Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BC92214A25C11EF96DA1679762E951A.roa
File: 5BC92214A25C11EF96DA1679762E951A.roa (raw, json)
Hash identifier: m2J8Y1EzgPdLLinLH5cxZNGKBFH3z/BYmMaUViIcwJE=
Subject key identifier: AF:AA:7C:8E:17:9A:35:B5:6C:BC:12:BD:5A:9A:62:E4:93:43:97:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BC92214A25C11EF96DA1679762E951A.roa
Signing time: Thu 14 Nov 2024 07:45:03 +0000
ROA not before: Thu 14 Nov 2024 07:45:00 +0000
ROA not after: Tue 10 Dec 2024 07:45:00 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68830 (0x10cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:45:00 2024 GMT
Not After : Dec 10 07:45:00 2024 GMT
Subject: CN=6735aa7f-9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:3c:f5:33:f1:db:d4:88:70:b2:c9:27:54:
1b:0c:55:a1:77:19:fd:f6:c7:67:a9:bc:ee:a7:e7:
09:9b:b4:5c:b3:a9:7a:e6:be:db:0d:b1:f7:39:28:
04:7e:91:7f:f2:e6:be:da:0d:61:fa:d6:db:1a:9b:
6b:59:fb:a1:ef:d3:f7:b1:ce:1d:d8:e1:6e:91:95:
fd:d6:7f:df:fc:da:4a:0a:0c:9b:a2:08:db:d0:27:
c8:65:0e:be:c6:88:a5:5c:19:5a:d7:e4:4d:ac:36:
e1:e0:eb:49:50:df:15:d8:3f:5f:7c:5e:18:ac:32:
ba:63:b5:4b:54:5f:da:b6:40:26:11:20:7e:2a:39:
08:4d:e9:b0:9a:a4:69:88:64:ff:3c:d1:fe:ac:88:
b5:a2:30:0a:85:93:f5:04:0a:d6:11:92:57:32:2c:
29:8c:16:60:5a:2a:30:76:cc:d8:28:16:23:3d:73:
94:96:cf:54:88:aa:77:9b:0e:db:a6:91:f5:68:44:
3c:08:9d:6a:d9:2b:ca:48:e1:a3:aa:7e:e6:e2:9e:
3c:b8:df:d1:6c:3f:bf:e3:de:5b:7a:cf:25:1e:02:
c7:d5:83:35:85:bf:ae:83:91:33:c8:49:63:4c:8e:
f1:6c:e6:17:2c:26:e0:31:50:e8:e4:45:9b:a6:78:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AA:7C:8E:17:9A:35:B5:6C:BC:12:BD:5A:9A:62:E4:93:43:97:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BC92214A25C11EF96DA1679762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c2:55:0c:35:05:a3:31:15:2f:ee:23:5b:62:be:af:dc:d2:
86:3b:2c:1c:fc:10:e4:bd:2e:06:7b:cd:01:f6:eb:7c:08:25:
24:9b:6c:ef:26:06:9b:1f:21:96:96:71:fb:90:6b:f1:9e:b9:
e0:c1:b6:dc:72:c5:51:39:bd:13:4b:73:fb:fd:d8:49:07:3d:
11:26:ee:a5:49:e7:81:88:52:05:d4:76:13:11:7f:d6:4e:b7:
b1:34:d7:8b:fd:9d:d4:8b:7e:df:51:fa:78:06:e7:ff:bf:3c:
89:eb:7b:31:81:9d:20:e2:b2:44:e7:2d:d1:d5:eb:8d:20:37:
61:25:80:ce:2d:77:ec:77:08:14:04:f2:f1:ea:d8:f9:76:cd:
f2:f7:b9:47:86:f2:09:aa:01:4b:57:6f:c0:6f:4b:40:17:93:
d9:52:ce:0f:de:79:c7:c3:e6:14:a9:28:51:8f:e2:f3:17:1d:
5d:3f:89:1e:1e:59:b2:0b:78:c1:0c:9d:25:77:e3:61:90:b9:
47:6b:fa:88:4d:6a:24:f7:c2:33:5d:c9:ff:a8:bb:cd:88:e8:
f3:65:69:21:23:fd:26:e1:e0:aa:0f:db:0b:a8:46:bd:2b:77:
d4:52:9c:90:92:c8:8f:44:2b:b0:15:ab:b7:0a:b0:9b:9f:6d:
f4:e4:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org