Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409E6F7A19D211EFA0BFE754017001B1.roa
File: 409E6F7A19D211EFA0BFE754017001B1.roa (raw, json)
Hash identifier: MyD9wUSdKQXZIB+DyOYYKAmA6VGR91RP8ddzyMvmf3E=
Subject key identifier: 68:F2:2C:70:48:71:B9:95:3D:EE:27:4B:5F:F4:45:CD:52:D7:A8:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BA53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409E6F7A19D211EFA0BFE754017001B1.roa
Signing time: Fri 24 May 2024 13:33:49 +0000
ROA not before: Fri 24 May 2024 13:33:46 +0000
ROA not after: Mon 26 Apr 2032 13:33:46 +0000
asID: 984
IP address blocks: 154.202.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47699 (0xba53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:33:46 2024 GMT
Not After : Apr 26 13:33:46 2032 GMT
Subject: CN=6650973d-fde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:56:e5:c0:3f:80:5b:e2:5e:d1:dc:2f:51:
8a:e5:3a:5f:39:49:d3:39:7c:de:9a:2e:10:7d:eb:
41:61:24:51:cc:59:9e:ab:79:92:9c:89:a5:34:a2:
e0:6f:ee:2d:a6:1c:3c:c1:1f:1c:5f:83:d4:83:d4:
9c:53:54:f5:a8:b8:77:80:9b:6b:86:73:21:18:72:
5f:ea:46:da:67:cd:a7:7a:a1:b7:14:15:a8:29:24:
40:d1:30:47:97:3b:c2:63:52:eb:91:a7:03:ec:46:
36:4f:ce:04:fc:19:b0:00:a5:c3:fe:37:08:aa:89:
84:f8:21:fb:e6:7f:ea:b8:56:6b:43:98:69:1c:cb:
9f:71:3d:90:48:48:af:5c:26:e0:d0:f2:54:a8:f2:
ac:1b:b3:3f:be:7b:32:f8:2a:b3:4c:3a:84:ea:af:
39:76:c6:55:b5:dc:ba:21:3c:cb:9e:c9:e1:63:1d:
fa:84:ad:65:db:a1:c6:c1:ae:02:af:a7:cd:09:95:
4c:64:85:4a:8d:9a:be:4a:b2:29:5b:e7:03:e4:b5:
e3:d8:ce:2d:57:0e:3e:bc:33:f1:6c:91:95:f8:f2:
8d:de:cb:e5:8d:b7:97:bd:07:71:96:10:06:ee:03:
a3:50:ad:6f:2a:89:b5:35:6e:d5:46:e5:aa:f4:66:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:2C:70:48:71:B9:95:3D:EE:27:4B:5F:F4:45:CD:52:D7:A8:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/409E6F7A19D211EFA0BFE754017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.136.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:6d:12:33:ca:0e:c0:8f:9e:0e:c5:f3:c3:fe:db:64:22:
15:6d:76:8b:98:df:44:e1:c8:63:cf:88:42:05:b9:da:23:43:
64:d8:b3:88:64:f3:b8:7f:8a:c7:b1:39:3e:e8:65:e1:bc:8e:
62:a6:fa:11:c8:f8:db:0b:6e:7a:f1:e8:c8:2c:ca:de:f9:6b:
b5:22:9e:e4:d2:bf:9b:53:99:d7:46:54:fd:9a:9c:74:b7:45:
4e:87:61:f9:0e:b0:62:d2:13:87:97:df:74:5b:14:00:c4:7a:
ab:6c:77:ae:c6:8a:d8:f3:f4:5d:fa:34:93:52:03:c9:fc:32:
16:31:cf:96:9d:62:31:d6:c1:77:79:02:fa:33:29:7e:41:f6:
66:16:00:bc:88:25:63:7c:cd:eb:54:ed:ac:93:ef:e7:88:19:
5e:27:d9:b4:3e:71:b7:61:d7:c1:88:64:a3:f7:45:72:69:87:
49:43:40:b6:cb:d8:95:9a:2c:6a:33:84:48:02:4f:64:6e:6c:
e2:a3:57:aa:f9:ff:44:e5:23:5d:c7:29:62:ab:ec:d1:17:4f:
71:5d:c9:81:f5:28:57:2e:5e:59:7e:15:1d:c6:e5:53:00:fc:
e3:a2:97:2e:b1:c7:49:14:cd:00:cc:d3:48:37:b7:9c:42:55:
8b:7a:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org