Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E082861892DE11EF9F92E6B1762E951A.roa
File: E082861892DE11EF9F92E6B1762E951A.roa (raw, json)
Hash identifier: k8ZUL7GKtVPSCn7O9DPWMAlEHwqYC/MBX376sSL9qTc=
Subject key identifier: 4B:BF:57:19:84:A0:AE:35:FE:E0:EE:76:CE:D1:39:30:81:39:23:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01023E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E082861892DE11EF9F92E6B1762E951A.roa
Signing time: Fri 25 Oct 2024 14:39:02 +0000
ROA not before: Fri 25 Oct 2024 14:38:55 +0000
ROA not after: Sun 01 Dec 2024 14:38:55 +0000
asID: 48031
IP address blocks: 154.222.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66110 (0x1023e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:38:55 2024 GMT
Not After : Dec 1 14:38:55 2024 GMT
Subject: CN=671bad86-78d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:18:cb:23:c1:22:46:f1:ae:d2:6c:87:99:
4a:32:20:c7:c0:e5:9a:48:02:4b:71:5f:cf:19:8f:
50:ad:df:f1:60:8c:7a:2a:72:f5:c6:b2:6f:c2:8f:
a2:cb:59:ce:82:3f:86:9d:6b:d7:ad:ee:03:49:34:
51:9e:c4:b7:3f:38:10:0a:44:3d:a7:66:55:26:60:
80:f7:73:e0:9d:7b:8e:59:04:07:e0:2c:7c:ea:05:
a5:16:bb:df:81:a9:a2:84:1f:67:bb:4a:9a:ec:24:
10:9b:52:83:43:6c:2f:f3:42:89:75:58:21:1c:23:
12:b6:21:d6:1d:67:93:41:4b:2e:ac:00:d3:77:59:
f5:1c:16:7c:28:ba:83:47:e9:77:ff:66:29:b4:a8:
f3:c9:76:8b:bd:12:77:73:0c:0e:70:c0:3b:92:78:
42:fd:2e:a1:be:8c:a3:d5:19:13:54:a9:2e:61:7f:
5c:38:01:05:c9:5f:f7:10:8c:37:44:2c:6f:a0:7d:
e8:ef:18:66:86:59:e4:03:36:a6:e1:1b:62:ec:9d:
e3:3b:32:49:22:0f:82:17:42:c0:d1:60:5d:dd:5a:
12:96:85:44:97:b8:1d:34:fc:de:b2:b5:d1:8b:1a:
7d:7d:80:19:15:e3:49:23:14:24:38:e6:56:ab:39:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:57:19:84:A0:AE:35:FE:E0:EE:76:CE:D1:39:30:81:39:23:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E082861892DE11EF9F92E6B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.208.0/23
Signature Algorithm: sha256WithRSAEncryption
17:08:d4:9d:18:82:2d:f0:d1:af:82:57:ba:d9:2f:23:e5:94:
5f:45:00:a8:ad:2c:68:66:5b:e2:eb:36:21:80:0d:02:55:26:
ad:9f:d9:7f:cd:be:a8:ed:4b:46:d4:42:8f:e7:d9:c2:2e:92:
ca:eb:48:7a:51:b2:63:4c:0b:42:3a:f3:93:6a:b8:81:15:de:
52:57:6b:0c:ec:6b:14:5a:96:18:36:d8:59:cd:38:e2:97:ec:
ab:37:91:1d:14:3a:5e:7f:e6:8b:a6:ed:81:b4:3e:28:43:8c:
45:89:00:56:c7:43:08:46:3a:23:50:53:2c:a3:b2:ca:eb:ba:
09:12:c4:79:c4:ad:9d:0f:6f:7d:c8:4c:45:70:99:79:8f:08:
79:ce:ff:4c:09:68:3c:a1:d3:c3:11:01:ab:de:3a:ce:bd:2f:
cb:2f:11:e8:a7:75:1d:e7:ff:6b:ba:fc:d3:4d:b3:e7:cb:c0:
dc:05:c8:01:8c:7c:7e:16:6c:c2:34:b8:87:2f:d5:c2:d0:70:
36:60:c6:63:3f:af:67:bd:ef:f3:47:7e:d1:7d:c9:43:a3:8b:
79:13:9a:62:e2:fd:b2:04:61:f8:28:e2:2e:aa:16:54:c8:c3:
8e:79:fa:d3:68:9b:c1:7c:95:14:83:77:23:7b:08:d1:e1:d9:
8a:5e:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:31 2024 by rpki-client on console-ams.rpki-client.org