Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1C170AA26111EF9D971C9B762E951A.roa
File: EB1C170AA26111EF9D971C9B762E951A.roa (raw, json)
Hash identifier: f1V6aeQ8o0ATuF4v7Hcg6xAnSnqVmtNXF4lquxHrZfU=
Subject key identifier: DC:6D:64:52:6C:10:27:EC:B2:08:B3:E2:65:DD:C1:AA:F4:9A:F6:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1C170AA26111EF9D971C9B762E951A.roa
Signing time: Thu 14 Nov 2024 08:24:51 +0000
ROA not before: Thu 14 Nov 2024 08:24:48 +0000
ROA not after: Sun 11 May 2025 08:24:48 +0000
asID: 139871
IP address blocks: 154.197.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68850 (0x10cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:24:48 2024 GMT
Not After : May 11 08:24:48 2025 GMT
Subject: CN=6735b3d3-2301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:78:f9:ce:67:1d:ab:7e:91:ef:57:91:85:
e0:1a:4c:cd:f8:47:3c:2d:a3:8a:ab:24:43:95:be:
ed:a5:74:ee:24:c9:2a:15:b6:02:f8:19:fb:d2:a2:
77:88:69:8d:d9:55:5d:ee:42:75:19:29:10:cf:28:
61:79:07:61:da:69:b0:86:55:97:f2:bf:29:20:cf:
8f:29:f2:d6:18:dd:57:0e:db:e1:7f:1c:ac:69:5d:
7d:67:8a:6b:6c:b9:93:1a:08:df:a0:dc:63:75:13:
90:80:4a:ac:23:23:f0:9a:f1:99:c2:6d:59:87:b4:
37:28:c3:8c:55:8a:4a:26:fa:16:6d:cb:83:9a:09:
e2:35:ce:7b:0b:ca:cb:7e:3b:d5:a6:e0:54:e7:c0:
db:a9:45:73:6b:b3:12:3c:99:b8:a9:42:1e:b5:32:
6d:ab:ea:3d:49:6d:19:a2:fe:72:e7:39:34:28:87:
e3:ac:33:02:ba:10:25:8e:5d:58:4c:49:63:6e:ed:
77:8b:cb:4d:5b:f6:25:7e:77:f6:cc:ad:29:84:c7:
20:89:d8:40:de:4a:ff:f3:1d:3c:f5:21:9a:b3:ad:
48:53:47:88:3c:d8:4b:91:5f:b2:56:73:b0:2c:20:
d3:42:58:2c:fe:1d:e6:b7:4d:96:75:0e:1c:6d:e5:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:64:52:6C:10:27:EC:B2:08:B3:E2:65:DD:C1:AA:F4:9A:F6:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB1C170AA26111EF9D971C9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:06:79:c8:b4:d6:38:66:5a:22:6e:22:f0:8a:cc:2f:a8:6f:
e9:3d:d4:e7:da:15:55:8c:14:6b:c3:13:10:65:ed:37:43:6e:
36:c1:8d:39:2b:1c:e2:b2:c1:be:9b:96:ab:74:1d:b8:3e:68:
b6:1a:5f:64:cf:35:07:05:dc:1b:1f:ce:99:30:c6:3d:02:47:
6d:51:87:b6:6e:e1:7b:e9:72:9a:99:4a:5b:bb:3f:99:a5:d6:
04:a5:ff:cc:21:c2:52:0e:8b:47:12:d2:99:5c:81:a1:30:31:
96:e1:ca:d9:3f:6b:43:36:19:76:04:76:ab:20:82:a0:b5:a4:
a2:e7:7f:d8:b9:c6:c4:21:21:b0:fc:fe:a0:41:67:bd:51:77:
52:f3:00:60:05:7b:a1:89:18:52:6e:07:3e:4e:d5:bf:29:ba:
e1:da:d4:a2:e9:95:77:31:ae:a7:b7:8a:e8:55:a8:8f:67:f1:
72:33:68:3f:dc:97:d2:fd:a3:6a:d6:38:a0:32:b0:c8:2c:0e:
38:d8:fe:18:6e:07:4a:69:ef:ba:bb:8f:01:9c:cd:ca:5a:2f:
ed:ee:b1:aa:9f:c3:9f:fc:bd:4e:16:8b:20:42:d9:07:8f:33:
47:85:11:33:72:91:24:2c:ad:b3:65:e3:14:76:d9:db:73:21:
f4:5d:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org