Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130C69A9111EF9B448145762E951A.roa
File: EE6130C69A9111EF9B448145762E951A.roa (raw, json)
Hash identifier: uFt9IYu+JcwMwRRXjUOhRQBlA63FYEBOg7tbFsjInR0=
Subject key identifier: BF:02:12:2F:6A:CE:6A:86:30:5C:9A:02:92:3E:49:4E:AF:33:C0:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010674
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130C69A9111EF9B448145762E951A.roa
Signing time: Mon 04 Nov 2024 09:48:23 +0000
ROA not before: Mon 04 Nov 2024 09:48:19 +0000
ROA not after: Wed 04 Dec 2024 09:48:19 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67188 (0x10674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:48:19 2024 GMT
Not After : Dec 4 09:48:19 2024 GMT
Subject: CN=67289867-3dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:45:42:2d:a0:ca:0e:6f:8f:15:6c:00:41:
26:42:f6:0e:0c:1d:78:7a:53:14:6a:b2:66:54:21:
bc:03:47:f4:15:0f:a3:7e:2e:87:bf:a1:9b:12:d5:
8d:e1:8a:01:57:cd:fd:67:6d:6f:7c:ce:73:79:31:
d2:fd:99:90:63:39:c2:a4:eb:5b:79:f7:ba:ff:b7:
4d:d7:9d:dd:4d:6c:3e:2f:c8:58:67:d2:eb:92:0e:
06:6a:cc:1e:59:3d:9f:05:ca:21:00:d0:46:de:de:
c8:de:dc:ce:e2:9c:61:7d:05:5c:73:13:ea:57:8a:
44:93:b2:2f:77:92:da:10:6f:8d:5d:44:8c:53:d3:
ff:fe:70:7d:b7:3c:12:1e:e5:a7:38:c8:3d:cb:96:
d5:b2:88:39:71:c5:7c:12:23:5b:b3:3f:f3:6a:0c:
bd:32:91:bc:9f:b2:d4:73:b5:59:f8:eb:6c:8b:a4:
1f:7a:23:d6:55:34:8a:02:2a:b3:08:e9:a1:58:48:
2b:0b:3b:b9:31:34:1a:c3:17:7e:fa:25:7b:3e:74:
50:fe:e2:69:fc:cb:5b:d9:1b:f1:1b:59:72:a4:ec:
0e:33:cb:6e:82:c5:91:31:a2:01:50:e0:c2:65:3b:
73:84:47:2b:8a:54:0c:9d:ed:02:7e:05:84:4d:fc:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:12:2F:6A:CE:6A:86:30:5C:9A:02:92:3E:49:4E:AF:33:C0:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE6130C69A9111EF9B448145762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:83:0b:8d:c6:b2:98:88:2a:2c:f7:b8:af:04:d9:71:dc:15:
e9:e2:b5:25:62:0a:c2:2a:b2:d8:02:14:52:65:d4:24:9f:00:
e8:eb:bf:fd:eb:e3:ce:aa:d0:a0:9e:1f:9b:51:e2:12:62:0a:
32:f7:ff:b1:c2:0a:4b:81:30:99:3c:bb:d8:a2:10:b9:6c:c1:
0a:55:9b:72:99:f2:da:50:6f:a3:84:37:22:31:27:86:b7:9f:
a3:39:cd:f3:7f:de:5b:72:1a:08:0c:a8:12:bc:39:7b:f4:5d:
a9:88:a6:2d:3b:9d:43:a9:50:8d:6b:a7:c6:24:ac:b4:63:01:
58:92:2a:27:3a:62:8d:0e:d3:5c:0f:86:b2:c6:b5:f5:ab:3e:
21:cf:1f:f4:2e:55:31:9a:15:ad:e2:cf:14:6a:97:a2:81:95:
89:10:93:eb:78:53:d5:6a:be:75:01:08:87:eb:40:ad:ad:95:
7b:4e:b9:30:41:0a:5c:74:72:b0:19:d0:bf:51:62:0a:4d:53:
c9:23:3d:aa:18:5a:f3:53:aa:1d:8b:ae:01:44:20:65:4d:c5:
41:35:9f:14:b4:ac:63:6c:07:6f:6a:1e:58:f3:26:0b:03:bd:
92:1f:6b:e7:8b:b0:f3:55:fa:1a:63:e4:cd:10:22:71:8d:6e:
46:2b:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org