Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D66BE492DB11EFAA28C19E762E951A.roa
File: E2D66BE492DB11EFAA28C19E762E951A.roa (raw, json)
Hash identifier: vSW5NjlrMvSriDmx61kjTWCfZJhAYqsk5pG5dgX/mUs=
Subject key identifier: 8A:5E:57:11:B2:AE:FA:C5:84:86:E4:2D:4B:A5:C6:97:65:C6:E0:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01021C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D66BE492DB11EFAA28C19E762E951A.roa
Signing time: Fri 25 Oct 2024 14:17:37 +0000
ROA not before: Fri 25 Oct 2024 14:17:34 +0000
ROA not after: Sun 01 Dec 2024 14:17:34 +0000
asID: 49505
IP address blocks: 154.211.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66076 (0x1021c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:17:34 2024 GMT
Not After : Dec 1 14:17:34 2024 GMT
Subject: CN=671ba881-807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:41:ae:a8:6f:d2:97:94:77:d2:d7:64:f1:
bf:8a:71:ba:f0:c5:37:43:eb:20:47:4a:cf:44:b3:
ad:a1:c0:88:3e:f0:a0:1b:91:ba:10:3c:a7:85:30:
4a:76:35:79:08:37:be:4a:da:a3:5c:14:96:1f:45:
1a:1f:10:80:2e:f4:fd:cd:06:b7:90:96:d3:0b:40:
d8:2e:1f:23:da:a7:1b:84:ec:28:a7:ab:ba:1b:6a:
d7:64:99:20:48:96:1a:8a:1a:c4:ed:0b:a7:f4:5f:
b0:a2:2d:b8:61:25:fc:b9:7d:93:a4:43:18:f2:fe:
3b:99:2f:d3:12:f7:00:cc:22:02:06:eb:40:f4:dc:
74:04:d8:c7:f6:bc:fb:f1:22:e1:be:75:3e:6e:3e:
88:9d:7a:16:a3:19:d0:96:19:ee:82:9c:a7:0a:5c:
01:cc:5d:7b:f2:cd:f6:fc:5b:29:e9:84:17:3a:00:
c5:4c:00:80:13:c1:8b:c4:a4:14:50:bf:7d:49:7e:
27:31:db:5e:6f:6d:f3:3c:f3:26:d9:63:78:ad:24:
f4:a4:76:67:2b:84:79:7f:7e:d5:e6:d3:7c:54:98:
8b:a8:38:85:6f:e2:c4:94:0e:3f:55:d0:47:c4:53:
dc:15:1a:06:30:81:2f:57:52:e3:47:77:33:ea:4b:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:57:11:B2:AE:FA:C5:84:86:E4:2D:4B:A5:C6:97:65:C6:E0:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D66BE492DB11EFAA28C19E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:b5:91:8f:15:c9:11:de:51:44:0d:0f:3b:dd:71:15:8d:41:
98:f0:d2:96:d6:6e:bb:1b:7c:24:bf:0f:1a:c0:93:e9:b6:0c:
02:dd:59:a5:67:64:3a:bb:5b:62:05:e2:ff:d5:d6:9f:19:5c:
3e:04:9c:11:24:b8:54:88:b3:91:58:e5:37:33:26:04:d9:3e:
ce:64:04:7a:ca:16:27:b8:7b:6f:6c:36:c3:ca:67:82:2b:df:
a7:2d:2e:1b:24:c5:93:28:3f:b0:1b:27:c2:94:86:2a:3c:79:
9b:58:d3:81:5a:8c:46:84:fd:be:9d:0e:40:63:e9:f3:bb:18:
0f:21:a7:6f:8f:d1:c2:49:ff:03:c4:7c:89:2b:c5:9c:6c:29:
6b:64:a5:9e:6a:a9:41:1c:e7:fa:24:d6:e6:8d:b2:f4:ba:c0:
d3:0d:84:50:e3:80:5d:ea:80:f1:01:b0:bb:d3:6c:01:b8:c7:
ff:c0:ce:89:a0:15:84:f5:b9:fa:5d:4b:03:fa:cd:ac:f6:26:
ee:82:20:ef:c1:b9:10:4f:85:0b:70:28:a1:9b:00:6f:40:0a:
8d:86:80:a9:b9:4f:b2:97:08:de:81:d2:6b:25:a9:38:cd:15:
39:2b:f9:7d:44:ec:79:1b:94:ba:a8:47:53:66:f1:83:96:e9:
2c:be:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:50 2024 by rpki-client on console-fra.rpki-client.org