC584B762E951A.roa (raw, json)
Hash identifier: 1nl2rZ3W9RMv1HPxrU8geRDhERO5q6QA/p9ds3rCgIs=
Subject key identifier: 7F:EC:D1:27:FD:1F:B8:C6:F3:C3:28:DB:77:F4:C4:B0:BA:F7:DF:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01078F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8BEEE9B5D11EF8EEC584B762E951A.roa
Signing time: Tue 05 Nov 2024 10:07:47 +0000
ROA not before: Tue 05 Nov 2024 10:07:44 +0000
ROA not after: Mon 13 Jan 2025 10:07:44 +0000
asID: 7018
IP address blocks: 154.83.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67471 (0x1078f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 10:07:44 2024 GMT
Not After : Jan 13 10:07:44 2025 GMT
Subject: CN=6729ee73-2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:16:ed:37:68:cb:47:ad:d8:00:70:e8:8f:
af:bc:4d:ff:e0:bd:09:4a:a8:05:cb:94:05:58:d3:
85:5b:dc:ed:16:03:6f:58:14:85:a4:06:2d:05:da:
7f:e9:96:9c:d3:cc:54:88:86:28:df:f9:26:1a:4b:
db:df:fd:31:ed:03:33:56:4f:85:8f:3b:6f:75:09:
4f:0c:23:a3:77:17:b6:6d:10:ab:cb:e2:92:e6:53:
ff:cc:5f:d2:ce:df:37:28:68:ef:76:34:38:73:0d:
96:32:75:bc:59:de:0d:b7:aa:be:a2:54:33:7c:84:
d3:68:d3:6e:40:ba:a6:b3:68:93:ec:4a:fb:e4:96:
eb:2b:f4:0c:49:9d:ac:00:ff:9d:2a:f0:09:fb:e4:
88:91:da:4b:be:74:f3:ae:06:f3:bb:75:98:4a:35:
bd:c6:0c:d4:d9:32:db:33:06:ac:35:a4:3f:40:29:
d2:be:8b:b3:31:86:cc:d0:cd:9e:29:68:80:8e:04:
c1:50:dc:0d:a2:47:63:28:e5:c4:58:c2:ba:ab:fd:
d9:da:22:f4:52:db:11:3a:b8:91:ac:a7:c2:54:8b:
e5:ec:2c:ba:5e:68:61:62:d2:c0:e5:c9:ed:93:29:
13:1c:9c:6d:7e:d0:b6:4c:6d:05:b0:9c:6f:d3:76:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:D1:27:FD:1F:B8:C6:F3:C3:28:DB:77:F4:C4:B0:BA:F7:DF:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8BEEE9B5D11EF8EEC584B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.248.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:8c:ae:17:cc:af:c9:53:47:20:1e:53:74:00:3a:3d:5d:53:
4f:07:15:85:70:4b:ca:d1:a3:cf:b8:b9:e9:da:60:c6:bf:c5:
aa:04:fc:9c:68:fe:56:ca:4a:45:6c:02:37:40:65:b9:b4:c3:
63:a1:5b:5f:cb:34:1a:6b:a0:83:c7:ac:be:7f:4e:fe:a5:c3:
c8:93:96:ba:1a:e9:a8:3b:22:c4:0c:17:4b:ae:20:ca:9c:b0:
00:53:96:0c:29:12:66:0f:db:b3:de:63:c8:14:76:03:73:14:
94:79:27:03:75:a1:db:7a:99:95:1c:49:23:f0:10:7a:82:1b:
ce:bd:66:27:f7:29:ec:4c:24:25:e1:84:a5:67:f9:12:a5:b5:
f1:aa:3a:c5:8a:35:5b:6f:df:3a:92:fe:b2:13:b5:ff:f2:94:
fc:d4:80:eb:c4:0d:3a:16:26:15:5d:b7:43:96:ee:c4:ad:28:
ad:51:aa:19:93:c5:8d:4d:3e:e0:5a:03:7b:12:3d:b8:e1:73:
2f:ad:01:07:97:18:f8:96:40:e1:6d:7a:17:8e:1f:c0:cf:7b:
f6:bf:a7:6f:0a:27:4e:7e:4f:d7:7e:70:36:44:fe:56:f1:2f:
91:df:74:f7:0d:7e:34:20:29:13:46:2f:e6:57:ec:99:0a:5c:
fe:a6:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:21 2024 by rpki-client on console-fra.rpki-client.org