Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF926F9E96B511EF93F1466A762E951A.roa
File: EF926F9E96B511EF93F1466A762E951A.roa (raw, json)
Hash identifier: GJa7ct9pGb2VBfevJewfqzPTOFpAFgaWJS6Ar+QoeFI=
Subject key identifier: 11:8B:4C:92:F6:DA:F9:13:20:4C:2A:17:39:1D:A8:3F:88:AA:BF:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010425
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF926F9E96B511EF93F1466A762E951A.roa
Signing time: Wed 30 Oct 2024 11:56:02 +0000
ROA not before: Wed 30 Oct 2024 11:55:59 +0000
ROA not after: Wed 11 Dec 2024 11:55:59 +0000
asID: 63139
IP address blocks: 154.203.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66597 (0x10425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:55:59 2024 GMT
Not After : Dec 11 11:55:59 2024 GMT
Subject: CN=67221ed2-78f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:15:ea:33:27:c6:47:7f:63:c9:2a:40:08:
e2:6b:07:68:26:e8:9c:a9:97:05:f2:14:8d:00:47:
d1:77:4d:76:bc:bb:d7:d6:f2:21:14:1a:69:e5:d3:
f0:ed:45:c0:5d:b3:67:fb:4e:6c:93:cb:69:59:61:
ae:b5:11:64:5b:4a:80:09:28:ec:2b:8a:55:14:94:
a4:7b:0b:d6:bf:5c:f2:92:0d:ad:69:9e:68:05:1d:
65:13:0d:d9:41:84:3e:2d:6f:54:c6:7e:9c:4d:1f:
5a:fc:78:c2:10:2c:c3:32:f2:d3:76:57:f3:e3:c0:
23:12:12:07:c6:43:ef:5f:31:fc:ee:ad:df:5a:26:
b1:e2:12:cf:79:d9:e0:bd:b3:a2:75:db:76:6d:a2:
42:80:32:d5:26:99:3c:a6:c6:5c:3d:73:a3:ac:68:
ea:80:af:84:76:af:e8:23:86:10:d9:a8:26:8c:48:
0a:c2:d5:6e:21:c6:3d:df:53:d9:6d:32:88:38:92:
bf:95:3a:2c:0f:32:09:ac:4b:72:d3:94:ae:3d:61:
b4:88:c1:50:e1:04:94:76:6c:f1:b6:8f:72:98:74:
6f:b1:6f:48:c3:97:b0:b1:22:4b:76:79:c3:3f:24:
03:c3:b6:80:d8:8b:7d:6f:24:52:72:9b:f1:c8:8b:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:4C:92:F6:DA:F9:13:20:4C:2A:17:39:1D:A8:3F:88:AA:BF:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF926F9E96B511EF93F1466A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/19
Signature Algorithm: sha256WithRSAEncryption
54:57:b1:93:07:13:d2:66:1c:af:51:86:19:01:25:ce:a5:05:
64:fe:05:2e:d4:ec:c6:3a:e6:8a:64:9e:88:b4:a4:15:6e:2a:
ad:9f:b6:88:d5:a3:db:2b:5e:87:d8:67:e3:99:b6:bf:98:f0:
ac:d5:8b:0a:90:20:83:a6:1e:12:c5:da:41:9a:b5:c7:59:ce:
ec:d5:9b:da:cd:3e:34:c4:f3:0e:98:99:7d:39:1e:36:99:32:
c5:6c:44:e2:1d:93:27:a7:a6:3b:e4:d6:c5:e8:92:31:99:70:
d8:37:20:2c:47:b4:f4:17:77:98:b5:4d:31:7b:57:52:a5:73:
6e:ec:ec:37:7f:51:a9:19:45:57:b1:8e:62:45:18:f4:2e:d6:
84:74:35:d0:f6:b2:9d:31:ec:71:d9:6a:b8:84:30:5c:f6:0c:
56:64:45:cc:4b:69:f4:6a:ba:68:3c:88:75:a1:bf:2e:e4:85:
91:c7:ac:1c:fc:17:4e:63:7a:2c:a7:b6:38:98:e5:22:c5:bb:
31:32:de:8a:cb:8f:39:cc:e6:ed:5f:97:d1:96:ec:23:55:10:
c0:f6:c9:29:20:bc:ab:53:10:f0:3b:0c:7d:53:58:d1:25:4d:
21:25:87:e7:47:ef:d7:c1:82:99:f7:56:97:cf:19:ad:90:1c:
6f:6d:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org