Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53173B4A904D11EF8A58168D762E951A.roa
File: 53173B4A904D11EF8A58168D762E951A.roa (raw, json)
Hash identifier: on5/6qmzLW1elR9/1UluG8KjkaGfKpXle5M2m0WI6GQ=
Subject key identifier: 0F:06:AE:E9:87:37:15:4F:50:F5:54:3D:82:64:65:1C:57:25:A9:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01006F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53173B4A904D11EF8A58168D762E951A.roa
Signing time: Tue 22 Oct 2024 08:12:05 +0000
ROA not before: Tue 22 Oct 2024 08:12:01 +0000
ROA not after: Sat 25 Oct 2025 08:12:01 +0000
asID: 135600
IP address blocks: 154.211.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65647 (0x1006f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:12:01 2024 GMT
Not After : Oct 25 08:12:01 2025 GMT
Subject: CN=67175e55-9692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:4e:d9:c3:e1:af:c2:02:ec:a4:c6:05:e7:
49:36:d4:49:83:e3:0f:53:bf:65:45:a1:e0:58:23:
5c:82:f0:ed:a9:63:5f:dd:80:05:0d:4c:8d:3b:2e:
cb:50:a7:cc:de:7f:6f:88:9e:e1:c6:f6:32:40:32:
f4:c8:70:32:aa:48:99:0a:63:03:3d:f7:5e:1a:3a:
3b:26:41:85:d7:d6:5f:f6:82:db:0a:77:a0:6f:31:
e4:30:5c:c8:3b:04:1a:bc:88:99:4a:25:63:80:56:
8e:e6:ad:2f:4a:3d:58:fb:24:39:fd:ec:1e:de:fd:
64:8d:e5:25:bc:ed:16:10:e9:bd:bd:98:c8:43:04:
b3:4f:46:6c:3e:90:db:ec:70:08:cb:6d:46:7d:52:
83:ae:c1:32:b5:c8:cd:23:35:04:1f:a5:2a:86:59:
e2:50:20:f7:cb:e0:f8:b4:bc:1c:b2:ce:24:18:7b:
d1:3c:8d:5a:a0:d5:0e:41:35:8a:60:81:46:e9:1c:
c9:7e:6e:e9:d8:df:9f:60:b2:c4:8d:1c:71:00:01:
80:d4:c4:13:7c:87:77:f7:79:48:8f:a4:ad:d0:6a:
f6:5d:73:b2:22:4b:55:ae:96:ca:fd:ee:05:e3:8c:
1b:fb:56:78:99:41:83:d5:31:c5:cc:ca:76:5a:e8:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:AE:E9:87:37:15:4F:50:F5:54:3D:82:64:65:1C:57:25:A9:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53173B4A904D11EF8A58168D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:05:3c:72:c2:85:60:ac:f7:c7:c3:66:70:fc:c3:85:a8:88:
f0:bb:05:ee:e3:28:94:ce:c0:66:a6:f0:1b:85:f0:09:55:aa:
da:8c:81:ed:b3:d8:81:e8:56:f0:42:8f:74:f7:ad:ed:54:38:
f4:34:69:1b:48:73:71:5b:c7:33:7d:d6:26:5e:cd:35:a3:31:
74:14:cd:1f:ae:de:58:15:ea:d0:d5:b8:db:08:0e:83:2b:da:
97:84:3d:ea:1c:d4:f2:ab:f7:8b:0d:67:12:6e:5f:a4:dc:2b:
07:29:f7:3d:a2:30:11:6f:24:77:1d:77:59:32:56:b6:88:c3:
03:86:1d:be:d3:b2:d9:de:2d:a8:4c:05:77:7f:e7:04:b2:be:
36:dc:81:a3:d4:e0:ef:b5:18:43:ce:07:aa:59:40:c6:93:5e:
31:ac:63:21:9d:73:01:e2:04:09:00:c4:28:ca:76:18:d2:19:
6f:e0:66:23:3f:ec:6e:e3:fc:30:82:c9:ff:c8:b3:a0:e5:6e:
ac:70:b5:f7:58:13:05:75:2a:2b:f2:95:f5:2b:5a:8d:3c:86:
3d:58:bc:5d:3c:e9:f8:c0:25:f9:b8:8e:4e:1b:94:c6:19:70:
12:ad:32:cd:28:15:80:0a:c7:a2:a4:3b:7d:d4:ec:2c:9e:34:
5f:59:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org