Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7012323AA311EFA7561595762E951A.roa
File: EA7012323AA311EFA7561595762E951A.roa (raw, json)
Hash identifier: XAWxIvhP5RaXY10RKEug0ZtpXkyvTFY4e6+bUsfSOTA=
Subject key identifier: 01:05:C2:66:64:B7:46:E5:4A:71:B2:2D:A0:D9:A5:8F:4C:5F:7C:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CD8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7012323AA311EFA7561595762E951A.roa
Signing time: Fri 05 Jul 2024 07:55:16 +0000
ROA not before: Fri 05 Jul 2024 07:55:12 +0000
ROA not after: Tue 07 Jan 2025 07:55:12 +0000
asID: 63199
IP address blocks: 154.207.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52620 (0xcd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 07:55:12 2024 GMT
Not After : Jan 7 07:55:12 2025 GMT
Subject: CN=6687a6e4-3c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:73:50:a2:f3:73:01:2c:b3:5b:97:e5:a3:
f4:8d:71:e6:c6:00:bd:4f:a3:85:03:8d:da:22:6c:
cc:50:a8:5c:f5:35:94:6a:64:ae:67:fc:da:0d:e5:
0f:cf:f6:47:6a:c4:8a:c2:87:79:6e:55:82:55:e7:
b2:b9:e7:9f:4d:73:e4:30:48:fd:ec:7d:6b:15:3b:
09:dc:72:3b:ae:79:fa:7e:06:6a:a1:5b:f8:54:8a:
4d:40:6f:31:91:b2:d0:c1:18:62:44:0b:53:e6:16:
3f:d3:19:eb:b1:b3:70:40:f1:b4:8b:f8:a7:2b:78:
f2:ea:28:0e:87:6e:08:07:92:86:e9:78:4a:3a:3d:
94:20:f3:e4:27:95:6a:df:d7:7c:fa:b8:31:8a:7e:
62:ee:2e:1b:e6:51:df:2f:c1:53:6e:82:b1:e8:bb:
c4:ea:b6:db:4c:bc:2d:fd:14:f0:ff:6c:60:5a:26:
f0:c0:6e:fc:b9:f0:7c:6e:3d:96:03:af:d8:58:3a:
f2:c5:fc:fd:d9:9b:af:b1:81:b9:96:76:0f:26:0e:
1a:76:93:a6:59:33:1c:f6:db:5d:39:9b:2d:09:fa:
e0:69:08:e9:2e:04:3e:99:61:75:db:1a:58:d6:cd:
6e:b3:6d:3e:2a:07:13:5e:a4:67:43:4d:59:98:7c:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:C2:66:64:B7:46:E5:4A:71:B2:2D:A0:D9:A5:8F:4C:5F:7C:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA7012323AA311EFA7561595762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:01:bb:67:09:69:23:3f:f3:2d:80:f7:c4:59:13:92:9c:b7:
eb:07:6f:e6:10:7e:73:c5:c4:e0:18:75:49:13:93:e7:d7:9e:
14:bd:48:44:9d:03:34:cc:d9:34:8c:0b:5a:3e:29:9e:4e:b4:
1c:30:47:70:1d:ed:d1:fb:11:42:68:85:4a:9b:d9:c0:af:ee:
ff:a0:d1:9c:df:0e:b9:80:fa:15:a9:cf:a1:d2:38:5e:ba:30:
74:93:09:41:b1:f1:fc:59:f6:a3:64:02:17:e4:ae:ba:a2:0e:
77:7d:a3:15:c2:6d:94:7c:5b:aa:4a:6a:dd:00:16:3f:d9:3f:
78:4b:cc:b2:62:49:7c:39:dc:13:55:b1:e9:fa:58:c6:94:bb:
40:29:1f:3a:4e:df:35:bd:11:c1:12:c0:de:29:c5:6d:a0:02:
40:bf:9a:ef:8a:ed:ce:03:5e:50:0d:e8:62:09:66:85:64:fa:
49:2f:68:2a:c5:25:73:55:58:a5:b8:64:63:0f:72:1c:f4:f4:
ff:cb:de:c2:f5:fe:1c:1a:78:d1:dd:ee:bb:a1:55:e7:3e:1e:
b4:58:87:3d:74:7d:07:3c:49:e2:2b:8d:bb:13:8b:4d:4e:c6:
92:b5:0e:01:24:69:9f:a8:32:22:5a:a0:33:a7:79:45:f6:1d:
01:f5:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org