Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BDB401CA8E611EF8B1CA09E762E951A.roa
File: 5BDB401CA8E611EF8B1CA09E762E951A.roa (raw, json)
Hash identifier: iKnPJLV32/MgCtnELga1rdz61Gl/8YDYD4i+STqcx8Q=
Subject key identifier: B5:46:0E:23:E5:98:BB:D8:6E:3B:C2:0C:3B:15:06:80:BC:32:45:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BDB401CA8E611EF8B1CA09E762E951A.roa
Signing time: Fri 22 Nov 2024 15:28:01 +0000
ROA not before: Fri 22 Nov 2024 15:27:57 +0000
ROA not after: Tue 03 Dec 2024 15:27:57 +0000
asID: 62240
IP address blocks: 154.194.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69843 (0x110d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:27:57 2024 GMT
Not After : Dec 3 15:27:57 2024 GMT
Subject: CN=6740a301-d027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:d6:c8:d7:a8:a0:31:bf:9c:5d:63:a2:d6:
59:ff:06:d2:72:2e:57:18:b2:af:15:4e:52:98:6d:
b2:55:0f:0b:dd:23:70:a8:7e:24:5b:de:c7:1f:22:
25:30:07:4e:51:50:b4:24:ca:e0:9c:9f:72:33:c1:
d0:a5:73:76:50:12:df:de:9a:ec:ac:c7:ef:5b:ae:
d4:ca:0b:db:69:e8:9b:6f:30:94:54:69:5c:7c:97:
e5:c5:1e:4f:42:2f:79:13:2a:19:f0:f5:d1:d8:f0:
ca:9d:12:d6:c0:b8:21:83:96:13:94:0d:45:42:23:
09:d3:df:2e:1f:f7:d9:f2:1c:50:49:6c:4d:0f:02:
70:cd:3a:f9:18:fd:bf:0e:bf:a2:e9:08:56:a7:0b:
e2:1e:aa:74:c2:01:68:d6:a7:56:41:05:3d:79:4c:
54:52:f1:ae:7f:53:d5:aa:5d:04:31:6f:2d:88:72:
c3:28:3a:00:80:58:1c:7c:f5:49:d9:53:8f:c1:94:
17:6a:60:69:dd:c9:14:23:82:a3:42:1d:e7:77:00:
87:d3:49:0f:91:b7:b4:0a:86:aa:76:7d:45:1d:77:
ff:bc:2f:74:93:94:00:a9:5f:67:d9:9c:b2:58:5b:
e1:be:aa:dd:c4:12:c9:6b:3b:8d:5e:6f:cd:7a:77:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:0E:23:E5:98:BB:D8:6E:3B:C2:0C:3B:15:06:80:BC:32:45:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BDB401CA8E611EF8B1CA09E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1a:0c:e0:f7:57:ed:2b:96:54:2b:4f:40:a5:71:06:07:5d:
db:d3:73:63:eb:fc:3d:44:0a:23:a2:22:f2:23:1d:cf:f2:f8:
f8:f1:d6:89:55:fb:b9:10:c8:a2:af:3a:c8:39:f8:e5:24:91:
1a:1f:a4:4e:d8:6c:e6:2a:b4:e5:8a:b4:b5:17:99:97:b4:e1:
f1:74:be:ec:9c:ec:d1:36:59:de:70:25:7a:a4:f6:50:f2:f8:
14:0f:b7:9d:94:64:fe:b2:68:90:26:f0:9d:e4:4f:72:5a:23:
95:b0:e9:e4:f9:c8:f2:f4:36:85:ce:39:50:4c:30:2a:bb:52:
52:96:39:2b:e6:ed:55:f2:db:09:c4:a8:47:00:80:af:6f:b5:
67:11:8d:f4:94:77:24:01:41:91:24:f4:ed:c9:61:d4:e4:f0:
c9:45:89:b9:a7:4e:af:21:fc:36:2c:96:60:ff:a5:ce:33:43:
6f:53:38:71:50:33:fe:f6:ee:e3:9d:5d:c9:13:34:69:dc:89:
cd:f0:42:c5:f8:67:5e:a2:12:94:b7:d6:14:9c:9b:5e:bb:89:
22:e5:86:14:62:01:a9:71:4f:73:c2:04:94:98:32:46:8d:77:
8e:fc:16:1c:40:be:19:83:ed:9c:89:38:fe:01:36:f9:42:17:
1b:96:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:26 2024 by rpki-client on console-fra.rpki-client.org