Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECEEA52F47F11EE8EBD56C1775412E6.roa
File: EECEEA52F47F11EE8EBD56C1775412E6.roa (raw, json)
Hash identifier: ofEVbqq/UFNf6Wl0m01cDH2o11UvYM7tjPY+5bwz+PQ=
Subject key identifier: D2:24:A4:EA:EE:DE:6B:C1:5B:AA:23:B8:6D:D0:A3:8E:4F:6F:71:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECEEA52F47F11EE8EBD56C1775412E6.roa
Signing time: Sun 07 Apr 2024 01:41:20 +0000
ROA not before: Sun 07 Apr 2024 01:41:17 +0000
ROA not after: Mon 13 May 2024 01:41:17 +0000
asID: 138915
IP address blocks: 154.206.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43432 (0xa9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:41:17 2024 GMT
Not After : May 13 01:41:17 2024 GMT
Subject: CN=6611f9c0-4d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:ab:e3:01:e6:15:53:ba:b2:7c:3b:7c:5e:
e4:95:46:20:82:77:95:4e:01:40:63:a8:e5:10:9d:
f9:d4:1f:cc:28:14:ba:86:f9:98:2b:fa:be:93:28:
81:9f:f5:d0:94:e8:e0:5b:83:1e:5c:dc:3b:b5:f9:
e1:91:a7:3d:66:2c:6e:d2:b8:dc:5b:b6:72:7e:22:
1e:4c:df:9a:1d:f6:c3:31:d7:25:11:07:0f:55:b9:
0d:f2:b5:f2:30:e1:cd:75:47:1c:bb:91:d7:eb:32:
3c:6b:a6:6e:1c:2e:59:60:46:a4:01:71:c2:9b:fe:
f1:25:0e:fd:96:31:e4:01:63:1a:bf:21:11:2f:0f:
b9:b2:ae:e1:86:f1:af:4a:f9:98:94:2e:eb:dc:c3:
66:b2:de:a7:50:10:10:ff:9d:cd:d4:dc:06:81:c7:
63:20:57:9a:3a:53:36:b9:bf:b7:09:3a:c6:b9:ca:
4d:c6:25:f8:a3:3a:59:f3:ff:e6:b9:2b:00:ab:56:
10:fb:91:f7:05:40:78:c8:80:33:e9:20:0f:9b:74:
7e:dd:c1:02:c9:9c:38:70:75:a4:cf:6e:64:f1:06:
2e:8f:6e:bc:2d:c6:24:c1:8d:d3:2b:dc:7d:0f:c2:
ed:66:24:8f:70:06:f7:b1:d9:ef:44:2e:62:ff:92:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:A4:EA:EE:DE:6B:C1:5B:AA:23:B8:6D:D0:A3:8E:4F:6F:71:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECEEA52F47F11EE8EBD56C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.104.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:77:c4:da:fe:60:87:93:22:a9:02:86:bf:b7:1b:48:97:bc:
aa:e1:ba:83:8b:cf:7a:06:67:e1:96:b0:77:2f:63:4f:f9:c9:
ad:8d:a7:26:9e:05:1a:b5:cd:f6:9a:47:69:8a:82:c1:8c:40:
ec:d6:e3:79:cb:38:1b:fb:f5:40:89:0a:8f:03:a1:45:3a:be:
a7:f8:8f:68:a2:29:f8:63:c7:97:c1:1c:d6:40:00:a6:85:c4:
c9:59:71:a3:53:78:a5:ee:b2:00:0d:d4:70:b0:1a:54:75:fa:
eb:30:26:b1:71:55:11:19:82:9a:4e:09:cd:b4:2b:cd:8e:cd:
38:ed:a8:e3:3f:d2:a3:4f:8c:d7:a7:7e:72:a6:3d:8b:46:e8:
b8:02:92:dc:7c:d9:2e:96:ab:8e:d0:bc:1d:65:9d:d1:fd:c5:
65:4d:65:dd:83:f2:e8:ce:7d:25:b4:3e:9f:08:92:43:70:c6:
89:d6:1c:22:10:4e:85:21:00:07:79:f3:89:e0:d6:e8:07:d7:
9a:d0:f7:65:0d:29:4d:60:cf:52:fe:33:5f:c0:70:09:8a:bc:
e0:b8:d6:2b:8c:65:4b:51:f7:8e:8d:ed:19:b3:f1:36:98:6f:
d6:ff:90:11:a8:b2:97:83:79:81:db:08:d5:58:6c:bd:f5:d0:
11:c9:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org