Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53106F56B0FE11EE8FD0D75B775412E6.roa
File: 53106F56B0FE11EE8FD0D75B775412E6.roa (raw, json)
Hash identifier: Rvp69WbK3VcBdUSM+Sf85vDR/xb6XAJdbDQcKttwqFU=
Subject key identifier: AE:79:F7:37:2D:3F:8A:11:A9:EC:94:A0:A8:BC:DE:A7:39:D2:53:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 747B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53106F56B0FE11EE8FD0D75B775412E6.roa
Signing time: Fri 12 Jan 2024 03:54:46 +0000
ROA not before: Fri 12 Jan 2024 03:54:42 +0000
ROA not after: Fri 13 Dec 2024 03:54:42 +0000
asID: 140224
IP address blocks: 154.205.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29819 (0x747b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:54:42 2024 GMT
Not After : Dec 13 03:54:42 2024 GMT
Subject: CN=65a0b806-636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:2f:28:37:25:b4:67:cb:96:de:61:cf:84:
8e:5c:7b:c0:62:6a:58:99:6d:cf:d4:13:02:84:fa:
a2:52:31:9d:6d:4a:b5:bb:88:2c:a2:1b:da:f2:49:
41:02:6a:87:f1:1d:04:b2:85:59:77:82:a0:3e:4e:
e1:5c:df:74:dc:26:f2:46:e9:b4:48:0a:6b:0f:84:
38:92:19:24:fd:f6:cf:03:eb:5e:65:d3:98:08:6d:
73:64:b8:ea:59:2d:c1:c2:ff:4d:fd:40:cb:04:d0:
89:12:72:bd:86:76:2b:e3:10:9d:e5:8d:ce:6f:ff:
1b:38:aa:f0:1e:d6:16:be:e5:10:91:a1:01:2e:ae:
61:72:5c:91:70:6e:5f:45:76:28:cb:65:1d:48:62:
29:c1:9b:25:bd:8a:3d:00:9c:aa:81:e5:03:34:91:
b9:0f:00:0b:e8:8a:91:77:07:37:13:b2:bc:c5:dd:
c6:a8:80:e4:74:e2:28:51:68:b3:61:b3:df:a1:61:
fc:85:5e:47:e0:75:9b:14:d6:89:9a:2f:01:fd:b1:
c8:39:e2:2b:ff:a1:29:2c:dd:39:1c:37:84:ce:de:
ad:6c:13:cc:95:f6:f6:f8:f3:e9:52:4d:31:57:00:
7c:91:66:02:82:f0:c0:c0:dc:55:a0:9b:02:25:33:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:F7:37:2D:3F:8A:11:A9:EC:94:A0:A8:BC:DE:A7:39:D2:53:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53106F56B0FE11EE8FD0D75B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.199.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f3:02:7c:0c:6b:c0:dd:d1:26:97:a8:b5:aa:58:1e:97:f4:
ec:2d:92:dc:fc:c7:f1:f2:8f:7b:4a:58:00:6f:c0:e5:01:83:
65:70:7d:c5:74:7d:69:df:f3:c2:9c:09:ef:e7:ed:f5:1b:47:
ec:6b:a1:88:1e:64:35:30:78:ca:13:34:d0:43:99:bd:55:50:
68:72:dc:7f:0d:0c:2f:43:aa:e4:b6:db:94:0a:b3:d3:5d:9d:
95:b2:ad:95:d1:af:6f:1e:1b:fb:e0:80:78:3d:20:1f:fc:4c:
cd:83:ec:3b:3c:c6:a8:6e:ac:7d:7d:5d:a1:2f:2a:62:97:db:
e6:37:f4:73:b4:58:96:74:c8:d7:b6:d6:9b:a1:4e:ca:11:f5:
03:bd:9d:46:24:ea:b5:17:56:42:06:e0:18:f0:02:96:79:f5:
0d:3f:63:d3:16:d6:5b:84:e1:dc:54:de:7b:00:20:3c:e3:8b:
b1:b7:9a:23:74:aa:8c:30:6a:4d:aa:4c:ab:93:34:ff:c2:5a:
e6:f8:33:e0:03:10:d8:4c:ae:7d:db:3d:be:98:e7:dd:fa:e4:
94:0f:40:a8:fe:7c:6c:e2:ae:92:b7:f8:33:dc:4b:1f:44:14:
15:ae:4c:8a:1c:da:7c:d1:0a:63:1c:b8:89:e7:ab:3b:85:aa:
e6:3b:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org