Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED3D22C951211EF87F51B98762E951A.roa
File: EED3D22C951211EF87F51B98762E951A.roa (raw, json)
Hash identifier: KgyNncDJhyRoS8vpLBecT1o814a5ba08mJpd31ntzf4=
Subject key identifier: CE:5F:80:70:4D:96:DB:23:C9:58:8A:4E:9A:B8:7A:FC:B9:46:14:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED3D22C951211EF87F51B98762E951A.roa
Signing time: Mon 28 Oct 2024 09:56:42 +0000
ROA not before: Mon 28 Oct 2024 09:56:38 +0000
ROA not after: Sat 30 Nov 2024 09:56:38 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66253 (0x102cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:56:38 2024 GMT
Not After : Nov 30 09:56:38 2024 GMT
Subject: CN=671f5fda-9fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:29:e3:16:3b:44:4f:a3:41:11:75:ab:aa:
b5:3d:d3:f5:ef:34:e7:78:86:56:ab:26:b5:57:ee:
fe:33:bf:2c:c2:70:eb:87:87:59:e7:d6:48:28:7c:
01:89:4e:e2:f1:ee:c6:3a:50:03:fb:ac:36:f7:6c:
d6:9d:72:39:a3:f9:ff:54:25:3c:0c:2d:6d:b2:54:
b5:c1:24:d1:e0:c0:eb:5d:78:f4:74:2f:76:bf:fe:
64:23:ba:d6:38:30:eb:d0:c9:d6:8e:57:0c:4e:47:
33:93:79:f5:de:1e:4a:35:37:ce:49:a9:58:24:a2:
4d:57:1e:58:5d:0e:50:3f:1d:40:50:35:6f:bd:ea:
0a:de:4a:cd:4e:e9:a5:35:f3:e9:61:3d:93:30:eb:
cd:9f:11:d4:1f:0a:20:ec:dd:44:09:79:8a:fa:cd:
8d:6d:5b:f1:dd:25:f1:37:7e:65:0c:2c:6b:a2:27:
0d:e3:72:bf:94:71:b2:5d:d5:91:22:39:2c:06:5f:
5d:53:87:e7:84:67:13:97:79:25:01:00:7b:d1:b3:
2d:10:3a:48:06:88:8e:2b:95:1d:bb:25:34:00:b1:
52:76:16:4b:17:ac:3c:ed:83:0d:67:e3:9f:9f:ed:
51:99:6f:7f:f9:15:e3:61:f9:9f:2f:e9:f4:cf:84:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5F:80:70:4D:96:DB:23:C9:58:8A:4E:9A:B8:7A:FC:B9:46:14:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED3D22C951211EF87F51B98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e2:f7:e1:5a:f5:f9:06:d8:10:72:d8:bd:83:68:63:2e:b8:
ef:df:ea:c1:cd:65:87:1f:7d:66:e5:a6:8b:48:92:21:81:b9:
e8:4d:a4:35:ac:7d:37:a6:c9:e8:a1:45:77:c5:7a:93:6f:9f:
b7:ba:01:55:35:57:79:51:76:ec:bd:78:b7:ba:65:61:be:ba:
b6:a1:67:36:2a:a7:0f:c6:ca:e1:e3:56:ba:79:02:b0:5c:45:
46:95:60:58:3c:63:91:5b:f1:ed:61:b6:11:1e:13:8a:bb:f9:
7e:09:71:05:00:ce:99:a9:dd:0f:bf:a1:1c:9c:44:e0:9e:8f:
c9:2a:c2:e8:13:93:d9:72:cb:fa:47:97:b9:e6:23:e6:55:d2:
9b:56:49:8f:8a:c3:2b:be:c8:c0:b7:25:29:04:aa:0a:be:a9:
fe:b8:52:65:cb:ec:95:ba:31:b8:ff:b0:17:a6:f4:09:01:f0:
a6:90:44:c3:5b:53:8a:93:6d:98:77:56:b2:7a:fa:49:a0:a0:
08:12:30:25:9f:48:b3:e9:55:ee:a7:01:df:41:75:64:c4:9f:
7a:04:b1:f4:d2:09:5a:c1:c2:f8:0b:98:de:01:6c:c5:ed:c9:
6f:b7:4b:94:b8:30:94:b8:af:04:24:75:64:f4:be:58:03:82:
30:53:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-fra.rpki-client.org