Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5455212A986311EFA988EF7B762E951A.roa
File: 5455212A986311EFA988EF7B762E951A.roa (raw, json)
Hash identifier: Qw/wyhnHFOz7GKgjpGMxAuQ24/X2Ot2EyeK6dJ1KhZE=
Subject key identifier: 5B:A5:31:37:BD:90:0B:41:A5:D1:03:BF:88:DE:6B:D7:8A:72:0E:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01050D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5455212A986311EFA988EF7B762E951A.roa
Signing time: Fri 01 Nov 2024 15:09:46 +0000
ROA not before: Fri 01 Nov 2024 15:09:42 +0000
ROA not after: Tue 03 Dec 2024 15:09:42 +0000
asID: 203020
IP address blocks: 154.207.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66829 (0x1050d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:09:42 2024 GMT
Not After : Dec 3 15:09:42 2024 GMT
Subject: CN=6724ef39-d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:b8:14:af:8d:40:7e:08:af:03:f0:aa:50:
fb:39:ff:c2:aa:67:9b:9a:9e:27:35:9e:c3:3b:7c:
cd:6e:e7:9f:a8:3d:8f:98:1f:35:19:3b:75:c3:6b:
89:37:3d:1b:b0:6c:ad:fe:aa:7d:3c:b8:31:77:42:
4f:c1:fa:6e:1f:ef:9b:17:cc:4d:29:a7:72:09:e7:
7d:03:d5:67:e4:01:90:1f:ae:0f:85:d3:9d:cc:33:
03:94:94:30:4b:5b:e4:62:aa:e4:26:67:61:21:b9:
62:46:01:a7:cf:bc:e1:3a:ac:72:05:e1:12:06:9d:
9b:77:00:31:7a:c4:25:a5:c4:7f:a2:04:d9:65:a3:
50:09:ad:b0:15:50:db:e0:2f:2f:59:c2:53:6f:03:
b7:97:3f:f4:7e:88:1e:de:4e:fb:6b:3c:50:e6:e2:
db:2b:21:8d:d4:c8:07:61:7b:ec:5e:a9:a5:64:31:
ce:3b:c4:3d:12:10:26:16:83:c9:5f:b7:55:c9:29:
1f:14:a3:ab:73:26:46:9d:01:fb:23:97:52:c3:38:
2f:11:f7:d4:82:0c:77:7c:7f:c9:89:41:79:12:21:
e2:53:a3:d9:23:e1:a7:90:0c:bd:7e:18:c5:e0:a7:
49:81:48:c9:5a:72:e4:c5:fa:92:a6:85:95:3f:81:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:31:37:BD:90:0B:41:A5:D1:03:BF:88:DE:6B:D7:8A:72:0E:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5455212A986311EFA988EF7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.114.0/23
Signature Algorithm: sha256WithRSAEncryption
23:08:d3:1f:8d:39:b4:49:44:36:64:3f:09:2a:03:27:5d:80:
00:d7:1d:54:28:28:53:ff:70:fb:04:3a:0a:93:eb:39:c3:40:
d5:3d:b2:23:e7:b4:a2:a6:04:fe:8e:55:fd:29:05:8d:00:54:
69:da:cf:48:32:fe:81:b9:32:95:ef:2a:8e:fb:3f:a6:ef:be:
bb:41:b1:9c:7e:f6:4a:cc:96:37:10:90:df:e8:be:6e:e8:1d:
8a:bd:f1:ef:a3:0f:e2:05:39:6f:c3:c2:26:91:74:f3:0b:66:
c9:f6:de:95:91:8d:4f:c1:27:a5:99:51:3c:d4:a6:af:95:cf:
7d:8e:80:ed:2a:7e:4d:2c:c0:ea:73:ac:42:06:07:fc:61:47:
86:08:43:23:a6:23:32:e8:ed:ba:80:e3:39:d3:d4:fe:8d:97:
17:7e:fb:52:58:50:0f:87:1f:19:44:06:ee:be:1d:07:bf:8e:
d4:1b:07:94:07:cc:f7:8b:ac:6b:c7:da:8f:52:9d:da:0a:24:
46:5c:73:82:b7:52:7c:cf:a1:ff:69:d2:59:74:0d:bf:a0:0e:
8f:85:93:5b:1c:03:2f:41:25:34:4c:ae:e8:27:93:62:71:55:
1b:cb:ef:53:68:c2:b9:8a:3d:0d:f1:96:7e:36:1a:e1:ff:d5:
28:98:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org