Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F35C207B1D11EF8708158B762E951A.roa
File: E7F35C207B1D11EF8708158B762E951A.roa (raw, json)
Hash identifier: 7EaSBWuErNMBxuZZ0syPCo5uMcO9FyfpgeHJ+xRf7w8=
Subject key identifier: 4B:08:8C:DE:4C:55:5B:B7:99:CB:C2:4A:83:1E:A8:B9:02:73:AD:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F326
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F35C207B1D11EF8708158B762E951A.roa
Signing time: Wed 25 Sep 2024 09:09:45 +0000
ROA not before: Wed 25 Sep 2024 09:09:41 +0000
ROA not after: Wed 18 Dec 2024 09:09:41 +0000
asID: 328608
IP address blocks: 154.214.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62246 (0xf326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:09:41 2024 GMT
Not After : Dec 18 09:09:41 2024 GMT
Subject: CN=66f3d359-2b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:f4:a8:73:05:b9:35:16:77:35:7a:e0:64:
d9:8a:6b:89:1a:65:56:00:15:c3:70:6c:54:e6:1a:
b4:14:90:b9:61:e5:86:d5:18:5b:7b:ac:4d:83:b2:
3c:4b:07:ed:48:08:a7:53:2e:38:24:74:25:ed:b3:
de:39:b3:3a:f0:dc:7f:05:30:7a:99:12:e6:32:9a:
4e:9f:8b:f9:77:67:9d:74:ab:d7:be:ca:28:66:6d:
a9:a3:d4:0d:0c:fb:4c:1b:8f:d9:b8:be:94:f0:6e:
b3:8a:f3:a0:c4:55:ec:46:88:60:c4:aa:e2:3b:93:
e5:6b:5c:7a:79:17:8e:f2:1f:8e:9a:15:42:21:24:
95:ed:77:36:fb:ea:d2:e6:13:56:d0:1c:c3:3d:d5:
25:e2:e1:a8:ac:bb:55:77:6a:1b:de:02:fe:92:da:
ff:b2:8b:05:cd:6a:9d:b8:d3:ba:6e:e8:12:04:b4:
e1:15:90:2c:91:6f:54:86:cc:e2:a7:ea:88:db:08:
8b:3c:d1:95:a5:93:33:df:c6:4a:af:0a:c4:9a:75:
d1:8f:4e:e1:09:b3:07:b6:ed:fe:d4:12:08:6a:e2:
a7:09:92:34:a7:2d:ac:e5:1a:c2:4e:0c:4c:df:30:
fa:57:d8:0f:43:da:12:f0:d7:82:7a:38:c2:e0:0e:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:8C:DE:4C:55:5B:B7:99:CB:C2:4A:83:1E:A8:B9:02:73:AD:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7F35C207B1D11EF8708158B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.222.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bc:db:df:9f:9e:32:eb:03:ff:69:9e:25:d6:52:e7:a8:2e:
8c:0e:bb:e9:4c:a2:6d:5c:e1:c3:8d:f4:1f:1e:f4:d6:87:79:
5d:70:ca:8d:45:21:f6:86:d7:2b:6f:83:69:6c:8e:af:15:c4:
cd:c8:9c:87:bd:57:1a:f7:57:41:82:e1:76:c9:59:e1:78:37:
37:f4:cf:ac:a1:05:27:94:96:3a:1e:59:94:e6:21:52:c8:ca:
e7:18:56:30:3d:da:d3:f5:73:6d:80:5a:fc:31:e6:60:c0:83:
16:ce:ca:8a:0d:8f:53:36:09:d0:c4:e9:5e:00:c2:8e:ac:db:
19:85:89:25:92:99:fd:54:a1:e2:89:fc:2e:41:f5:ee:48:c8:
b8:15:8d:18:8a:19:09:6a:74:32:c5:00:c6:59:61:b1:3f:02:
aa:1f:0f:12:7b:78:da:55:80:83:bb:8a:ec:0f:f5:e1:d1:57:
ab:47:cf:47:c1:c2:8e:26:a0:fd:30:75:4e:83:4e:58:d0:2c:
d6:7c:ce:c1:b5:d6:a6:bd:55:e1:dc:30:b4:e3:f1:67:a6:8a:
a0:0b:1e:fd:fd:2a:2e:d3:e0:ce:8a:fa:24:d3:c2:6e:73:00:
0c:91:fd:79:d5:c4:e5:81:be:fd:9f:28:ea:a3:69:43:e2:f7:
8e:d8:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org