Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4742DBCCB6CB11EFBC0D71AE762E951A.roa
File: 4742DBCCB6CB11EFBC0D71AE762E951A.roa (raw, json)
Hash identifier: o/5qdi4TNNzOPLvPBXEGc4DfGRPc3fJShq+s6L/ezCA=
Subject key identifier: D5:08:66:F7:99:66:78:53:11:27:5B:02:6C:44:15:90:F3:77:F5:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4742DBCCB6CB11EFBC0D71AE762E951A.roa
Signing time: Tue 10 Dec 2024 07:49:26 +0000
ROA not before: Tue 10 Dec 2024 07:49:23 +0000
ROA not after: Sun 12 Jan 2025 07:49:23 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72224 (0x11a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 10 07:49:23 2024 GMT
Not After : Jan 12 07:49:23 2025 GMT
Subject: CN=6757f286-cf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:6b:86:c7:7f:14:c8:fd:84:c8:d9:db:81:
79:f3:9e:72:5a:5f:18:94:29:b8:8f:15:99:c5:01:
27:57:e3:69:5b:d4:08:8d:44:53:46:25:65:55:f4:
04:42:2a:76:3b:86:9a:45:81:98:ed:dc:e3:80:4e:
81:55:c3:ca:1f:71:21:b4:f7:b8:f5:d2:c2:85:47:
f9:ab:6a:b9:48:36:4e:9b:8e:37:61:80:c7:7e:4e:
b0:b2:da:49:62:9a:d7:a1:55:f6:d9:46:ec:04:fd:
2b:64:88:0f:82:6d:b1:a2:84:5a:19:6a:d0:c0:bd:
bd:2e:7c:94:28:d8:c7:67:34:c7:1d:c6:14:ed:34:
42:04:39:74:24:62:2e:b1:98:0a:c9:15:c0:78:b4:
3b:fd:b5:ef:a4:6a:3b:fb:c3:1b:99:46:71:07:89:
eb:bc:fa:ad:c3:a6:ba:47:9e:d2:68:51:35:6b:6d:
f0:03:5b:8b:f1:ca:e3:94:6a:bb:c2:a3:d4:07:eb:
ff:e8:f8:11:01:38:37:a8:2c:2d:4c:83:b4:0d:80:
a5:3e:ae:05:5b:b0:cc:cb:75:ae:00:fc:9a:e6:a5:
60:f2:17:58:15:13:91:1c:a8:ce:21:2d:2e:b3:6b:
49:74:71:22:eb:b7:04:af:a9:f4:c5:1f:30:59:bb:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:66:F7:99:66:78:53:11:27:5B:02:6C:44:15:90:F3:77:F5:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4742DBCCB6CB11EFBC0D71AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2d:4e:52:8a:c7:c0:e3:fc:b0:16:23:ec:3b:79:c6:e4:bf:
e8:a2:05:c6:f4:ee:0b:32:e4:0d:dd:65:fb:e4:b8:df:7c:d8:
b7:5b:3f:00:9e:70:e9:58:f6:81:11:ba:c4:d5:9b:0c:e5:8d:
3c:75:90:d6:17:d4:60:10:31:f0:00:b7:45:85:5b:c4:1d:05:
05:d0:60:25:0b:7c:d3:9e:78:2e:92:07:54:a6:7d:d2:0b:43:
32:8a:a9:aa:e1:36:03:17:2f:24:24:c0:16:c6:25:63:ee:29:
f3:c0:09:87:e7:43:50:76:fa:1e:b4:cf:f1:a6:60:e2:e0:2e:
c2:07:0d:aa:17:30:cb:8f:32:da:0a:aa:dd:85:61:3b:00:cf:
76:83:17:be:78:58:fb:1c:64:db:aa:84:dc:6b:29:17:4b:60:
5c:77:f1:89:ea:72:8f:ad:fd:19:b2:7d:4e:46:06:71:57:85:
ff:4b:27:6b:64:3e:2d:fe:f2:46:ee:4d:b1:4b:b1:be:d3:f3:
6b:7d:ee:c2:50:05:ca:a4:b1:d3:e9:39:02:dc:21:45:9d:f1:
12:c4:25:a1:d7:5f:7f:88:cb:cd:44:97:bd:0e:91:a6:2f:f4:
0f:37:7a:0f:89:18:bf:92:a0:fc:3d:75:e1:fe:42:d6:51:08:
12:0a:ea:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 11:36:33 2024 by rpki-client on console-fra.rpki-client.org