Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4A715A676E11EF95FE2F5C762E951A.roa
File: EB4A715A676E11EF95FE2F5C762E951A.roa (raw, json)
Hash identifier: qXnyGjAHtoHGQ0gom9sM/0tQRvlHU7752Cs3/Ua6Izc=
Subject key identifier: 83:1B:08:49:F5:65:2F:63:AF:37:BF:B0:6E:88:46:39:AB:CC:96:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4A715A676E11EF95FE2F5C762E951A.roa
Signing time: Sat 31 Aug 2024 07:59:16 +0000
ROA not before: Sat 31 Aug 2024 07:59:13 +0000
ROA not after: Mon 01 Sep 2025 07:59:13 +0000
asID: 140659
IP address blocks: 154.222.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59411 (0xe813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 07:59:13 2024 GMT
Not After : Sep 1 07:59:13 2025 GMT
Subject: CN=66d2cd54-98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:ac:c3:a3:b9:50:9b:5f:07:a2:82:53:46:
62:7f:1b:eb:3a:68:37:48:ff:45:1e:c8:17:09:b4:
7c:68:64:ee:23:87:c2:c9:a4:98:54:0c:1e:f1:5d:
17:f3:cc:9f:a4:f1:6c:9a:22:da:6e:d1:42:48:96:
eb:69:9e:72:78:b1:dc:b2:92:35:d3:e0:e6:2a:89:
ad:a8:a0:ed:43:f5:17:cc:bf:69:52:8c:a1:55:64:
16:6b:c8:18:b1:61:5a:d9:54:fc:1e:9c:e4:62:56:
99:66:a9:2e:99:41:f1:22:6b:6e:2b:96:33:13:85:
c6:6a:27:a5:e1:8d:86:27:4d:ae:1e:9d:30:13:12:
ef:42:79:e0:a9:19:c6:ce:f6:82:38:19:92:f1:3e:
ac:be:9a:03:3a:22:61:81:5b:7d:07:f4:88:f4:69:
e8:cc:7d:94:16:90:69:d3:ac:21:b2:a2:27:fa:53:
78:14:94:a6:11:05:f6:d7:dd:a5:9b:9a:30:cd:17:
b5:44:55:98:a3:b8:28:67:b0:56:b5:60:8c:26:cb:
c7:42:ff:fe:3a:22:e8:a5:20:5b:2d:d3:dc:5b:df:
31:96:64:79:07:1a:34:ac:34:6a:03:4e:86:11:a9:
d9:ca:51:55:81:69:3c:5c:0f:66:b6:6c:9c:7e:79:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:08:49:F5:65:2F:63:AF:37:BF:B0:6E:88:46:39:AB:CC:96:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB4A715A676E11EF95FE2F5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
39:6a:ed:b0:c9:c0:db:e1:70:bf:b5:86:18:e1:bb:f8:ac:ff:
bb:4a:db:76:09:8f:09:e5:82:69:c4:7a:c2:eb:c0:64:6a:1c:
df:e8:2a:99:95:67:f7:5a:af:c1:05:15:8f:ad:9d:44:89:4a:
cc:72:44:74:70:0b:7f:d1:78:2f:93:e6:2f:62:e3:b8:b3:f7:
18:fd:bb:f3:4c:02:b8:a4:0f:1d:a9:2b:05:29:22:c6:c8:fa:
2d:a8:3d:ab:1c:50:1a:9a:53:e7:f0:7e:85:52:5e:32:50:e1:
7b:20:bc:b9:6b:f5:a6:20:37:f0:64:cb:4a:67:f0:4d:06:ba:
fd:bc:18:df:ee:5d:11:34:c8:c6:4c:02:ba:0c:2d:eb:4b:05:
dd:37:8a:10:ea:c9:3d:b6:da:bb:fa:62:71:bf:c8:8f:53:83:
a8:18:47:d8:4a:e0:3b:9a:5a:ad:29:d4:73:9e:9f:d2:1a:a8:
f3:8b:f9:94:ad:dc:46:e7:28:52:cb:3f:1f:08:ff:59:9e:58:
1a:62:d1:ed:8e:e0:c9:70:69:ca:74:f8:7e:bd:f0:46:95:5f:
27:fa:87:7f:3b:ad:f9:19:93:a5:9d:e9:61:6c:01:96:d1:2b:
e6:c3:90:3c:5f:b8:2e:99:67:ce:76:c0:45:99:3b:9d:6e:61:
ef:be:4e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:44 2024 by rpki-client on console-ams.rpki-client.org