Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1924294A59111EF83AF1AB3762E951A.roa
File: E1924294A59111EF83AF1AB3762E951A.roa (raw, json)
Hash identifier: a2AHd63NxEUqY2fpIkzklyHtkZuKGZVLWCD0XZrzxKk=
Subject key identifier: B7:92:76:F0:B3:02:A3:A9:15:A9:DF:AF:76:62:9E:D7:1F:6D:A9:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1924294A59111EF83AF1AB3762E951A.roa
Signing time: Mon 18 Nov 2024 09:45:45 +0000
ROA not before: Mon 18 Nov 2024 09:45:41 +0000
ROA not after: Tue 24 Dec 2024 09:45:41 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69349 (0x10ee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 18 09:45:41 2024 GMT
Not After : Dec 24 09:45:41 2024 GMT
Subject: CN=673b0cc9-6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:42:c5:0c:1c:cc:6b:f6:96:1c:dd:3b:e1:
ab:50:8c:19:81:0c:5f:e9:1e:f7:80:32:0e:cf:65:
d4:94:f7:be:f3:e7:cc:61:28:f7:44:00:48:ee:fd:
15:91:99:4d:b5:09:14:82:0a:b8:10:b5:c6:dc:6b:
d6:4c:b9:87:db:20:d4:93:b6:31:b8:1f:44:e9:7c:
d2:69:27:0b:91:03:05:bc:15:da:b6:f7:25:61:b5:
59:85:57:b0:b3:9e:e4:76:7a:e9:e7:b4:87:fc:4b:
2f:39:05:86:1c:61:bb:71:2d:38:9f:19:fd:1f:7a:
47:1c:6a:6b:7e:84:fc:af:26:6d:31:a6:38:b8:2f:
54:28:98:96:23:75:78:38:9f:a0:14:a6:50:b0:3f:
33:be:05:78:00:06:ed:a6:ac:7e:f6:e8:6e:bf:aa:
1c:0a:fe:6f:71:fc:c8:d0:87:76:d7:dd:e6:a3:ce:
2f:d3:2a:f8:1d:fb:81:5b:ac:96:e7:ee:54:31:a0:
33:90:e8:34:16:d4:81:da:92:24:6a:80:27:f4:56:
63:1d:b8:49:55:e5:3f:04:17:89:a3:cf:65:6e:04:
13:9b:f4:4b:e9:0e:21:89:ef:1a:c6:89:a4:ed:9b:
a6:5f:7b:49:04:79:5a:e9:ab:d4:c3:61:56:20:35:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:76:F0:B3:02:A3:A9:15:A9:DF:AF:76:62:9E:D7:1F:6D:A9:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1924294A59111EF83AF1AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fa:c5:05:c4:50:29:33:4f:05:9c:a4:22:83:02:a2:37:e5:
5f:fd:f8:46:72:8b:ba:ca:e2:67:a6:08:99:bb:be:80:14:05:
53:ce:b3:e0:cc:a2:13:eb:bc:b5:49:94:4b:34:09:59:91:45:
93:45:27:da:d1:01:2f:39:0a:86:f9:c2:df:d2:5a:42:76:7b:
3c:b3:b8:3e:91:33:91:fc:6d:bc:53:b8:f0:57:4f:b5:42:5f:
cc:43:55:8c:f9:58:81:6d:c3:c0:96:6c:6e:35:03:44:24:13:
7c:e0:c8:e4:46:1c:fc:c4:15:47:54:35:15:84:45:f4:2f:0e:
f9:3b:d7:56:34:29:c0:0e:43:e5:71:f6:5d:c0:14:fc:d0:3a:
78:25:bb:51:9d:df:d0:7c:02:12:af:88:ed:ae:42:36:46:3d:
52:bd:46:32:94:62:9a:46:e2:01:89:1d:0d:8d:2c:53:c4:a5:
f9:55:9b:f1:2b:45:3f:1b:75:ff:2d:1b:57:98:ec:d9:07:81:
e4:2e:6c:16:1b:4d:90:d2:23:4f:28:ec:2d:7e:69:73:cf:76:
c7:2a:05:c1:ef:07:63:58:95:3f:2b:fa:23:77:a4:54:e3:be:
93:43:dc:5d:91:53:08:8e:3f:5c:42:9d:06:ae:f1:b0:e8:0a:
35:db:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:11 2024 by rpki-client on console-ams.rpki-client.org