Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE13DB80B4311EF8E36161B017001B1.roa
File: 5CE13DB80B4311EF8E36161B017001B1.roa (raw, json)
Hash identifier: Fs5LySsCzZdrT74ZVJB7uZrQJrYAmZMLj+wMUlZ5iuA=
Subject key identifier: 1B:79:61:7C:98:E9:B8:DA:13:E6:63:9B:E3:60:7E:52:8F:34:D2:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B426
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE13DB80B4311EF8E36161B017001B1.roa
Signing time: Mon 06 May 2024 00:55:42 +0000
ROA not before: Mon 06 May 2024 00:00:39 +0000
ROA not after: Sat 08 Jun 2024 00:00:39 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46118 (0xb426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 00:00:39 2024 GMT
Not After : Jun 8 00:00:39 2024 GMT
Subject: CN=66382a8e-d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:fb:3e:2f:cc:2e:e6:fd:2c:c1:e9:c6:1d:
2b:eb:2a:bd:d6:f8:6f:f0:7d:30:c0:4e:08:d2:1e:
6d:ce:d4:db:42:fc:d0:4c:a9:7b:3a:7f:87:eb:f0:
c7:f8:3a:33:cc:6e:93:30:ee:59:13:d2:95:00:18:
95:f6:c8:3a:26:64:6e:57:8c:bd:b3:a0:fd:ed:1e:
71:ff:02:d7:98:dd:98:82:0a:81:e6:9b:ff:5d:92:
23:a3:6b:df:0b:c1:3c:c6:3c:d4:d8:46:aa:af:78:
97:25:ee:a8:b0:6c:89:06:27:d6:76:93:de:4f:fb:
2f:c5:9a:8f:e4:ac:47:d1:17:6b:6d:86:06:de:64:
ea:4f:d3:34:62:09:c9:7a:0c:24:81:f2:d1:2d:db:
39:13:00:dd:63:19:69:2a:21:54:8e:cc:7a:c2:39:
ae:fe:b2:19:d5:ca:f2:c3:a3:11:db:c5:ae:30:df:
ed:d9:57:b8:03:dc:e6:77:ef:5c:b3:01:71:11:7d:
99:e6:85:5a:d8:f7:29:b4:7b:b7:e4:08:7a:58:2e:
b4:e2:fd:f0:fa:fb:db:1c:3a:d0:54:f8:58:b1:58:
24:b7:4d:f6:3d:c9:93:6b:8c:a9:43:04:e4:dc:6d:
a1:77:fb:34:8c:4c:bb:20:db:c9:93:75:25:f7:ee:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:61:7C:98:E9:B8:DA:13:E6:63:9B:E3:60:7E:52:8F:34:D2:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE13DB80B4311EF8E36161B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7c:a7:65:d3:aa:f8:61:99:bc:61:7d:02:1b:57:a9:72:24:
2b:da:b8:6d:1e:72:6a:26:b3:f8:a8:91:61:45:dd:cc:95:51:
34:f2:ce:9a:de:3c:4c:2c:1e:c8:3b:8d:21:05:6a:71:28:06:
60:54:ae:39:8f:6f:68:f5:31:a5:d9:48:1a:06:6e:15:f6:e8:
92:37:08:18:40:3d:79:a4:28:a6:38:f8:2f:1e:a4:c6:d5:58:
58:9d:30:7f:f5:40:63:c5:b5:7c:6c:62:5f:8a:b2:d1:54:f7:
ff:8e:1d:71:3b:d5:a6:09:1d:72:15:5d:1c:d9:53:75:1c:1d:
07:a4:ff:db:ec:7f:68:4b:09:07:56:4f:4b:91:97:43:d9:f9:
c4:1c:ab:ae:22:70:09:96:24:9d:7e:39:57:48:d2:b8:17:d1:
0c:47:48:a3:6c:d1:8a:9c:09:e3:49:07:84:8a:75:77:5a:0c:
42:c5:51:75:79:64:82:60:07:c9:2d:38:2f:e1:e6:db:c3:5c:
f4:fb:d1:a5:80:03:26:f0:13:f3:c4:5d:fd:81:88:23:ab:0f:
92:9b:26:a7:7b:2a:22:f8:78:c7:11:03:01:2c:72:2f:79:74:
54:1f:34:7a:80:06:00:d8:37:f7:fc:b6:be:fb:2f:c0:4a:83:
44:0b:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:15:21 2024 by rpki-client on console-ams.rpki-client.org