Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ABF8F0911D11EF93B6BAAC762E951A.roa
File: E8ABF8F0911D11EF93B6BAAC762E951A.roa (raw, json)
Hash identifier: V6zLgF4BzE9qCokZ70TWi+mlkX0pOxGmI3B+UMNeUf0=
Subject key identifier: F6:60:F5:29:43:EC:C5:13:E5:DD:86:0F:04:F2:D6:F6:3B:46:8D:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ABF8F0911D11EF93B6BAAC762E951A.roa
Signing time: Wed 23 Oct 2024 09:05:12 +0000
ROA not before: Wed 23 Oct 2024 09:05:08 +0000
ROA not after: Tue 26 Nov 2024 09:05:08 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65762 (0x100e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:05:08 2024 GMT
Not After : Nov 26 09:05:08 2024 GMT
Subject: CN=6718bc47-3ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:73:8d:ae:27:c8:7a:f0:9b:52:d7:4b:d6:
fc:37:43:a0:16:d1:75:0d:fb:da:69:a5:87:f9:d6:
6c:da:50:97:21:02:56:80:dd:4d:6e:15:07:1c:23:
c8:38:0f:7c:64:14:00:18:30:9d:4e:7e:65:5d:ce:
80:b0:c2:24:23:08:a2:ee:f3:41:a2:cf:fe:94:11:
93:53:33:f6:0f:d2:d0:e2:3d:7f:39:eb:45:be:67:
0f:c6:19:d5:85:fe:85:bb:3e:70:2c:de:ba:fa:f8:
5c:e8:99:5c:2f:ca:5c:e9:0b:09:67:e6:b7:32:0b:
12:2f:34:22:ff:96:96:41:82:ff:13:d2:75:76:95:
32:42:28:56:9f:a0:e4:eb:0a:9c:ba:60:db:31:b2:
2e:45:fc:ec:95:15:f0:58:4a:22:c9:c3:fd:bb:3d:
2b:b5:6e:8b:47:50:0c:dd:52:ea:05:8b:d0:aa:9f:
17:be:51:bb:8a:97:62:c7:d1:ab:f3:e7:a5:49:e2:
20:e2:01:ce:b6:ce:d7:60:8b:8d:7a:70:a6:bc:a7:
a8:e0:ab:02:5a:39:a0:26:08:64:6a:41:6d:73:5d:
26:e9:e3:b4:1b:5d:c7:99:a1:7d:00:0e:46:6b:a6:
1b:aa:33:17:f3:78:1c:3d:ac:49:81:ab:38:9e:9e:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:F5:29:43:EC:C5:13:E5:DD:86:0F:04:F2:D6:F6:3B:46:8D:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ABF8F0911D11EF93B6BAAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:d8:58:36:f8:fc:14:8c:ba:7b:45:e8:d1:27:2d:ef:93:86:
e3:69:a7:5f:22:df:07:ac:04:cf:b2:ae:8d:81:c0:17:e7:67:
43:ef:1b:f2:70:d6:a0:b1:5f:77:68:aa:8f:58:ba:ed:db:3e:
c7:71:2b:f9:02:f8:da:81:13:84:93:50:8e:63:2b:56:b9:f7:
ec:92:eb:a6:a2:97:12:5d:b9:57:5e:f3:ac:c6:14:4a:c6:18:
70:32:e9:76:ab:a0:ff:25:6d:99:a0:23:3c:eb:92:01:98:fc:
b8:cd:ad:a6:fd:90:b9:ba:e0:3e:4a:1c:79:06:2c:b9:d0:4d:
d2:4a:ca:8e:ae:4f:15:51:28:47:32:e9:b1:20:bb:b9:ff:2e:
6c:30:56:b7:03:2c:9a:f8:c7:9c:71:7e:f4:8e:9a:23:98:6b:
3a:34:b7:11:8e:9e:3d:b6:fc:b3:60:0a:52:98:5e:a8:88:bd:
a7:ed:4f:4a:6a:5c:6e:c1:45:6a:35:87:47:8e:1f:6e:8e:38:
49:41:6f:57:91:aa:d6:65:41:e5:dc:9b:0d:14:bc:3a:b9:e0:
07:51:97:da:11:8f:11:46:61:7d:ed:8c:f2:c1:07:91:4d:f0:
1b:9e:be:1a:0e:fa:b9:9a:96:9e:0e:69:6b:0a:99:e7:1c:c4:
9a:b8:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org