Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE55255AE4EE11EE9283E49A775412E6.roa
File: EE55255AE4EE11EE9283E49A775412E6.roa (raw, json)
Hash identifier: /Dht4qjY6gPRZWkxV0lZica3S/vjAq9D8ibpbF0hrDI=
Subject key identifier: E9:1B:19:6F:69:CD:60:83:4E:3F:A0:71:89:67:26:D8:09:35:EC:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A297
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE55255AE4EE11EE9283E49A775412E6.roa
Signing time: Mon 18 Mar 2024 06:15:35 +0000
ROA not before: Mon 18 Mar 2024 06:15:31 +0000
ROA not after: Sun 21 Apr 2024 06:15:31 +0000
asID: 272367
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 06:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41623 (0xa297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:15:31 2024 GMT
Not After : Apr 21 06:15:31 2024 GMT
Subject: CN=65f7dc07-2faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:3e:03:28:50:66:42:cb:1e:7e:9c:6a:8f:
92:c6:79:78:3f:66:60:8a:6f:0f:72:c3:0a:9f:6f:
06:db:bf:de:e8:ce:b1:45:61:0f:89:4f:f5:c0:84:
c2:22:4e:93:00:69:6c:63:61:6a:b4:c0:89:a9:e3:
aa:d7:7e:89:8f:17:69:b7:f3:1a:54:a5:6a:03:e9:
5b:1f:ee:5c:15:16:d1:f5:d0:5e:58:84:2a:60:c3:
40:2d:d8:03:47:1e:68:71:72:f0:f2:8a:7d:c0:c9:
d0:d9:c9:c8:9a:5a:c7:10:f3:26:2b:d6:f8:62:e6:
b4:23:03:a5:cc:99:15:43:ca:79:be:37:d9:88:c6:
de:5c:88:9e:0f:ac:a0:a6:5f:bc:43:2d:00:ee:57:
12:fc:86:96:73:38:e2:3d:5f:94:3a:e9:06:17:07:
8d:9d:09:dc:5e:c3:07:85:45:7b:48:60:8e:d4:a4:
68:e7:aa:ef:57:df:e7:42:c1:db:38:77:cf:d6:31:
cb:7e:a9:32:b2:02:58:27:fd:d7:f6:c7:20:12:1e:
ec:fd:0e:69:01:53:e8:b4:76:f2:fc:d1:2b:0c:25:
07:ba:23:17:9f:dc:35:4b:7b:00:22:b4:99:56:bd:
06:3d:a1:b3:41:37:85:ac:29:ac:92:3b:8a:5d:91:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:19:6F:69:CD:60:83:4E:3F:A0:71:89:67:26:D8:09:35:EC:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE55255AE4EE11EE9283E49A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:40:be:6f:b8:8d:13:2b:6c:5b:07:db:30:00:43:b8:6f:
03:67:5b:c4:20:dc:c6:25:01:8b:c0:ce:6e:5b:09:36:1b:03:
7a:54:9a:2b:1d:2c:db:de:72:cb:15:1e:1e:52:d8:cf:97:f0:
01:62:6f:fa:da:65:e9:1e:c1:0d:70:62:98:ec:bf:36:54:ad:
4e:14:22:2a:16:54:5a:78:cb:93:c9:9b:2b:ea:9d:59:91:5a:
0d:4d:3f:41:c2:06:99:77:ba:55:b6:a3:f0:0d:de:e8:0f:60:
22:70:ca:a5:67:c0:f4:c3:ad:ed:9d:25:77:ee:d9:6f:62:1e:
e3:11:28:e3:5d:c0:f4:30:1f:96:66:7a:c1:73:60:43:98:b6:
6f:95:9e:02:ed:48:ca:31:47:eb:a7:c0:7f:a3:de:ae:c5:c4:
fb:90:70:df:42:b0:64:63:36:5a:45:59:41:b6:cd:29:23:6c:
24:99:28:52:75:dd:bc:07:86:90:ea:31:6f:7b:ee:11:4a:de:
60:75:94:18:02:98:99:7c:8d:1b:33:74:c4:17:dc:6e:a8:7e:
bd:9c:73:aa:63:b3:b2:76:77:e0:63:ef:e3:89:89:02:c8:93:
38:57:b3:3f:e8:dc:6d:55:00:0f:0f:4d:e2:a5:50:0f:98:00:
a9:b7:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org