Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1C87F832BA11EFBC8022AD762E951A.roa
File: EE1C87F832BA11EFBC8022AD762E951A.roa (raw, json)
Hash identifier: LLv/9nQPEsKgYGn4CKlsZC+5KMiAlHhCNFErSqzza+4=
Subject key identifier: 03:51:D8:A0:8A:8D:88:03:91:BC:DE:4D:AF:49:6A:AC:6D:4F:25:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C653
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1C87F832BA11EFBC8022AD762E951A.roa
Signing time: Tue 25 Jun 2024 06:19:51 +0000
ROA not before: Tue 25 Jun 2024 06:19:48 +0000
ROA not after: Fri 03 Jan 2025 06:19:48 +0000
asID: 40065
IP address blocks: 154.214.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50771 (0xc653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:19:48 2024 GMT
Not After : Jan 3 06:19:48 2025 GMT
Subject: CN=667a6187-67c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:6c:4c:2a:c0:a7:c7:0e:30:ef:b8:dd:10:
54:ff:ca:b1:9b:e2:04:17:3b:1d:76:4c:cb:88:b8:
29:27:d4:ad:65:8f:b2:60:c2:99:02:04:ed:9c:75:
82:a4:2f:2f:8e:bb:be:b8:00:9a:7e:b8:79:0d:ff:
fa:eb:44:61:9d:2d:ce:d4:66:64:3c:7b:6d:c4:ca:
b6:a9:e4:a2:21:06:7e:d4:be:6f:02:8e:67:4a:ce:
b9:e3:d6:e6:a8:af:24:65:3d:37:bf:34:e8:2f:c7:
fc:7a:49:14:fc:e1:7f:36:31:03:9b:ea:c3:42:4f:
e6:72:99:9c:cc:fa:39:4a:d1:6f:e0:95:78:4e:eb:
68:1c:08:00:78:96:a8:ed:56:01:9a:7e:58:b8:ef:
01:0f:3d:91:a8:b2:39:4a:79:12:bf:32:d0:ab:04:
52:37:8c:a5:48:de:52:c7:db:6b:3c:bc:fc:ec:8a:
02:35:b8:36:63:ee:d0:d0:90:14:18:be:98:d8:43:
a6:79:d0:20:da:00:4b:d8:31:fd:86:94:81:c1:b7:
49:55:51:aa:f9:57:0b:4b:cc:d1:89:5c:33:fe:bc:
a7:58:b3:90:af:e1:28:a0:96:43:7a:bb:4d:9d:14:
6d:66:5e:e7:fa:d0:a5:e0:61:97:6c:8d:05:5c:a4:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:D8:A0:8A:8D:88:03:91:BC:DE:4D:AF:49:6A:AC:6D:4F:25:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE1C87F832BA11EFBC8022AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:af:54:2d:09:c5:fa:44:1f:5d:4d:f8:bb:17:d1:d0:6d:ec:
f9:59:d9:ec:f5:ab:59:8d:01:01:44:0d:8a:03:19:6e:c8:11:
85:cc:75:92:ad:31:f9:b3:70:b2:91:5d:38:d2:65:6e:d2:b1:
b1:7c:55:68:69:96:cd:1e:1b:04:2e:c7:b9:88:a0:1b:82:9e:
5f:bc:7d:24:60:41:7b:14:35:9f:07:42:c1:d7:66:b4:2a:21:
c8:01:30:ff:b4:b7:0c:96:3d:bc:96:01:b9:76:4d:17:ff:d8:
eb:99:19:03:db:7e:68:ab:ab:53:56:27:b0:52:ec:8b:02:44:
ac:83:72:ce:b7:c0:37:d8:1b:94:17:43:b9:32:44:7e:8e:cc:
de:09:4d:89:61:e3:c0:6b:e4:62:f3:fe:bd:66:88:80:02:11:
42:f1:00:21:03:cd:6e:13:6a:3f:b3:a7:16:76:bc:3f:b0:79:
70:f5:63:83:bc:1b:20:86:d5:55:89:e8:d6:6f:75:ea:a1:f3:
76:b0:7a:3d:25:1b:ef:26:fd:5f:84:fe:ac:ac:8b:fc:9a:67:
f0:ce:78:e2:0c:f3:d8:1d:c5:ea:4e:7b:3c:88:b7:8b:6a:f3:
33:1d:85:a0:84:9d:2a:3d:5f:e4:59:ba:40:6a:3a:08:ac:9b:
38:15:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:45 2024 by rpki-client on console-ams.rpki-client.org