Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB265B2950E11EFBDD13580762E951A.roa
File: EBB265B2950E11EFBDD13580762E951A.roa (raw, json)
Hash identifier: QngfQuOu2RIlTOvafl1PTTkgZeIf82zuUGIF/JX0K0M=
Subject key identifier: 2F:EB:A0:CE:D6:A7:2B:30:3E:EC:B6:27:16:B8:88:75:B2:4B:A9:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB265B2950E11EFBDD13580762E951A.roa
Signing time: Mon 28 Oct 2024 09:27:59 +0000
ROA not before: Mon 28 Oct 2024 09:27:54 +0000
ROA not after: Wed 27 Nov 2024 09:27:54 +0000
asID: 44559
IP address blocks: 154.203.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66229 (0x102b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:27:54 2024 GMT
Not After : Nov 27 09:27:54 2024 GMT
Subject: CN=671f591f-d9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:eb:63:39:7c:a3:f8:77:b0:4b:96:fb:a7:
fa:fa:a0:dd:0c:cd:6a:a0:59:56:be:c6:1b:54:58:
1e:99:df:b4:59:52:93:0c:b5:52:9b:13:0a:98:23:
17:ba:d5:af:6d:05:de:18:b0:8e:8b:52:b7:3b:7e:
eb:a9:21:c4:13:62:dd:65:b2:c5:29:0d:72:e0:1d:
29:5e:98:b0:8c:7a:83:fd:3a:fb:71:2a:12:94:cb:
74:78:61:10:30:8e:da:24:a2:c9:b9:84:19:29:cb:
d8:04:23:a7:ad:e4:0b:4b:49:7e:7f:f2:2e:14:2f:
91:5f:4a:39:64:28:ac:86:4b:fa:aa:4a:f8:f1:ad:
d7:1b:cc:72:af:77:fe:4b:4c:b7:cc:63:72:a7:1a:
00:c5:28:43:8a:63:05:74:78:1a:4c:55:d3:1a:4f:
aa:be:7a:7a:db:fe:0d:6e:ee:98:de:f2:2f:37:3c:
c9:00:c4:2c:70:32:83:48:9e:0a:19:13:83:46:7a:
e7:08:97:f4:e3:e3:fd:93:fa:15:9e:99:65:a6:da:
a7:b6:c1:d7:d5:9b:38:b7:8f:d7:3d:ad:55:d6:b1:
09:1c:c6:ad:e7:ba:44:5b:5b:31:f6:1e:02:9c:81:
d6:79:57:54:fa:c3:d1:dc:e5:12:15:1a:8d:a1:38:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EB:A0:CE:D6:A7:2B:30:3E:EC:B6:27:16:B8:88:75:B2:4B:A9:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBB265B2950E11EFBDD13580762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:b4:ed:9f:14:2c:58:ec:36:2d:ac:0a:97:4a:4a:c8:58:bb:
04:d2:7c:69:4c:4a:c3:22:69:bd:63:2a:5c:97:14:34:5f:3e:
7b:c7:3e:09:01:56:6e:6e:9e:9e:ec:85:f7:d8:3a:4e:2d:9b:
2a:69:8e:b2:04:40:a7:03:de:77:c8:7c:fa:fb:f5:d6:c7:03:
7f:1f:3e:be:c6:0d:2b:6f:9a:71:a3:30:5d:99:16:f4:b8:a3:
e2:80:e0:c5:3f:5e:89:52:da:01:fa:84:4e:cb:49:13:85:19:
eb:74:40:e7:45:fa:54:ca:75:81:29:a4:aa:c9:6a:3c:ca:f2:
74:c0:c0:ba:8b:11:9c:9e:c8:87:75:bd:29:6e:f9:84:47:03:
0b:4c:d2:e3:ae:45:03:a0:d1:1b:60:22:28:ad:8a:0d:aa:fe:
f7:92:be:12:bf:15:3f:55:d4:26:77:a3:a9:d1:34:c5:c7:4c:
39:1f:58:7f:4d:ec:ae:56:2c:3e:7e:bd:e5:2f:be:6a:46:49:
92:08:08:26:1a:d3:34:e8:c9:5f:ac:1c:43:45:de:35:98:89:
fa:2e:a1:0a:ca:a8:b6:8b:18:1e:5b:1f:6e:f7:5d:01:e7:fe:
b2:b5:53:03:70:ff:d4:6f:78:78:14:de:8d:43:e6:9c:3f:8a:
e9:f3:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org