Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5540D7408D3811EFB1E8279D762E951A.roa
File: 5540D7408D3811EFB1E8279D762E951A.roa (raw, json)
Hash identifier: AuNFG5SnKQcx0NuH+Cx3ianCaNEk6jMf6b7IpOS8rYE=
Subject key identifier: CD:DD:33:49:9B:ED:BC:F0:DF:1C:96:32:79:EA:4F:88:44:01:74:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5540D7408D3811EFB1E8279D762E951A.roa
Signing time: Fri 18 Oct 2024 10:04:16 +0000
ROA not before: Fri 18 Oct 2024 10:04:13 +0000
ROA not after: Sat 04 Jan 2025 10:04:13 +0000
asID: 136950
IP address blocks: 154.213.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65501 (0xffdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 10:04:13 2024 GMT
Not After : Jan 4 10:04:13 2025 GMT
Subject: CN=671232a0-6407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:c1:4a:f6:5f:f1:18:13:7a:07:7a:04:b5:
79:66:a9:49:ba:7e:f6:8a:d4:49:e5:0c:28:a5:8f:
c9:5e:48:9f:df:4f:79:42:e3:6a:5a:5b:45:80:b3:
6e:1b:44:e6:a1:2f:ac:f0:28:5e:f0:08:2d:c4:2a:
8f:71:f1:85:d1:37:fd:2b:b8:08:40:48:6e:fb:ab:
c3:e3:1f:b1:c4:43:51:fa:83:09:0d:fa:6f:00:6c:
33:9d:7b:d2:87:c3:e1:9d:96:8f:dd:05:cc:29:a5:
bf:a9:52:e3:0f:04:e2:cd:df:5a:a8:de:25:5a:bd:
06:fe:69:bf:a8:33:30:93:77:21:47:1f:60:3c:bb:
c0:ec:0f:92:7c:6a:cf:51:bc:4c:a9:49:7e:06:58:
09:c6:c5:e9:0e:a6:4b:fd:6a:1c:ff:8e:03:71:36:
a5:1e:0b:19:a7:ac:c3:8e:44:d7:5e:93:d5:f7:38:
7a:e9:ca:3d:3e:e6:40:6c:3a:03:d3:3a:5e:80:e7:
f9:b9:45:5a:8e:66:7a:5b:05:9c:6a:29:a9:75:1e:
64:45:ee:9e:bb:5d:2d:6d:d5:d8:15:dd:5d:86:1a:
23:96:7a:e4:7a:2a:ba:6f:55:36:53:e9:a9:3e:3d:
c7:3e:0e:da:fb:ee:44:7b:59:9f:8d:e5:56:c5:01:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:33:49:9B:ED:BC:F0:DF:1C:96:32:79:EA:4F:88:44:01:74:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5540D7408D3811EFB1E8279D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a4:86:c2:e1:fc:5c:d1:94:dc:cf:18:7a:b1:32:45:d1:b3:
96:b6:c9:b3:0c:5e:00:98:7d:d8:60:5a:e6:e5:70:5d:12:77:
a7:e3:4d:99:1a:2b:83:c7:ea:db:0c:5a:54:eb:7e:a9:a6:7f:
54:fb:86:b0:97:9f:25:e9:be:3c:5f:a9:c4:6c:1b:c7:3e:5d:
5d:e6:63:34:55:a4:99:d7:f1:cf:3d:c0:27:1e:e9:6c:2a:4c:
25:5c:7a:9d:9e:d2:7e:f8:fb:2d:f8:1d:37:56:94:e6:7d:3c:
97:c8:b0:06:5d:93:dc:1f:4d:cb:9a:2c:21:63:ab:c2:b2:62:
e4:b6:8e:17:04:89:b5:f1:b5:be:08:25:22:78:f6:8a:87:2a:
e7:29:86:73:7c:01:ae:cf:eb:57:52:84:b8:8f:ed:29:9e:f3:
70:3e:24:7a:e9:90:14:3e:b7:5b:d8:69:9e:18:7b:04:dd:20:
a8:cf:46:d7:b5:32:b4:99:81:c0:23:1a:bb:c7:78:9b:ed:10:
a1:9d:05:62:2f:44:16:ad:e3:3d:7d:73:12:94:f5:60:42:37:
43:dd:d5:79:54:09:f2:2e:bc:b8:6f:1c:33:36:e8:bc:45:b7:
11:79:ac:a7:6a:d0:6a:fa:c4:76:7d:4f:06:4d:45:43:0f:fd:
0b:23:73:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org