Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525FC14CB34211EEAF4D3564775412E6.roa
File: 525FC14CB34211EEAF4D3564775412E6.roa (raw, json)
Hash identifier: bTnCX3za1OZbgcq78Lhyrw8y76q4r06RsIIzaZpf8bg=
Subject key identifier: 5B:82:D0:A0:31:56:96:A7:6D:BD:DC:41:B9:95:8B:F3:2E:BD:47:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7510
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525FC14CB34211EEAF4D3564775412E6.roa
Signing time: Mon 15 Jan 2024 01:06:33 +0000
ROA not before: Mon 15 Jan 2024 01:06:29 +0000
ROA not after: Fri 13 Dec 2024 01:06:29 +0000
asID: 140227
IP address blocks: 154.205.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29968 (0x7510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:06:29 2024 GMT
Not After : Dec 13 01:06:29 2024 GMT
Subject: CN=65a48519-2db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:25:03:1f:0f:12:3f:40:9e:df:20:b5:80:
18:1e:a1:4e:c3:77:c8:fc:fb:f2:e1:7b:3a:cc:75:
dd:da:1f:3b:73:1d:56:8a:48:9c:a6:73:00:d8:fc:
fb:98:d0:c8:09:5d:cb:60:3e:91:63:ac:c1:08:5e:
b3:0d:04:af:56:2e:8c:28:10:a4:99:3c:2b:23:a7:
67:4f:d5:07:a9:68:b9:79:bc:33:30:a4:1c:42:15:
01:1d:58:77:ca:c9:ee:61:d3:e3:db:25:60:dd:8a:
6e:4e:b6:fd:ea:b5:2f:32:e9:34:2b:4a:5d:58:f7:
ac:f2:fa:09:4b:5e:ae:9c:69:9c:c5:77:0e:cd:2d:
82:97:c8:7a:9e:05:c0:4e:9f:c6:42:17:cf:07:4d:
cb:d4:21:09:f4:38:36:fe:c2:d1:02:da:c6:b4:b0:
8a:53:c6:6b:cd:01:8a:bd:a2:d7:a4:41:04:75:7b:
13:ad:4e:2d:b9:fb:fa:39:75:49:4f:69:53:c6:44:
f1:b2:fe:3c:4d:ea:b9:d6:7a:37:dd:8d:b4:4b:2f:
d6:68:e7:b7:25:59:b1:95:81:2f:52:25:90:5d:5e:
8e:e8:58:98:05:d6:06:d0:3d:08:83:7d:85:38:de:
20:d2:31:1a:bf:c4:64:fd:13:a7:80:64:db:24:9f:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:D0:A0:31:56:96:A7:6D:BD:DC:41:B9:95:8B:F3:2E:BD:47:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/525FC14CB34211EEAF4D3564775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.210.0/24
Signature Algorithm: sha256WithRSAEncryption
05:72:55:c2:c5:d7:bd:9e:f6:5f:f7:13:5b:29:95:25:93:02:
74:ff:e9:ee:a6:85:4e:c3:36:24:db:26:8e:97:59:e4:ed:d6:
c4:cb:61:f7:79:f6:d2:f2:0b:cf:af:23:97:f7:3f:0f:1c:23:
08:86:b9:57:b9:00:d3:a8:c7:eb:68:a2:83:d9:e6:f5:3f:e6:
0a:6a:ea:1f:eb:e3:3a:df:1a:2e:9f:3d:ee:d8:25:99:74:42:
07:cd:ce:89:6e:a0:fb:95:3d:6c:38:90:af:e1:8c:cc:09:6c:
30:aa:77:3e:46:85:a2:99:a3:72:5b:2a:47:ab:6d:75:69:c1:
c5:b7:79:e5:43:cb:ba:ba:27:0a:b5:76:8c:c5:3d:cf:52:cd:
57:b7:ec:3e:31:3d:19:07:a7:8f:7b:20:32:5c:5e:3f:5b:76:
ab:5b:90:3d:97:32:e4:8b:47:dc:2f:61:0b:d5:9a:88:7b:5e:
08:4e:de:c9:63:46:2d:ae:0d:a9:2e:ff:f9:dd:75:68:47:d5:
1c:ee:58:17:c5:aa:06:2c:2d:70:29:0b:2a:50:d5:74:c4:b4:
91:b5:9c:d6:f6:f2:4a:d6:41:94:8d:74:28:3f:82:ed:42:35:
6d:03:8a:13:f6:dd:e7:df:9a:70:16:77:7d:f3:c6:6f:2c:49:
b5:3f:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org