Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E95002A64B11EFA1E10542762E951A.roa
File: E0E95002A64B11EFA1E10542762E951A.roa (raw, json)
Hash identifier: ne6vJ7moc0aERHK5DHjX9qli16Y5ulaP4xfe9MC3QCE=
Subject key identifier: 03:19:DB:C6:BA:0B:DB:64:D6:D5:FA:62:6B:F6:F8:5D:6D:49:18:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E95002A64B11EFA1E10542762E951A.roa
Signing time: Tue 19 Nov 2024 07:57:10 +0000
ROA not before: Tue 19 Nov 2024 07:57:06 +0000
ROA not after: Sun 15 Dec 2024 07:57:06 +0000
asID: 215240
IP address blocks: 154.216.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69376 (0x10f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:57:06 2024 GMT
Not After : Dec 15 07:57:06 2024 GMT
Subject: CN=673c44d6-cc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:f8:3a:6f:07:2f:5c:24:0c:c9:47:05:ea:
3b:a4:e5:71:c7:93:a0:6e:e2:a7:e3:44:90:f2:2e:
fe:48:6b:49:ac:77:58:f0:c1:8a:4d:2c:67:f9:a0:
45:14:71:e3:9d:8a:2a:ca:da:49:4a:a6:28:6a:7c:
c0:9a:ac:5b:ec:63:e4:11:be:c8:ad:6e:4b:38:38:
25:00:06:f1:53:eb:1d:39:e1:85:f1:83:57:06:e8:
a8:0b:ce:ea:9c:a0:4a:8f:b2:56:99:fe:9b:fd:41:
b7:71:9f:df:37:b8:fa:17:f0:12:b9:8e:3a:a2:80:
62:5d:e7:88:31:f9:ff:e7:aa:c8:c4:bb:26:b4:c5:
ff:4a:bc:62:83:5c:1a:8d:e3:88:f2:f1:fa:e2:5d:
c6:f0:ca:9f:b4:fd:0e:cb:76:bd:e4:da:e0:b7:d2:
42:e3:c6:7e:e9:da:6d:71:18:ae:d1:fd:67:56:11:
b6:88:44:f1:3d:7c:25:51:ea:1b:49:82:21:8c:d0:
92:62:19:ca:25:b0:b2:0b:5a:98:00:85:1c:e1:97:
8e:b5:08:3b:84:a1:a6:43:3e:8f:a7:78:b1:55:11:
8c:ec:c9:15:eb:7d:e5:ad:8a:e7:b9:45:c3:36:8c:
32:7d:a7:c2:cc:cf:3c:1a:79:d4:d9:8d:1d:dc:cb:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:DB:C6:BA:0B:DB:64:D6:D5:FA:62:6B:F6:F8:5D:6D:49:18:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E95002A64B11EFA1E10542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c0:cd:70:b2:b6:44:f0:24:2d:2a:ca:4d:5a:2d:a8:1a:38:
1f:9c:7a:0c:91:8a:0d:8b:96:cd:42:5d:ec:f4:36:71:33:9c:
f8:d8:4d:e7:fe:1a:39:52:8e:d4:21:80:77:86:0f:e3:72:39:
fe:e7:b5:bc:78:cd:3f:0a:b7:5d:93:52:e0:0d:80:e0:cd:d0:
6b:db:fe:be:aa:a0:98:48:39:a6:1d:90:89:89:ad:8b:e0:b9:
44:96:9a:74:be:2a:f1:07:d8:f6:20:7a:05:ff:20:6c:4f:06:
a4:69:41:61:ad:71:33:da:80:9d:4d:30:65:c6:57:89:95:37:
d0:32:2c:60:f4:bd:c7:ea:7a:25:84:de:fc:94:b6:d0:65:ba:
79:d9:37:c9:31:a7:26:dc:78:f2:17:c5:5f:31:15:45:0b:9a:
0a:66:91:14:bb:2a:ea:33:74:04:bd:84:28:c6:ba:67:97:48:
d6:ec:89:b3:6c:46:3d:e5:12:88:bb:13:44:75:ac:e4:1d:fa:
0c:08:95:44:2c:d1:5d:33:8d:2a:c8:b4:89:f4:35:31:ca:10:
86:2b:91:e2:be:84:6b:30:c6:c1:f9:b5:55:51:c3:24:70:02:
b9:dd:0e:60:91:22:d4:3e:60:02:5d:f6:8f:18:2f:9d:b0:be:
07:64:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:41 2024 by rpki-client on console-ams.rpki-client.org