Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C5CF5187E3D11EF948215AA762E951A.roa
File: 0C5CF5187E3D11EF948215AA762E951A.roa (raw, json)
Hash identifier: fj5OOZw0L7Z3WIwKeUpj7boHUnWTt9tGTXFnq29P4sI=
Subject key identifier: 82:44:20:57:A4:67:62:65:1B:3C:95:DB:7B:4F:F0:1B:3F:61:F2:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F496
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C5CF5187E3D11EF948215AA762E951A.roa
Signing time: Sun 29 Sep 2024 08:30:14 +0000
ROA not before: Sun 29 Sep 2024 08:30:10 +0000
ROA not after: Mon 30 Dec 2024 08:30:10 +0000
asID: 17561
IP address blocks: 154.210.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62614 (0xf496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 08:30:10 2024 GMT
Not After : Dec 30 08:30:10 2024 GMT
Subject: CN=66f91016-5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:99:e2:52:b4:26:68:e1:73:87:aa:ac:97:
83:6a:99:5d:55:3e:11:b3:bb:dc:62:c6:10:02:10:
ea:10:88:91:7f:4a:1c:63:98:56:91:76:df:82:32:
bb:77:52:32:ab:f1:2e:23:7a:e5:03:a3:ed:e4:54:
b7:b4:f7:94:12:06:0b:21:38:74:c2:1f:73:60:39:
8e:f9:ad:b8:96:81:52:83:b8:bd:b5:3c:32:6c:62:
fa:e0:e1:24:25:83:60:99:54:86:ab:9e:20:0a:06:
5b:2f:a1:ce:9a:66:bb:7f:2a:42:54:f5:cd:35:1a:
b4:f5:19:37:05:33:c1:3d:e3:2f:91:2e:e4:c2:31:
f1:98:af:bd:24:ba:6f:fe:02:95:14:42:f1:0d:83:
77:a4:ed:b5:1f:c3:2c:e0:e1:db:bd:1d:ef:88:49:
91:60:33:bc:8c:94:c1:4d:f5:56:0b:8c:39:1d:4e:
7f:d7:7c:7e:8a:09:bd:a4:bf:ea:37:3c:17:22:b3:
b4:f8:a2:2f:2b:2a:88:36:46:1c:a8:5e:37:90:af:
81:65:63:09:55:be:d2:8e:a1:2e:55:93:8f:91:8a:
50:a7:82:a5:88:48:ee:55:00:17:9c:c0:94:0b:a2:
a3:c3:8a:1d:f2:bc:8e:6e:cd:e7:c8:1c:da:47:28:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:20:57:A4:67:62:65:1B:3C:95:DB:7B:4F:F0:1B:3F:61:F2:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C5CF5187E3D11EF948215AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.13.0/24
Signature Algorithm: sha256WithRSAEncryption
18:35:84:d4:d2:b7:d9:8e:fd:c4:9a:ef:8b:c2:57:08:71:70:
8a:8f:83:ed:bb:23:bd:04:1a:26:27:ac:a2:d3:69:24:91:45:
23:1d:70:99:23:a5:4e:eb:26:97:1c:94:3b:94:4a:b0:88:27:
b2:ff:8b:bf:03:a2:18:57:fe:a2:9b:6f:ec:c3:7a:cb:7c:22:
c4:e3:a1:c2:3a:32:73:a4:e1:e6:91:97:7d:e4:2e:df:81:d8:
2b:12:3d:4a:51:0d:66:f0:d6:21:c6:f7:7a:07:fe:81:bd:5e:
22:07:68:c6:cd:85:10:18:2a:07:20:cf:13:1b:67:96:8f:3d:
af:60:ee:c0:65:67:f0:39:96:52:35:45:48:be:78:d4:cd:a0:
5c:af:8a:7d:b7:c2:60:1b:43:3f:34:90:24:ef:4c:76:91:1e:
a8:c4:4c:f4:b6:29:5d:00:aa:cd:4b:b1:96:46:4b:94:8e:e1:
4a:d5:55:a5:fd:14:b8:36:c0:50:2a:8f:43:a5:3d:ae:21:ee:
45:bf:91:50:82:31:01:87:51:59:18:08:ee:59:96:47:c9:25:
18:0a:0b:20:b0:a1:7e:ea:4f:6a:b1:55:19:25:a4:db:51:5d:
53:ae:92:14:4d:a2:68:54:29:0c:da:c7:7d:88:e0:4e:89:2f:
da:89:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:58 2024 by rpki-client on console-fra.rpki-client.org