Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5A62029EAE11EFB29106AB762E951A.roa
File: EE5A62029EAE11EFB29106AB762E951A.roa (raw, json)
Hash identifier: LkKj/a0jHMgIyyhDaWIzQwFskhthj1ef6YxX0A/M1GU=
Subject key identifier: CC:EB:77:5F:E5:63:97:A2:09:BE:B7:31:B7:CF:8E:33:66:5F:BB:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5A62029EAE11EFB29106AB762E951A.roa
Signing time: Sat 09 Nov 2024 15:26:03 +0000
ROA not before: Sat 09 Nov 2024 15:26:00 +0000
ROA not after: Thu 12 Dec 2024 15:26:00 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68131 (0x10a23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 15:26:00 2024 GMT
Not After : Dec 12 15:26:00 2024 GMT
Subject: CN=672f7f0b-0444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:57:79:02:6c:64:03:58:12:90:86:8d:5c:
18:a7:79:3b:f8:15:4c:a9:a7:24:ef:94:66:b2:4f:
cd:68:5a:94:69:3d:d8:10:59:96:d1:62:13:ba:80:
ba:f3:ca:34:f4:43:f6:53:9e:07:fe:06:6d:e3:e6:
13:95:34:8f:ad:0f:5a:2d:d4:85:c3:65:96:9b:57:
b3:e5:7d:db:27:0b:ae:88:b5:fd:ca:b4:16:fb:9e:
9b:31:3a:e6:97:84:71:38:ce:02:9f:3f:13:7c:2c:
cf:d7:53:01:65:c6:d0:c2:c9:11:4b:50:1d:47:6d:
0c:8e:06:3c:76:f6:56:8a:ad:5f:ff:fb:2c:48:63:
8d:bb:49:a4:48:f0:31:01:4f:30:73:32:79:55:28:
68:22:46:33:b6:cc:9e:d2:bd:73:0b:86:30:ca:49:
dd:ae:7d:ce:dc:de:f0:36:e2:2e:4c:62:30:3f:0d:
63:ae:58:72:a2:2b:a0:50:4a:89:f6:c1:a1:ef:e3:
c1:c8:d1:b6:c5:fb:81:08:92:50:90:5e:2f:92:da:
70:00:00:61:d0:ec:29:b2:ef:6a:ce:87:18:c9:3e:
7e:1e:b3:17:e2:d0:98:ea:25:ce:42:61:16:ae:65:
4d:3f:ca:d7:26:d2:70:45:8d:a7:b3:80:96:bd:35:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:77:5F:E5:63:97:A2:09:BE:B7:31:B7:CF:8E:33:66:5F:BB:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE5A62029EAE11EFB29106AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:11:9c:19:32:16:c0:fe:47:a7:73:b6:c5:1a:e2:c7:93:96:
00:68:24:00:03:d1:f1:4a:6e:7f:71:f7:47:2e:5b:26:db:8d:
91:ec:dd:1d:1d:91:fd:73:d9:01:14:15:fc:0b:30:2a:ed:97:
d3:d7:a9:5c:ec:3d:74:fe:11:1e:5d:79:c8:1e:84:92:f1:6e:
fe:e5:71:9e:7c:6f:98:1d:36:06:05:0b:c5:8c:62:00:c9:02:
47:1e:bf:07:45:31:e9:c6:2f:ea:da:e4:3d:bd:56:e9:26:ae:
6f:34:9c:7c:88:ab:a2:dc:df:9a:5c:d3:4e:2e:67:c3:9d:31:
89:1c:4e:39:02:e3:37:a0:27:ce:9e:2b:f4:d9:86:96:f8:e1:
63:81:60:41:3c:21:1a:61:08:f9:d9:23:52:01:ae:c2:bd:1b:
83:68:2d:80:5d:79:d2:20:ef:38:92:82:eb:8d:68:b3:e5:db:
42:a6:c9:fe:61:a9:55:d3:37:3e:73:a4:85:6a:66:9a:2a:af:
20:7e:d3:22:85:48:f5:1b:5c:9d:7a:73:58:9a:86:c4:fa:3f:
16:c1:89:f0:40:c0:ae:f7:e8:34:a6:c1:34:01:cc:fc:e8:82:
85:a5:75:11:9c:38:84:f9:b8:f8:d2:f6:b9:8e:a3:42:08:cb:
1f:23:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:53 2024 by rpki-client on console-fra.rpki-client.org