Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7B5B4CA64811EF86156AAF762E951A.roa
File: ED7B5B4CA64811EF86156AAF762E951A.roa (raw, json)
Hash identifier: IHaCO+TD5cSMVgFcDMFvc+tyK94V6kme0GUJjP45Z/Y=
Subject key identifier: 41:6B:BE:CD:CE:C5:76:85:46:1B:27:70:30:F1:3F:28:AB:E9:53:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7B5B4CA64811EF86156AAF762E951A.roa
Signing time: Tue 19 Nov 2024 07:36:02 +0000
ROA not before: Tue 19 Nov 2024 07:35:59 +0000
ROA not after: Wed 04 Dec 2024 07:35:59 +0000
asID: 57456
IP address blocks: 154.213.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69356 (0x10eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:35:59 2024 GMT
Not After : Dec 4 07:35:59 2024 GMT
Subject: CN=673c3fe2-3b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:12:ff:d9:ea:f1:6b:9f:a9:b3:b3:f0:4a:
d2:e1:82:66:9a:be:5c:31:9f:81:78:a9:78:57:cd:
f6:ea:f5:f5:e7:c8:fa:bf:cb:84:12:2b:c6:7b:9a:
8c:cc:02:24:50:bc:82:4e:30:63:71:2b:0e:cd:78:
a9:be:43:50:78:af:4a:74:71:44:35:b9:35:fe:fc:
c2:a4:51:9c:c8:98:2b:d1:d5:60:f7:c1:f2:1a:b5:
4d:ea:57:e8:57:97:48:80:9b:fa:89:2e:1b:d0:28:
d9:df:63:5f:10:27:31:43:45:08:a6:7c:21:10:d7:
0c:26:95:c8:d2:ff:55:d2:d1:c1:ad:f1:53:51:2f:
0b:32:3d:6c:ca:73:8a:74:49:36:9e:fe:84:b7:72:
2e:81:79:61:07:66:a8:51:8d:fe:8c:d1:24:6e:16:
f4:ba:e4:2c:86:12:e8:31:e8:02:bf:b9:56:cc:62:
5c:27:06:92:e4:2d:df:d0:36:32:29:86:f5:5d:0d:
bb:fb:6d:88:f8:76:5b:0c:6c:d4:a3:ad:3e:ba:42:
d9:f7:13:fd:19:2e:2f:87:8d:dc:e0:46:e7:82:e7:
2c:65:9e:b0:2f:19:7f:52:b9:20:3e:6d:ad:3d:01:
e4:60:5d:91:c2:26:22:93:f2:d9:10:dc:c1:b0:8d:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:BE:CD:CE:C5:76:85:46:1B:27:70:30:F1:3F:28:AB:E9:53:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED7B5B4CA64811EF86156AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.160.0/23
Signature Algorithm: sha256WithRSAEncryption
74:45:38:54:c0:42:ca:35:93:bc:e3:42:3b:20:25:b4:b6:35:
c3:0d:13:ab:c3:69:b1:1f:27:bf:3e:5e:f4:a0:6b:bb:e3:91:
02:80:6a:3d:26:e8:2c:87:f0:d1:8b:f1:94:17:d1:8a:86:66:
31:39:4a:a1:c5:af:7d:a5:08:36:23:fa:21:ee:dc:f3:cb:74:
b0:a4:aa:b9:3b:e3:66:ec:e4:13:72:f6:18:a9:35:a4:8b:b9:
20:1a:8f:d0:02:0e:43:a3:fe:40:8c:3f:e5:07:49:b7:9f:9e:
3c:be:48:e8:26:07:26:d8:20:9b:9c:4e:1c:c2:9c:af:40:ca:
d7:26:e4:9f:b6:7f:e3:86:a9:7f:ec:2a:e6:75:13:2e:e9:ad:
1b:83:30:49:6b:25:ca:58:56:87:47:3c:4a:03:ef:e1:c4:a0:
79:ce:73:68:ee:45:f2:35:30:56:21:71:be:9e:16:a8:eb:68:
d5:21:ca:59:b3:ab:c7:fb:1a:db:f1:b5:dc:64:6e:6e:db:85:
7a:a8:0c:51:d5:4f:d1:b7:c2:ed:60:6e:d1:43:2f:29:fc:13:
38:b1:47:d7:5b:9b:d9:0e:67:33:1a:bf:ca:ba:28:ac:29:59:
26:48:85:6b:48:88:3c:a0:01:7c:24:df:f5:25:13:21:be:ba:
58:af:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:45 2024 by rpki-client on console-ams.rpki-client.org