Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40132B52A71E11EF8776C569762E951A.roa
File: 40132B52A71E11EF8776C569762E951A.roa (raw, json)
Hash identifier: 5KcbntWXV3tMkd/e4ya7HyPr5CiSqU8C4Lv092Up2es=
Subject key identifier: EA:A8:CE:33:AB:70:E5:C2:D4:AD:0F:40:A9:10:89:8D:E7:44:A8:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40132B52A71E11EF8776C569762E951A.roa
Signing time: Wed 20 Nov 2024 09:03:04 +0000
ROA not before: Wed 20 Nov 2024 09:03:00 +0000
ROA not after: Thu 05 Dec 2024 09:03:00 +0000
asID: 5065
IP address blocks: 154.94.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69455 (0x10f4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:03:00 2024 GMT
Not After : Dec 5 09:03:00 2024 GMT
Subject: CN=673da5c8-366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:59:fb:7f:c2:62:e3:c4:dd:11:c2:56:aa:
f7:bc:b4:f7:67:4e:48:53:4d:41:e5:2d:c1:1c:37:
91:5d:32:29:65:70:04:1e:6e:c9:c7:a4:32:32:f0:
d0:4c:59:51:c4:f2:8d:26:b7:fc:95:29:a7:02:94:
e6:e0:5b:df:8f:ce:0b:f4:ea:f5:71:04:03:85:ea:
6c:ff:80:84:e2:6d:d8:5a:c1:3c:34:57:5a:3e:1e:
fb:0d:80:04:ce:30:d8:16:e2:09:f7:66:b9:85:9d:
c0:67:e9:51:ba:76:bc:d8:c4:c2:71:0e:71:b6:83:
df:37:30:d4:d8:f6:ae:55:05:a1:0c:63:e8:d4:d5:
12:3a:2f:fc:67:b3:3d:83:75:a0:06:19:ad:20:97:
e1:14:e4:9e:31:c4:be:76:f7:59:6c:0b:b2:2a:bd:
c8:34:82:ed:a1:93:d5:84:33:2b:2d:aa:27:3e:e6:
d3:b8:8a:d4:3b:6d:62:ee:b1:71:fe:b7:0f:a9:84:
62:47:f6:5e:e3:3e:10:1a:17:57:ec:a5:65:ee:e3:
30:45:38:fc:5f:8d:f5:f4:4a:a8:a3:4d:1c:b6:6c:
92:6f:7d:65:01:30:d8:37:06:8f:c7:d2:de:69:d2:
02:75:ee:41:1c:7e:a7:b3:0d:5a:a9:22:d0:f1:89:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:CE:33:AB:70:E5:C2:D4:AD:0F:40:A9:10:89:8D:E7:44:A8:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40132B52A71E11EF8776C569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.53.0/24
Signature Algorithm: sha256WithRSAEncryption
32:56:ad:1a:98:ba:ce:b3:02:ae:f9:88:16:49:04:25:48:ba:
55:f3:8e:25:ad:51:61:74:41:04:e8:ce:30:4c:04:dc:e0:b9:
c9:34:91:93:6e:23:54:30:92:32:92:88:81:e2:a1:27:ec:33:
2a:39:3d:41:95:2d:9a:ce:7b:0c:43:6f:39:26:26:5a:d4:d3:
55:14:b1:ee:b4:32:4c:06:f9:9b:d3:a1:4b:16:83:7c:a4:8d:
82:b5:cf:56:75:38:d1:7a:25:2b:82:e2:4e:54:40:6f:36:d0:
69:1e:c0:e2:90:9c:a1:98:c9:38:70:e8:8c:34:8d:a9:07:78:
9d:f7:2a:a2:b2:60:42:aa:c6:2e:de:b3:a0:27:12:bf:18:57:
19:84:74:cd:5b:66:72:50:22:ea:e6:bb:be:e4:7c:a6:93:eb:
f3:8d:c4:55:3a:bf:9e:27:9b:99:c4:49:35:08:33:cb:c7:5e:
08:09:99:36:88:d0:cc:12:1a:57:cd:f7:f1:76:c7:55:81:4e:
e3:9e:d6:c5:84:e6:a8:07:6f:f0:60:d9:57:78:f4:18:0c:ea:
d7:f0:b4:74:36:43:e5:db:e5:d3:b6:62:67:dd:78:ae:99:a2:
df:3b:03:28:17:be:e3:d1:c1:98:bb:e3:aa:5d:5d:dc:e4:c8:
b7:72:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:33 2024 by rpki-client on console-ams.rpki-client.org