Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7E0B28736311EF83D693AF762E951A.roa
File: FE7E0B28736311EF83D693AF762E951A.roa (raw, json)
Hash identifier: LPgBP+6DNBtlpfY72kHtk9n81pjMcuVDxs0qU9CynQI=
Subject key identifier: 8E:0E:20:D8:9F:A7:A6:A7:DB:E8:B2:06:B7:92:FF:13:D8:CD:58:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7E0B28736311EF83D693AF762E951A.roa
Signing time: Sun 15 Sep 2024 13:11:18 +0000
ROA not before: Sun 15 Sep 2024 13:11:15 +0000
ROA not after: Sat 30 Nov 2024 13:11:15 +0000
asID: 142403
IP address blocks: 154.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61168 (0xeef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:11:15 2024 GMT
Not After : Nov 30 13:11:15 2024 GMT
Subject: CN=66e6dcf6-cfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:83:da:70:63:46:6a:ec:fe:20:b1:42:aa:01:
da:5f:52:aa:c9:7b:b0:d0:47:1e:7d:62:38:9f:e7:
87:86:53:47:27:aa:b2:0f:1f:1f:55:bb:f1:ef:ba:
17:d7:c6:8e:28:ed:b8:1b:60:d1:16:25:a8:8e:b2:
00:12:57:72:30:02:f2:03:16:2d:d4:e3:57:07:ac:
3a:5d:da:a4:d7:db:09:f5:5e:b3:e5:49:ef:1c:d8:
72:45:a0:3a:42:a9:e3:59:e5:7e:b6:73:00:e1:8e:
3f:db:57:88:59:4f:b4:a4:09:2d:4d:d3:b6:12:07:
fd:92:9d:af:10:4e:15:3c:6d:2b:c4:d4:f8:4c:3d:
db:7b:25:09:e8:16:a1:6f:80:3f:13:03:8f:be:93:
9a:31:20:06:c8:aa:e7:a3:7e:44:fc:e9:5d:0b:3c:
b7:03:89:ab:55:18:e8:a5:b3:4e:36:cf:e0:9f:8a:
ed:9a:23:6b:73:e0:ee:64:b6:db:ab:38:19:54:72:
18:ec:fe:56:6a:53:ca:4d:59:cb:52:04:d1:97:30:
2d:fd:a5:87:3d:7e:74:4e:d3:a3:bf:c6:e1:3b:df:
86:dd:65:f2:72:f3:d0:0f:95:76:5e:a4:06:b7:4a:
54:06:7f:9a:e1:d4:a5:a2:2e:f2:68:74:c1:d9:f9:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:20:D8:9F:A7:A6:A7:DB:E8:B2:06:B7:92:FF:13:D8:CD:58:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7E0B28736311EF83D693AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:87:0e:8d:e6:ab:be:bc:25:0f:5d:94:17:eb:36:50:53:8d:
cb:b3:7b:74:49:cd:db:ad:4b:60:48:45:d3:45:e7:9f:6d:b3:
89:89:b6:22:a4:4d:64:a9:36:6c:ab:58:1e:99:84:94:bb:87:
7a:50:15:d1:20:57:c3:ff:07:69:06:54:77:c7:92:2a:8f:af:
68:77:f5:c3:c2:f4:ba:0e:e2:af:d1:f5:4b:f0:27:b9:72:b2:
34:a6:11:a0:24:f2:53:b1:d1:22:95:ac:d4:e7:bf:55:26:af:
aa:1e:9e:a9:14:36:1b:e9:78:7d:5a:70:ea:00:0e:e4:a2:65:
b4:9f:73:ac:f2:b3:2c:af:7d:c7:13:6c:93:af:42:75:8d:49:
ff:f7:af:49:d1:8d:04:af:7b:1c:d9:08:1a:f0:84:05:3f:78:
44:23:ca:1c:e6:60:25:e6:39:74:49:da:80:af:b8:53:b9:52:
b9:03:fe:a1:be:cc:4b:ea:68:ec:b4:a8:63:63:58:ba:fe:19:
90:d1:0e:c1:df:7a:ae:e0:74:98:a8:d4:70:cf:d6:45:35:5a:
ae:7f:fc:b1:be:80:6d:55:5a:d6:d4:69:5b:af:1a:61:db:ed:
28:2d:47:d5:2c:10:49:19:87:e5:9e:60:e8:6a:54:8a:c4:99:
74:0c:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:36 2024 by rpki-client on console-ams.rpki-client.org