Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF2C628C768811EFA87969A1762E951A.roa
File: EF2C628C768811EFA87969A1762E951A.roa (raw, json)
Hash identifier: yHEhWqpdIHAatVKxKimnL1cZ0Dn7uXcHsdRJbmxmEfU=
Subject key identifier: EB:51:8C:9B:72:E2:91:DA:A4:0F:AA:09:38:36:27:81:4D:DC:E7:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F093
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF2C628C768811EFA87969A1762E951A.roa
Signing time: Thu 19 Sep 2024 13:13:17 +0000
ROA not before: Thu 19 Sep 2024 13:13:14 +0000
ROA not after: Fri 08 Aug 2025 13:13:14 +0000
asID: 133199
IP address blocks: 154.204.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61587 (0xf093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:13:14 2024 GMT
Not After : Aug 8 13:13:14 2025 GMT
Subject: CN=66ec236d-da8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:8f:09:9a:42:62:57:e8:f0:96:ac:11:80:
30:61:a6:eb:c7:3e:32:1d:3f:09:74:e5:e8:ac:bb:
0d:b0:00:d4:78:12:70:49:1c:54:f0:96:8f:b7:78:
df:b9:df:61:1f:b1:4b:e5:d2:b6:6c:d3:5d:92:34:
a3:4c:a8:da:10:44:93:32:4a:65:0b:78:bf:b4:40:
9e:b7:ce:92:86:32:db:a8:86:3e:31:bb:d5:96:c8:
4b:6d:97:24:57:22:bb:f2:a8:55:60:07:d9:62:49:
c2:b8:b5:e0:50:6a:48:5d:e3:3a:93:1b:57:02:a3:
f8:28:5f:b4:72:57:4d:2a:68:38:0b:da:a3:bb:fb:
5e:6d:f8:78:3e:d9:e1:ff:ac:99:69:3c:5c:17:ee:
a7:51:b2:7b:4c:4f:32:0d:54:ea:af:7f:57:d5:0e:
47:59:06:98:be:93:97:d0:3e:cb:5e:6a:b3:af:0e:
8c:cb:d0:0e:05:8a:13:ba:75:c0:20:ec:c3:ec:4d:
a6:0e:b3:bf:e0:59:fa:6e:1f:e0:8d:9e:7d:93:c8:
d0:fc:fc:90:f5:ce:bc:85:9a:27:cf:ce:7e:96:bf:
6b:d7:54:43:92:ac:d6:49:bb:f9:d6:20:0a:de:9d:
08:f7:7d:4c:b1:de:69:92:f4:05:6f:e4:4b:ee:80:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:8C:9B:72:E2:91:DA:A4:0F:AA:09:38:36:27:81:4D:DC:E7:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF2C628C768811EFA87969A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:3c:66:99:17:02:c6:df:53:c6:dc:45:35:d4:21:15:63:43:
51:53:52:aa:21:16:27:a5:f1:c2:c1:13:ab:1b:da:c7:a5:fe:
39:ee:fc:8c:86:9c:13:2b:8b:81:cf:9e:ee:e4:a2:ac:5c:03:
eb:4f:aa:ed:17:ae:29:7d:d3:04:1a:8c:09:a6:f5:68:e7:24:
00:6c:9f:e0:07:5c:31:c9:f7:78:ed:95:b7:eb:2f:07:a7:a0:
9d:11:68:aa:5d:07:2c:a9:68:2d:b0:31:ff:79:5e:56:9b:77:
8f:82:44:a1:0b:46:6d:67:67:a4:32:7a:41:8b:f0:5b:1d:8f:
f5:09:c2:34:ca:30:d2:a4:58:bd:38:a7:fc:62:84:95:46:ae:
80:e8:b3:37:78:0b:a4:69:3e:a0:fa:2c:ab:37:e4:2f:1a:2f:
67:e8:72:fb:4f:1d:55:3a:3f:60:4d:5a:48:ec:24:fe:5e:e7:
6a:62:03:cc:10:9a:65:67:e4:db:1b:b9:e2:16:26:d8:4c:7e:
0b:ad:ca:f7:31:4a:b8:a4:26:da:50:da:4f:ff:7f:54:6f:63:
83:1e:b1:03:19:72:ed:aa:66:9d:9a:f3:d1:2d:e0:e2:28:0e:
89:4c:d9:28:df:9b:3f:e2:44:d9:9a:a5:b3:6b:93:6d:b0:a2:
94:4f:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org