Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48B597E71A011EFBF93AF68762E951A.roa
File: E48B597E71A011EFBF93AF68762E951A.roa (raw, json)
Hash identifier: n89UFJ+H+QHFa4VeAJmz+kx6LNNfNl3aWD4pkhL5NK0=
Subject key identifier: 2C:56:36:5C:08:DA:4B:15:47:A8:46:3C:D8:16:97:CA:14:34:C7:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48B597E71A011EFBF93AF68762E951A.roa
Signing time: Fri 13 Sep 2024 07:22:11 +0000
ROA not before: Fri 13 Sep 2024 07:22:08 +0000
ROA not after: Sat 30 Nov 2024 07:22:08 +0000
asID: 142403
IP address blocks: 154.211.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60794 (0xed7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:22:08 2024 GMT
Not After : Nov 30 07:22:08 2024 GMT
Subject: CN=66e3e823-ba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:e1:7d:41:bd:6e:f5:c6:a7:7c:9f:2c:73:
e8:a2:13:52:78:60:24:e8:3d:a3:3a:29:ee:e3:66:
ab:62:b5:d8:9f:bb:74:18:10:8f:37:7e:a8:12:6f:
55:1e:a8:9e:07:36:d5:90:91:70:22:ce:f9:47:41:
b3:71:a5:e7:8d:21:df:6a:7b:40:c6:18:1c:6d:ad:
ec:9b:20:27:d0:9d:c4:6f:91:67:8b:5e:9c:af:f2:
48:3a:ce:81:4f:9d:0b:50:4c:39:71:23:30:a4:50:
01:b1:58:d3:e1:f4:49:a3:21:dd:c9:f8:4a:78:67:
cf:05:ba:1e:de:aa:7e:43:27:33:0f:21:5e:44:8d:
ae:81:4a:f4:ba:a5:ce:d7:bf:24:69:6d:28:25:ee:
bb:57:4d:35:26:31:5b:20:5d:c3:01:86:24:c8:e5:
93:55:78:b1:0d:94:a7:0a:e6:cf:54:82:1c:ae:1b:
7d:95:e0:84:73:1d:a6:36:63:f2:5f:9a:3f:c6:7f:
36:d2:6b:d9:29:46:4c:fd:17:62:02:b0:ad:a3:cf:
bf:24:1a:2a:75:da:d9:9d:a5:8c:e6:30:44:d5:49:
bb:95:d8:d0:cc:9a:56:c1:64:32:6d:42:3b:9a:55:
3f:af:4d:1f:58:50:9a:26:7d:2e:56:f8:77:25:2f:
f5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:56:36:5C:08:DA:4B:15:47:A8:46:3C:D8:16:97:CA:14:34:C7:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48B597E71A011EFBF93AF68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
18:08:8f:7a:e1:4a:9d:57:4d:b2:09:a8:4b:8f:fb:58:19:3a:
2f:39:58:37:51:fc:57:48:87:c0:6b:34:ee:11:d5:63:f8:13:
71:08:47:5c:32:b3:06:2d:f6:27:b9:a1:b5:42:8d:45:78:9c:
bd:48:4a:04:39:29:c0:96:58:b6:ef:cc:aa:f1:34:b4:53:ed:
03:2e:11:e3:76:a8:b6:c3:29:cf:41:28:52:0e:f0:a3:18:ad:
28:80:65:6b:9b:1b:8b:90:42:2d:47:9f:17:d8:f6:2e:6a:ea:
28:1e:55:e1:5d:3e:1d:4f:58:9d:79:d2:22:73:9c:60:e7:cb:
50:c5:51:44:e7:39:d9:73:c6:e5:cc:a5:05:ae:17:ed:ae:38:
20:86:ca:95:95:5b:94:8e:40:a7:c1:2f:7c:85:6d:c9:f5:d2:
9b:33:62:be:38:26:37:a5:48:28:b3:04:cf:5b:ea:ea:a9:57:
e1:49:3c:43:dd:8c:63:d2:06:56:0d:7e:86:d0:93:87:12:46:
bd:6f:1e:c9:f3:5b:0c:51:a1:8c:b8:f3:03:3e:64:91:f2:09:
46:13:ca:b7:fd:2e:bf:f3:50:9f:d5:a4:bb:ae:f9:e5:ff:f2:
a3:f3:6e:4e:bb:b6:8f:63:22:a8:51:12:43:f1:f2:13:1d:44:
94:ae:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org