Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C1A9B069D711EFBCD74778762E951A.roa
File: E8C1A9B069D711EFBCD74778762E951A.roa (raw, json)
Hash identifier: XUX/tbhV59MK0U5jzj89z6CZ591v73t1d9ZF2Nm402s=
Subject key identifier: B8:3B:1C:D2:F2:1B:F4:28:DC:B5:78:5E:FD:40:43:CA:FD:40:BF:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E92E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C1A9B069D711EFBCD74778762E951A.roa
Signing time: Tue 03 Sep 2024 09:35:52 +0000
ROA not before: Tue 03 Sep 2024 09:35:48 +0000
ROA not after: Thu 28 Aug 2025 09:35:48 +0000
asID: 140227
IP address blocks: 154.197.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59694 (0xe92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 3 09:35:48 2024 GMT
Not After : Aug 28 09:35:48 2025 GMT
Subject: CN=66d6d877-3c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:76:9b:88:ee:13:05:8d:06:e7:0e:c1:0b:
16:18:cd:27:00:8d:bc:7f:8f:65:83:89:55:5d:ff:
bd:6d:22:90:cb:ca:9a:1e:c4:5d:c3:93:50:3a:eb:
9f:13:3b:06:2b:f5:6e:aa:10:13:84:6d:af:c6:83:
27:df:22:ff:c3:62:1e:c2:71:14:52:5c:5f:8d:88:
e4:99:20:3c:b1:49:b0:47:e3:c8:61:fa:76:f5:cc:
39:c7:e5:bb:e0:18:56:b0:38:17:3c:5f:b9:28:04:
01:e0:6e:48:2c:29:b5:ae:b0:72:cf:f8:4c:23:a2:
43:b9:bc:eb:e1:fb:d4:23:28:de:16:5e:49:ce:91:
bd:3b:54:11:2b:f7:11:35:7b:da:f4:3f:a2:07:1f:
cd:79:e4:66:34:f3:99:45:52:60:d4:52:e0:63:d3:
92:35:4c:62:fb:4b:3d:f0:22:d9:f2:e6:62:58:0a:
d9:8c:55:29:fd:d1:5b:1f:a1:8f:e1:3f:30:f4:40:
c3:4e:a5:1d:9f:80:9a:0b:98:9c:f7:2d:35:4e:ca:
3f:72:ea:b1:6c:0e:10:2e:c1:98:2c:9f:18:4a:e0:
a8:05:64:13:51:d6:4d:bb:bd:18:db:8f:af:ee:df:
60:ce:1f:be:5f:15:4e:bc:b3:de:4d:33:29:e4:62:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:1C:D2:F2:1B:F4:28:DC:B5:78:5E:FD:40:43:CA:FD:40:BF:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8C1A9B069D711EFBCD74778762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.16.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:e7:25:32:6d:33:ce:d9:3e:c7:8e:f3:2f:79:9e:c7:8b:f4:
0d:f4:49:6c:4c:55:8d:26:77:92:cb:fd:4d:23:a7:f9:5e:e7:
d6:ed:18:01:d5:df:39:42:64:3d:1e:bb:14:0a:11:ee:2d:4e:
33:6e:e6:53:66:26:1f:5e:67:ec:c5:5c:0c:ec:c6:18:f4:52:
62:af:0c:b8:28:38:12:63:dd:ff:f1:01:66:e0:e5:49:bd:08:
43:dd:33:ab:7a:91:14:82:0c:66:01:b0:d2:28:88:8e:d6:8f:
1f:37:31:51:17:74:00:d0:cb:18:68:d1:b2:a8:7d:58:36:eb:
9e:4d:21:d4:61:49:b2:a3:b6:59:82:24:52:9e:54:50:ed:57:
ff:d6:d0:c4:28:a6:9c:67:1b:9e:28:75:76:88:56:58:52:da:
f4:e9:6e:36:8d:8e:24:f8:fa:35:4d:e3:f2:9a:6c:4a:1d:e3:
80:81:7b:bf:43:60:f6:d2:34:90:83:35:0f:28:06:68:85:7c:
b1:38:b0:b1:38:25:19:11:9b:62:ae:9e:e9:e7:70:46:6e:3d:
7a:52:f0:6d:4f:d0:45:2d:2c:ca:54:37:b4:7b:1c:5e:c4:48:
22:4b:58:49:c9:f5:b0:4b:da:57:ed:12:c8:56:bc:4d:d6:53:
2c:86:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org