Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3BEBB871A111EFB567FA6F762E951A.roa
File: EE3BEBB871A111EFB567FA6F762E951A.roa (raw, json)
Hash identifier: 56gIMJ/wl9omowQHlInnZDrZ5Tre19JAuQI1D3kl7ok=
Subject key identifier: 17:9D:43:E3:84:50:37:38:06:E7:8E:51:7C:FB:50:C9:35:0D:DF:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ED88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3BEBB871A111EFB567FA6F762E951A.roa
Signing time: Fri 13 Sep 2024 07:29:37 +0000
ROA not before: Fri 13 Sep 2024 07:29:34 +0000
ROA not after: Sat 30 Nov 2024 07:29:34 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60808 (0xed88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 13 07:29:34 2024 GMT
Not After : Nov 30 07:29:34 2024 GMT
Subject: CN=66e3e9e1-1d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:7a:21:a3:86:96:53:86:0b:5b:2e:c6:53:
30:a1:38:6f:b6:a3:e2:f9:44:77:0b:b7:3f:a6:47:
f3:4b:45:82:4b:d6:44:cf:6f:3b:bb:d5:1b:34:d5:
c4:a8:2c:df:70:da:53:f3:f7:20:b9:e5:73:4f:a3:
d8:b3:00:20:9b:52:3f:c6:17:b6:8f:7b:0c:8b:ce:
ef:b9:de:76:16:c6:3d:95:79:e8:88:6a:2f:6f:2c:
5a:4a:45:5d:ac:b9:70:53:b2:76:8f:73:a4:3c:18:
0f:d0:b4:14:fc:32:14:73:5d:5b:30:c7:dd:25:13:
ac:1d:7a:9d:36:87:0c:e4:46:33:3b:05:8e:3b:96:
e1:8f:f7:6e:95:8b:e5:37:e2:10:42:06:d9:9c:b8:
4d:54:69:ba:fc:78:02:84:b5:ba:aa:2a:15:f8:ce:
5b:e5:3c:41:74:16:73:41:35:7a:fd:1c:42:9d:f0:
a2:a1:fc:7a:df:53:bf:de:9c:4f:53:29:95:99:01:
08:16:b2:c1:7b:01:6e:8c:16:dc:47:4e:2c:21:9b:
33:b2:ca:25:9a:ce:68:c0:e9:cc:f4:3d:c0:39:86:
29:22:5c:47:a1:f5:e6:9e:e7:b8:65:e3:56:e1:3f:
65:d0:04:bf:fc:a7:8e:30:be:fa:2a:6c:36:df:bd:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:43:E3:84:50:37:38:06:E7:8E:51:7C:FB:50:C9:35:0D:DF:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE3BEBB871A111EFB567FA6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6f:04:a6:0d:45:30:66:67:d5:c6:2d:18:2f:b6:1e:4b:2e:
ac:40:b7:95:8a:0f:8b:f6:fc:c2:07:e0:09:ca:bd:c9:22:80:
54:f2:32:3c:c9:db:da:30:b6:97:22:ab:dd:58:13:01:b9:06:
42:91:b1:62:84:27:c9:01:28:2c:d4:a9:a1:f4:5b:21:33:2e:
e1:71:2f:d7:10:2d:cd:f7:bb:fd:27:72:ef:d5:82:5b:c4:31:
b6:c1:94:41:5b:22:74:0b:f4:a9:96:19:52:13:e2:19:e6:af:
84:e8:a5:e0:63:5f:84:93:fe:14:31:d2:9b:50:aa:b0:d1:4a:
13:38:36:bc:1a:a0:c8:54:3f:3b:2b:ce:8d:90:f3:62:8d:a7:
26:7c:8c:c8:4a:8a:13:a8:b0:a0:2b:5c:49:15:8d:f1:bc:6e:
92:9c:ce:76:c1:d9:32:c3:2f:3d:c8:cc:60:65:5f:46:0d:e0:
9c:9d:4b:ed:75:27:3a:fa:22:a4:29:ca:07:56:ec:62:5b:97:
4a:b1:c5:49:b1:30:09:ac:bd:6f:c5:b4:0a:8b:2e:db:99:f8:
4c:6c:0c:11:2e:92:4f:a3:66:5e:70:5a:dd:67:2b:b0:8a:22:
04:99:5d:64:d9:44:d5:29:cb:69:af:f9:e6:30:f1:84:ed:ae:
20:48:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org