Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26A19DE725711EFA3450A68762E951A.roa
File: E26A19DE725711EFA3450A68762E951A.roa (raw, json)
Hash identifier: GzyCs0Xj+gzjZE+sZ/9aqYsK4RSi3941iXfE9f+fx6k=
Subject key identifier: 2B:AF:71:C1:C7:43:D3:54:D6:02:4F:69:31:67:43:0D:A3:7E:0D:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EDD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26A19DE725711EFA3450A68762E951A.roa
Signing time: Sat 14 Sep 2024 05:12:06 +0000
ROA not before: Sat 14 Sep 2024 05:12:02 +0000
ROA not after: Tue 31 Dec 2024 05:12:02 +0000
asID: 17561
IP address blocks: 154.217.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60888 (0xedd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 14 05:12:02 2024 GMT
Not After : Dec 31 05:12:02 2024 GMT
Subject: CN=66e51b26-0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:34:dd:26:06:53:c4:b9:90:72:b2:b5:40:
30:d3:e5:c2:98:61:04:99:9e:9a:30:83:e9:3a:1e:
3e:15:b1:c5:4a:f7:01:70:5b:24:94:37:b7:41:1a:
06:40:f4:ee:5c:b2:b1:a4:0a:b6:70:59:4f:25:c7:
82:da:ea:1b:6e:18:5c:f4:f3:44:51:10:6f:4d:5c:
b2:a9:21:bb:ca:58:4f:ef:ba:0f:be:7c:81:7d:eb:
aa:f9:45:0f:85:fd:6b:f7:b3:df:77:a9:7b:cb:b0:
54:f5:de:a5:e5:f0:6f:b9:f2:6a:0f:e3:01:76:1d:
0f:74:05:46:69:2b:0b:63:92:36:13:54:7c:18:f9:
fb:c4:c7:ee:44:4b:ab:c6:b0:ef:28:68:f5:e2:81:
54:6b:ff:28:e7:6f:60:90:be:f5:9f:c0:4b:41:d0:
a8:63:6f:66:5f:22:bb:db:6f:f8:f5:45:ee:7f:5d:
66:dc:06:55:c8:47:8f:11:9b:07:92:81:ef:f2:d6:
b3:29:58:63:85:27:31:e2:c2:7d:1c:89:ac:18:83:
d4:38:3c:ee:d5:a0:f8:78:e0:00:3c:02:ab:05:3b:
b4:db:25:1a:af:05:63:d8:d2:50:e0:51:6b:0b:47:
10:1c:2b:ab:eb:8f:58:9d:f3:be:b1:03:5c:c3:38:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AF:71:C1:C7:43:D3:54:D6:02:4F:69:31:67:43:0D:A3:7E:0D:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E26A19DE725711EFA3450A68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:e8:f7:5c:d1:b2:cd:0c:41:84:b4:f7:8f:aa:55:20:c3:7b:
b9:a3:4f:4e:f5:83:2f:dd:d9:54:11:29:a3:f0:9e:fb:35:15:
a4:96:e6:e9:ab:42:f0:ad:83:76:40:a9:d1:95:03:17:c2:32:
f1:37:3c:b4:05:f8:2c:fd:61:49:9c:87:0e:2d:79:fb:02:d9:
70:af:18:8a:bc:78:ce:f8:12:6b:03:67:4f:37:49:0c:62:01:
87:f6:a3:b4:90:c0:73:df:d7:22:14:80:af:f0:22:5f:ef:e6:
21:a1:ae:fe:21:33:6a:08:b4:3b:d5:ad:94:9f:fe:70:81:54:
fb:f3:61:ef:23:d4:9a:3b:b7:2e:09:61:a4:b4:ff:af:7b:53:
6e:6a:74:2f:54:5f:b5:d7:ec:7d:3c:f9:fe:c6:a7:de:ce:70:
9b:a5:5b:87:31:6f:2c:a8:7a:86:cb:31:92:8d:47:60:24:5a:
e6:7e:02:9a:8e:a5:5e:56:6a:61:8f:10:a6:bd:63:b0:22:24:
bc:de:63:83:60:d5:59:8c:31:2d:de:c5:44:a0:70:21:8f:4f:
07:4f:02:7f:29:52:df:87:27:6b:cd:6a:a4:3a:55:5d:4b:64:
da:9f:bb:90:17:3d:cc:ad:2f:a1:e4:14:c5:dc:08:38:cb:d9:
49:a9:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:28 2024 by rpki-client on console-fra.rpki-client.org