Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5BD42640C0B11EFAB0167FF007001B1.roa
File: C5BD42640C0B11EFAB0167FF007001B1.roa (raw, json)
Hash identifier: y38xPyPygnVt/Sza8xvwR7kE5XaeeWVS2Nhpyl+tUx0=
Subject key identifier: 92:1A:F8:8A:2D:E7:ED:AE:33:59:49:D7:A1:53:31:86:11:27:36:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B53F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5BD42640C0B11EFAB0167FF007001B1.roa
Signing time: Tue 07 May 2024 00:50:17 +0000
ROA not before: Tue 07 May 2024 00:00:14 +0000
ROA not after: Sat 09 Nov 2024 00:00:14 +0000
asID: 139871
IP address blocks: 154.197.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46399 (0xb53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 00:00:14 2024 GMT
Not After : Nov 9 00:00:14 2024 GMT
Subject: CN=66397ac9-7277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:15:2a:f6:3e:aa:99:27:eb:99:10:3c:7f:
e2:fd:69:ad:f0:de:d4:8e:64:34:34:1f:fa:01:a0:
52:ff:c5:e3:c0:89:fc:c6:3a:87:85:34:37:96:44:
e3:66:a2:0a:5b:d8:13:c1:d3:ce:73:de:ab:f3:e8:
f7:46:2d:b0:b6:33:52:1e:69:65:26:a9:79:8c:25:
93:0b:9e:91:f0:5f:23:0f:13:d0:1d:17:a1:ae:8c:
1f:8a:43:3e:4c:6b:42:bd:6b:bd:35:44:9d:fd:a2:
a2:4e:72:91:6b:5a:b2:53:0a:3a:3f:13:5f:9c:29:
6b:56:38:ca:25:3d:d8:8b:f4:cc:e9:55:64:a8:9b:
27:1f:6a:1c:dc:cc:45:f6:8f:da:ef:d7:b3:9e:e7:
53:0f:4b:97:1a:99:6a:cd:da:42:d1:b5:89:74:0a:
31:98:e5:15:87:fb:0d:5b:a3:06:4d:76:2b:48:fa:
26:0b:73:8e:28:48:eb:a2:52:1c:d5:2b:47:10:04:
dd:0b:94:78:8d:1d:a3:2f:1a:d7:f0:45:c7:35:78:
67:b1:a7:3e:ef:87:d8:ed:9c:b9:17:83:48:97:8f:
32:b7:39:2e:b7:b2:42:8b:dc:01:bc:79:28:fa:5f:
0e:9d:9f:ff:bc:c2:41:9d:f0:67:c2:1b:79:1e:69:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:F8:8A:2D:E7:ED:AE:33:59:49:D7:A1:53:31:86:11:27:36:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5BD42640C0B11EFAB0167FF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4e:5a:4c:e9:ce:9c:ce:08:4e:b9:62:5c:c2:fa:d3:96:85:
50:80:fc:1b:af:35:54:0c:cf:8c:41:bb:2e:54:5c:98:2a:21:
34:29:a4:b4:69:1f:c3:94:46:fb:2c:81:09:e1:b3:d4:6d:30:
ac:a7:3e:b0:00:b8:cd:b5:42:19:e3:33:02:60:ec:b7:ae:17:
37:17:03:d0:2b:27:e0:7a:7f:ce:83:5d:a7:47:3c:5a:b9:bc:
58:bf:92:4b:88:20:ba:70:77:e2:25:89:da:e5:0e:08:ac:37:
c5:19:76:8f:0f:fe:9b:78:7a:fa:2a:ac:1f:a4:e7:c4:ab:2b:
48:40:80:8a:f1:96:cb:4f:dc:52:11:fe:f9:67:fd:28:08:da:
ef:c9:ac:f6:36:6b:76:05:1e:42:21:ca:49:44:02:09:b7:4e:
29:86:f2:a1:40:08:20:63:77:ab:4e:bd:c7:eb:ba:cd:50:87:
e6:0e:c1:4b:2e:7a:8c:4e:69:ab:9b:6f:5d:fd:82:2d:17:e6:
0d:94:73:4a:3b:e9:ca:1e:91:04:6d:07:04:54:8d:6b:fd:a3:
18:23:65:38:05:5a:63:b6:31:0e:5e:ea:6c:cd:d2:45:d1:7a:
bf:8c:a1:a3:45:cb:c8:09:93:cc:85:de:0b:d7:3a:24:10:19:
9c:c1:9a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:30 2024 by rpki-client on console-ams.rpki-client.org