Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B03864A45411EFA96C8A61762E951A.roa
File: E1B03864A45411EFA96C8A61762E951A.roa (raw, json)
Hash identifier: dqdTVKv/2qNxmFAs4UAr3fst+jL+Wthg/IranNJhKuo=
Subject key identifier: A3:EF:3C:AE:EB:3B:5E:5D:E5:7B:FA:29:AB:30:E3:0D:DF:2F:1C:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B03864A45411EFA96C8A61762E951A.roa
Signing time: Sat 16 Nov 2024 19:56:34 +0000
ROA not before: Sat 16 Nov 2024 19:56:30 +0000
ROA not after: Tue 26 Nov 2024 19:56:30 +0000
asID: 5068
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69171 (0x10e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:56:30 2024 GMT
Not After : Nov 26 19:56:30 2024 GMT
Subject: CN=6738f8f2-35d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:bb:52:0f:5d:07:ad:7f:15:85:22:49:26:
a5:a2:72:68:4f:64:0b:ca:6e:36:26:11:86:6e:81:
bb:56:88:78:28:5b:9c:6f:0d:75:6c:b0:d2:ac:1e:
09:1c:3d:83:65:ca:80:d9:a3:f7:30:98:54:fb:73:
b1:1a:36:a5:41:eb:ac:31:6a:72:34:21:b1:c2:6a:
19:62:06:a1:fc:d7:d6:97:a8:f7:ae:0f:84:4a:50:
bb:db:75:7f:18:41:2e:a1:7d:57:ea:b2:3e:47:43:
14:77:17:b6:0e:29:bc:ee:5f:5f:dc:02:39:3d:d1:
f2:27:09:50:41:2b:fe:ac:3a:1c:51:8d:5e:e7:8b:
b4:3b:2d:b8:60:71:fa:fb:1a:21:ed:42:8c:1a:6f:
ed:ae:70:e8:ac:d1:78:b0:00:d0:6f:69:c5:f2:aa:
86:34:e2:82:f2:cd:98:a4:fa:7b:db:77:32:9e:88:
ef:9c:b7:8b:80:7c:08:cd:c0:46:c2:d7:c1:c5:bb:
86:e2:99:bd:3f:08:bf:33:a5:c8:27:db:9c:5f:b5:
ba:c2:19:6d:92:fe:99:12:1c:fb:c6:cb:4e:68:9c:
f9:6e:7d:f7:28:21:93:a1:f9:a0:90:17:bc:81:7b:
b4:35:4d:d6:2c:0e:6f:40:ec:a3:02:31:df:25:6f:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:3C:AE:EB:3B:5E:5D:E5:7B:FA:29:AB:30:E3:0D:DF:2F:1C:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1B03864A45411EFA96C8A61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
66:f6:30:b7:e3:3b:9f:3c:e1:c5:7f:d0:63:74:e2:d1:15:56:
25:a8:1c:0c:65:10:21:c6:6c:08:0b:dd:d8:d6:9b:91:6b:7e:
bd:09:9d:4d:16:6d:66:c9:c7:f7:42:4b:0b:96:5a:d6:cb:51:
49:38:d7:5e:20:8f:c1:36:f4:cd:12:46:ec:da:41:f0:87:83:
d5:17:66:39:45:e9:1e:94:11:2f:5e:bc:30:c4:7a:4b:90:d3:
37:2b:1f:90:14:92:20:78:70:bc:c0:4d:42:b4:5e:0a:06:a6:
aa:51:fa:3c:ba:06:65:04:79:85:76:82:63:8f:bf:8f:f9:17:
64:1e:26:11:4c:2e:e9:7c:ab:32:38:c8:a4:86:6e:0f:ea:8f:
47:43:c0:e9:80:b6:c7:cb:52:33:45:13:9d:3e:cb:50:b4:c1:
8d:c4:7d:bb:63:05:d9:45:38:46:f2:70:93:0e:5f:74:72:55:
e6:15:5d:f2:68:ae:be:ea:b8:e2:c2:2c:11:79:3e:ab:19:cb:
24:91:45:ab:2f:26:01:ae:bc:9d:13:79:24:eb:77:37:00:84:
c9:1b:0e:ff:38:26:80:9e:69:a5:e0:11:17:0f:12:91:61:83:
38:e1:f2:86:64:c4:6e:05:0a:5c:17:1a:3a:07:d0:c3:5d:5d:
6a:ba:fc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:28 2024 by rpki-client on console-fra.rpki-client.org