Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28B3990986111EF89A12373762E951A.roa
File: E28B3990986111EF89A12373762E951A.roa (raw, json)
Hash identifier: sJVEXRyBYiRcivi8vKnt3KYp7oRFoZrusMpt2ajvgIY=
Subject key identifier: 32:7A:12:89:53:D5:08:0C:A4:9F:7B:7C:9A:E2:F0:57:F8:92:C5:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28B3990986111EF89A12373762E951A.roa
Signing time: Fri 01 Nov 2024 14:59:25 +0000
ROA not before: Fri 01 Nov 2024 14:59:21 +0000
ROA not after: Tue 03 Dec 2024 14:59:21 +0000
asID: 203020
IP address blocks: 154.201.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66811 (0x104fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:59:21 2024 GMT
Not After : Dec 3 14:59:21 2024 GMT
Subject: CN=6724eccd-0e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:5b:17:61:37:28:c8:7b:ab:9f:19:11:d1:
7a:0f:5c:36:ea:8d:c4:87:b5:cd:08:76:f1:aa:e1:
da:d8:91:32:45:55:30:79:7f:f3:b4:97:84:1f:de:
59:77:f2:20:cb:a2:7e:27:71:45:1a:05:08:5d:cf:
70:f4:66:7b:d4:33:51:77:96:40:a5:0d:1b:87:f2:
63:c5:2d:78:5a:a7:ff:9d:64:a1:e4:11:19:af:d7:
ff:6b:ba:b3:13:02:8d:a3:93:eb:f7:3d:3c:e7:0a:
b6:63:d0:ea:31:47:b0:52:3e:6f:af:eb:fe:be:4a:
e3:9a:79:95:b9:e1:4e:79:47:c6:e5:28:65:7f:c7:
8e:87:e9:d5:03:93:e4:2d:93:11:d4:44:dc:36:ca:
71:4a:0d:ed:22:bc:6d:55:94:75:20:ce:41:d8:9c:
9d:ef:c6:a4:15:4e:5e:88:85:af:b7:ea:6f:85:c5:
9f:e3:9f:36:99:f1:d0:d2:8a:90:82:6c:01:87:be:
fc:ae:19:f8:db:86:85:c9:1b:53:b1:d2:d1:4a:70:
18:0c:cf:08:f0:9f:e9:6c:31:c2:1c:81:1c:d0:83:
c4:8e:db:26:41:b6:ed:5d:18:19:5b:b9:6b:72:55:
99:a8:ea:eb:c1:4d:53:95:c8:61:8b:4c:fd:17:1c:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:12:89:53:D5:08:0C:A4:9F:7B:7C:9A:E2:F0:57:F8:92:C5:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28B3990986111EF89A12373762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:38:34:71:63:5b:1f:9a:b2:6a:f2:be:7e:09:31:bc:cb:a1:
fc:d4:9e:2f:a2:6a:a6:93:b0:32:b7:76:7b:aa:4b:c3:96:93:
8b:e5:88:5e:f2:15:6d:bc:69:b0:60:55:81:6d:0d:8f:28:70:
14:4f:1c:1e:cf:30:72:99:5c:6a:d2:a4:90:ca:d2:f6:21:8c:
b3:44:89:87:5c:bf:88:ba:ed:57:d4:50:21:04:92:f0:53:0b:
4a:a6:13:e5:13:1c:ac:9e:6e:aa:76:c8:e3:5b:42:ad:2b:c0:
3a:78:7b:73:ee:5c:d9:19:46:5a:a8:f2:29:88:91:11:f8:b0:
b1:80:d4:e3:09:3c:e7:9a:59:ca:9b:ba:ad:bf:15:bd:9b:da:
86:20:45:be:00:8c:88:35:5e:ce:41:a8:4d:55:f4:3a:ac:f1:
07:7e:8c:c6:18:1f:0d:b5:ba:ff:13:af:da:01:66:25:c3:83:
22:3c:2e:60:49:fc:93:f6:6c:bc:12:1e:98:62:02:94:6a:1c:
b7:e7:87:c5:bb:68:32:ac:ec:5d:79:86:28:33:57:d7:b2:74:
78:fe:51:7f:4d:59:26:3f:c0:fd:82:0f:01:d5:85:7e:44:e2:
c7:05:6f:05:70:b6:5b:fd:c7:33:18:79:2f:10:94:58:05:cf:
c6:25:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org