Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B749BD83AA411EFBDC7A895762E951A.roa
File: 5B749BD83AA411EFBDC7A895762E951A.roa (raw, json)
Hash identifier: ScT6sXcHT+fB/yAOYt5KzcX9ZQzt0Sv7UmQRC13HxIs=
Subject key identifier: 5B:2C:76:80:88:91:F6:BB:A5:B4:8D:21:9E:04:C5:33:41:2C:F6:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CD92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B749BD83AA411EFBDC7A895762E951A.roa
Signing time: Fri 05 Jul 2024 07:58:26 +0000
ROA not before: Fri 05 Jul 2024 07:58:22 +0000
ROA not after: Tue 07 Jan 2025 07:58:22 +0000
asID: 63199
IP address blocks: 154.207.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52626 (0xcd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 07:58:22 2024 GMT
Not After : Jan 7 07:58:22 2025 GMT
Subject: CN=6687a7a1-d0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:a4:61:8e:ce:53:37:60:86:8c:3f:1f:7d:
fc:eb:ff:47:89:61:40:2a:fe:c9:4b:f2:ac:9d:b0:
02:04:a2:b0:77:4b:94:a1:1e:bd:a2:00:f2:f1:35:
98:f4:bf:79:c4:6c:92:ba:d3:d9:57:24:65:ca:53:
57:f1:31:7b:1f:bd:4b:65:92:0c:5c:45:ef:72:1f:
db:f9:d5:37:64:54:08:c0:2a:5d:2a:c9:bf:91:4d:
42:10:25:0a:2a:d4:2e:e6:0d:bf:8e:25:2d:2a:22:
a5:25:e6:07:ba:85:cc:dc:9f:4e:e1:2a:2b:1b:89:
ea:70:02:fc:6b:d1:4f:34:55:15:36:83:42:83:5f:
94:50:0e:22:48:2b:e4:9b:1e:4e:8c:d8:f4:e4:bd:
f5:f7:46:2b:b1:ca:ae:fa:19:4b:8a:f1:a7:af:13:
36:08:0b:0d:87:bc:78:fc:94:cd:f9:e5:75:8e:77:
d2:bc:4a:d3:f0:69:63:15:34:aa:b2:d5:b4:2f:08:
df:21:ac:c4:b4:6d:48:44:e9:03:45:cf:87:92:5e:
6d:6c:4b:5d:ee:ec:37:39:ad:6d:85:3f:2d:f4:06:
67:7f:3e:9d:6c:e8:7b:b1:d8:f4:f5:61:6c:80:3f:
35:67:aa:8f:68:1d:b6:12:bd:f3:0c:a2:de:d2:6d:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:76:80:88:91:F6:BB:A5:B4:8D:21:9E:04:C5:33:41:2C:F6:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B749BD83AA411EFBDC7A895762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:55:14:14:b3:23:26:76:20:10:49:ea:fe:b5:74:0c:32:6f:
14:d9:0a:79:70:26:d2:9b:3c:9b:a7:fb:9f:35:47:18:c8:3b:
a5:33:76:86:66:aa:08:81:37:9d:d7:d4:43:dc:8d:2b:c8:26:
cb:bf:4a:2d:6c:74:33:2e:31:64:1d:f7:9b:bf:5e:71:57:f7:
89:d9:c1:40:ec:ff:1f:2b:68:ed:b1:27:b1:16:9f:45:d5:63:
6f:07:80:77:ef:6f:18:54:f3:2a:81:24:7e:25:52:0d:02:ee:
67:d8:7f:cc:f9:48:b7:04:0d:0d:a2:d4:a5:54:bb:83:01:8c:
a3:7b:06:66:37:2b:5e:08:5d:ec:8f:18:26:28:95:a7:2f:e2:
fe:ad:75:90:b2:b6:54:12:0d:e6:70:ab:05:36:67:a6:4d:0e:
ea:a4:1a:56:66:4e:ff:ab:00:fb:4b:74:b2:af:00:ae:b0:8f:
37:0b:f3:a3:da:06:bc:7f:e5:71:78:8f:0d:9c:7b:bc:fb:3a:
5c:32:41:79:a4:f9:65:24:2b:51:57:b3:4b:f2:bb:7c:f4:9b:
b6:60:5f:93:57:71:d2:a0:22:6d:ef:80:0c:d6:33:51:38:14:
45:00:e9:ca:b0:8b:2a:56:cf:7d:2f:66:67:f5:cf:df:8c:b3:
4e:6f:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:05 2024 by rpki-client on console-ams.rpki-client.org