Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5617B194A75411EF98F0D1BA762E951A.roa
File: 5617B194A75411EF98F0D1BA762E951A.roa (raw, json)
Hash identifier: CU+OdAK+SmeCoh0rUC185yR2aEDiBi5IIARZtA0ZaZU=
Subject key identifier: 10:FD:3C:07:29:8F:D6:EC:27:AB:75:C2:FE:65:2F:95:EA:3A:28:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5617B194A75411EF98F0D1BA762E951A.roa
Signing time: Wed 20 Nov 2024 15:30:13 +0000
ROA not before: Wed 20 Nov 2024 15:30:10 +0000
ROA not after: Sun 01 Dec 2024 15:30:10 +0000
asID: 133180
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69587 (0x10fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:30:10 2024 GMT
Not After : Dec 1 15:30:10 2024 GMT
Subject: CN=673e0085-c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:fd:df:48:f2:17:b7:66:08:18:e0:5b:23:
75:e5:68:55:3f:c2:dc:83:86:ef:8f:a7:d6:cc:95:
4f:bb:5f:5e:f3:bd:c6:56:bd:54:90:3b:5a:0d:e0:
0b:81:d6:23:8f:f5:ad:29:50:58:e1:72:9c:3c:ea:
5f:31:a9:76:10:37:15:6d:5d:62:44:63:48:28:bc:
06:ba:d2:c6:52:98:0a:9e:e7:1e:ee:2d:d2:e8:a4:
f3:52:33:92:84:95:ae:82:db:e6:36:ce:4f:eb:44:
ee:e7:99:5d:ea:b0:5b:5c:8d:28:c5:88:a1:f9:77:
aa:fe:8c:42:af:24:47:d4:89:ea:67:d7:cd:94:61:
50:82:02:39:de:f4:fe:9b:08:7b:a0:ec:a9:e4:a2:
25:39:31:1e:58:88:fd:1d:f8:11:82:96:03:da:31:
27:b7:fc:02:e8:73:95:b0:f8:7a:c7:52:0d:de:49:
1f:d8:ca:88:a7:11:0f:fd:4e:49:1b:be:32:94:60:
2f:69:22:97:2e:9a:d4:8b:23:13:b4:b7:bc:8c:e6:
01:36:b2:98:f3:ed:ac:9d:8a:96:b4:e4:cb:d4:ef:
48:db:2e:3e:a3:74:3c:06:9e:71:fc:3f:36:49:25:
2a:4f:3a:58:23:b4:17:ff:11:ba:be:9a:87:48:e4:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:3C:07:29:8F:D6:EC:27:AB:75:C2:FE:65:2F:95:EA:3A:28:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5617B194A75411EF98F0D1BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
c4:06:1e:72:b4:81:b8:4b:e8:93:ed:52:b7:bf:13:a2:b3:23:
4f:fb:3f:9c:67:85:31:a0:b9:8d:f2:4f:db:86:25:50:a2:08:
78:b4:4d:de:1a:bf:5a:5c:7c:a4:b4:88:72:db:5d:9d:c5:d0:
e2:3b:7e:93:7d:30:4e:21:12:31:82:97:9f:31:ac:4c:58:c7:
a9:2e:6d:1d:c8:6e:e2:27:55:b3:bd:12:25:dc:1a:8a:f1:0d:
02:d9:63:05:6e:94:f0:12:c1:bf:ea:a7:27:c1:7e:14:26:30:
72:1e:80:5a:a0:59:22:4f:b5:d9:f2:e2:15:75:fc:b8:eb:69:
da:b4:6a:ac:6e:34:04:4f:a8:09:66:1a:f9:f1:a6:4e:72:8a:
f4:23:ab:9d:d8:07:65:f6:0e:ee:05:3c:77:0a:1f:c0:10:33:
c2:0b:f2:f1:8d:e5:44:9a:8c:1c:5b:d1:8d:9b:de:38:4b:1e:
ed:7a:f9:dd:98:ab:b3:9d:e0:ee:ba:69:cd:b1:fd:88:a6:53:
48:8a:9c:0e:ea:20:8c:a1:94:67:59:01:f0:ef:03:99:10:d0:
5d:e0:af:a1:e4:0c:e4:4f:c6:1f:a1:21:4d:7c:36:ff:bb:87:
34:ed:c6:67:4c:ed:3d:bf:49:2c:e9:8a:f6:32:ff:8f:49:7f:
60:59:11:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:11 2024 by rpki-client on console-ams.rpki-client.org