Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF57B2BE96B011EFA03A304C762E951A.roa
File: EF57B2BE96B011EFA03A304C762E951A.roa (raw, json)
Hash identifier: Vy9CV8U7R2Rkxf+b3t/KvoQ1i99ms/jMsI/UY2SVbXU=
Subject key identifier: 62:3D:6B:18:87:11:20:F2:59:B1:A9:23:1C:AD:7C:EB:E4:0B:35:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0103F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF57B2BE96B011EFA03A304C762E951A.roa
Signing time: Wed 30 Oct 2024 11:20:15 +0000
ROA not before: Wed 30 Oct 2024 11:20:11 +0000
ROA not after: Wed 04 Dec 2024 11:20:11 +0000
asID: 142062
IP address blocks: 154.86.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66551 (0x103f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:20:11 2024 GMT
Not After : Dec 4 11:20:11 2024 GMT
Subject: CN=6722166e-542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:9d:14:f4:2a:35:e5:92:39:7c:29:0c:49:
95:c9:0f:7e:2e:1c:f9:ce:e4:31:b2:9e:8b:b7:0d:
51:7d:b8:53:b6:6c:f2:9c:fb:71:9e:77:1c:36:5c:
5b:b0:95:fc:e9:54:50:5c:cb:52:07:f0:8d:b2:c7:
13:1a:e5:b6:17:75:8e:e2:5b:8b:ac:0b:45:9d:42:
5e:86:ed:45:fb:ac:d6:9c:63:6e:34:a0:ab:74:d0:
47:f8:e8:21:c8:8d:ae:3b:13:9d:53:88:3c:3b:97:
f9:1b:3f:2a:d4:50:99:84:ef:50:92:45:a3:89:2e:
d6:56:7e:a9:a9:0c:65:e5:21:cd:7b:3c:9d:ee:40:
2f:fe:ff:f5:ef:0d:14:47:07:54:67:16:39:97:a7:
4b:b8:0b:41:d6:c3:cb:61:85:c1:47:b5:4e:b0:5e:
d1:33:45:dc:e9:1b:27:13:4e:fe:6a:a8:c1:ae:09:
0e:2c:66:c3:ea:ec:09:db:0a:43:c3:8d:42:65:bb:
c3:a4:11:3a:85:a4:3e:e6:e1:9e:82:88:7a:8f:e1:
0b:08:eb:83:be:08:8a:f8:b7:74:6a:0a:07:f3:1e:
a0:bc:d9:e6:2b:1f:cd:46:d4:c1:72:6d:6d:5a:89:
4b:ec:5f:ac:69:37:d8:70:6d:fb:47:16:d2:15:c5:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:6B:18:87:11:20:F2:59:B1:A9:23:1C:AD:7C:EB:E4:0B:35:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF57B2BE96B011EFA03A304C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:54:2c:91:ee:69:ad:63:7e:ed:2a:9b:ec:2f:1c:3a:c9:41:
52:fa:28:73:c8:8f:17:b1:f8:4f:e3:0b:74:56:f4:ba:f5:d5:
f8:64:01:14:a2:64:2f:ad:b6:af:4e:7e:4f:e4:5f:d2:20:04:
66:f3:4f:6f:85:91:02:72:a2:2a:ae:5f:aa:e2:66:fa:98:44:
1a:56:5d:c8:d5:5e:f6:35:1a:87:4a:8d:2c:7d:13:50:fe:e8:
64:f4:a1:b4:38:61:c3:99:42:07:78:03:4c:32:aa:32:00:22:
62:79:15:7c:9d:f3:1d:87:d4:ae:3b:bc:5b:4c:db:7a:c1:66:
7d:85:48:73:c9:3b:39:b0:ee:82:21:56:0c:8d:3d:82:16:23:
69:1a:88:5a:b3:0d:6b:9a:2b:d9:36:03:45:91:19:62:08:bb:
fe:5a:21:76:9f:5d:a5:b5:fb:50:d2:1f:2c:2d:93:51:a9:20:
f6:97:e8:71:48:17:88:d4:e5:b3:db:5b:83:3c:28:dd:76:b2:
23:b7:de:da:c5:a7:82:2b:c9:b3:98:7b:ec:ea:d1:94:b5:6e:
eb:6e:91:fb:b0:4b:33:9d:57:0f:48:aa:2a:91:1f:c6:04:1e:
51:e6:d1:a9:01:51:2a:e1:34:56:30:5d:27:f1:00:23:f3:02:
a2:54:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org