Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56755A34406A11EFA7C57D9E762E951A.roa
File: 56755A34406A11EFA7C57D9E762E951A.roa (raw, json)
Hash identifier: IZiIxYnttkKL9fpdE02G4HzTWyocHC9jGeKnzYbC0QU=
Subject key identifier: C4:C2:8A:90:83:D7:65:FF:69:27:75:93:E3:51:BD:72:5B:BF:F1:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D0B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56755A34406A11EFA7C57D9E762E951A.roa
Signing time: Fri 12 Jul 2024 16:18:13 +0000
ROA not before: Fri 12 Jul 2024 16:18:10 +0000
ROA not after: Mon 14 Jul 2025 16:18:10 +0000
asID: 140867
IP address blocks: 154.89.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53429 (0xd0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 16:18:10 2024 GMT
Not After : Jul 14 16:18:10 2025 GMT
Subject: CN=66915745-6ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:5d:14:76:a4:a8:df:40:df:33:13:a9:29:
41:47:0f:1c:61:48:33:30:fc:c3:60:56:f7:81:f9:
6e:3f:f7:7a:e1:b7:7f:65:aa:36:78:3f:b8:e0:9e:
31:6a:a5:2d:2d:75:eb:09:f3:22:5e:fd:bd:64:17:
fc:09:bf:08:8f:e4:59:64:02:74:fb:92:bd:42:72:
0e:b6:03:20:91:b0:40:c5:49:38:4a:d1:4d:69:b9:
a8:1c:a0:a6:aa:5f:46:6c:ba:0d:ce:72:b5:eb:53:
3e:8a:6c:ad:b4:fb:f1:66:7e:ee:ae:e6:c6:2c:5e:
da:8a:d1:73:ff:ea:af:5d:84:ba:ff:9b:2b:30:88:
f8:fe:6e:05:d3:6d:b1:d3:2d:7e:bc:d0:c4:32:0a:
ef:6c:eb:03:3e:af:36:9e:69:35:1d:bb:3d:5d:d2:
b4:b5:d3:d0:f2:a5:ff:2c:3f:ed:91:78:fc:95:c6:
64:83:a5:20:a6:98:09:47:bd:44:15:9a:13:d3:a7:
07:89:4f:eb:71:c6:fc:a6:c1:88:a5:52:c8:32:b1:
0b:a8:8c:f8:59:63:d4:48:60:c5:55:d6:4b:7c:e7:
01:ce:af:4c:98:d9:6f:39:e6:10:07:6d:06:b9:f8:
10:98:0b:53:42:44:29:70:40:9e:98:30:3b:34:3e:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:8A:90:83:D7:65:FF:69:27:75:93:E3:51:BD:72:5B:BF:F1:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56755A34406A11EFA7C57D9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:af:a3:b4:d3:41:a4:d4:10:5f:87:a4:1d:7f:4c:35:7e:43:
b1:cf:12:ed:37:73:18:ec:cd:f2:d5:9d:0e:19:9f:fa:8a:c0:
60:24:c0:3a:78:1c:37:06:fa:03:e2:c6:f0:5a:15:e3:75:ae:
25:c5:78:3a:06:2e:95:42:76:cc:da:25:45:c1:a2:ff:07:54:
92:dc:3a:de:fc:5d:cf:a3:8b:ea:5e:7b:22:a3:77:4d:01:51:
ab:14:99:4d:d9:18:6b:ef:98:8a:00:57:59:0c:5d:74:58:4e:
d9:3a:94:00:5d:f2:2c:2e:81:fe:c3:e7:a0:a1:06:df:e7:ce:
72:c0:ec:da:2b:ed:a7:73:f6:54:63:c3:97:34:d4:9d:6a:8d:
28:6b:a4:37:a1:d5:c4:d3:6f:5f:dc:15:d3:71:fb:d7:72:41:
b6:ba:d0:28:36:4c:12:2d:57:14:ef:d1:b7:c0:ad:3b:93:11:
b9:55:40:04:b8:c2:da:62:03:5e:30:91:bc:f7:41:04:81:cd:
9d:74:f6:9a:69:d6:22:e4:66:b4:20:d3:79:70:7f:14:e4:c2:
45:37:79:24:f9:ba:f1:85:a6:90:9d:b1:58:4b:24:52:70:3b:
ae:a2:dd:56:1e:50:55:93:b0:4f:03:c9:b4:fe:d8:4e:23:f9:
02:49:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org