Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE49432A64D11EFB140194B762E951A.roa
File: 5BE49432A64D11EFB140194B762E951A.roa (raw, json)
Hash identifier: VZ0s2TCyAzXhTpFyam77lLBr2K+F8U47XGsqXePlgWU=
Subject key identifier: C4:66:D3:C2:86:FB:DD:52:FD:EF:C1:23:3E:85:A0:F7:59:5B:A4:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE49432A64D11EFB140194B762E951A.roa
Signing time: Tue 19 Nov 2024 08:07:46 +0000
ROA not before: Tue 19 Nov 2024 08:07:42 +0000
ROA not after: Sun 15 Dec 2024 08:07:42 +0000
asID: 51396
IP address blocks: 154.213.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69394 (0x10f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:07:42 2024 GMT
Not After : Dec 15 08:07:42 2024 GMT
Subject: CN=673c4752-f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:c5:dd:00:04:be:0b:cd:c7:42:b5:7d:8a:
95:7f:11:74:90:fb:56:13:d8:56:0b:95:87:7c:50:
01:83:52:8d:9b:a6:0c:5e:4a:da:63:4a:68:9a:9b:
f1:a1:fc:e1:3c:0b:a8:60:3e:96:06:15:a8:f3:79:
98:86:d8:87:da:03:2f:8c:5c:a0:b6:a8:2c:c5:6c:
b7:e9:10:99:7e:b2:5b:df:15:15:77:95:53:1b:e8:
41:9c:cd:79:c4:8c:1d:d8:c3:4a:b9:08:ad:81:14:
6b:f4:b0:d7:7a:9f:32:03:8a:7b:3c:a3:a9:2f:04:
71:cd:b9:c6:d7:1c:a8:47:a2:e5:60:ca:7e:0b:56:
3b:9b:a2:e5:94:33:9c:0b:d2:dc:88:20:f1:0e:96:
3c:da:72:f3:9b:8f:5e:3e:a8:aa:93:7f:e1:db:b3:
85:02:ce:0d:08:7c:b3:10:3c:8a:62:e5:a5:6a:82:
4c:0a:e2:7b:f0:b7:ea:cd:9c:ef:d8:ca:c0:a2:ce:
b0:83:35:20:d5:60:9f:6d:0a:72:0e:48:10:90:0a:
ec:97:4b:ba:ee:b2:81:35:3e:59:b5:0f:72:e4:ee:
3a:36:18:c3:b6:27:c7:ce:d4:6f:48:45:e7:04:2b:
43:2d:f4:8b:b0:78:ab:c1:f9:63:ac:54:9b:84:8b:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:D3:C2:86:FB:DD:52:FD:EF:C1:23:3E:85:A0:F7:59:5B:A4:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE49432A64D11EFB140194B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.187.0/24
Signature Algorithm: sha256WithRSAEncryption
49:59:70:a6:00:9a:a9:e5:cd:1b:3c:27:da:e0:50:78:1f:5e:
cf:6d:2a:9e:ec:a7:aa:f0:0f:6c:8a:86:83:55:c2:bc:58:d1:
80:50:1f:d2:a8:db:7b:29:ce:19:62:35:83:ab:36:c5:b0:cf:
fc:14:24:7f:cc:11:15:3e:96:c5:36:5c:40:49:a3:6f:1a:b2:
0f:12:37:c8:48:a3:01:aa:74:42:ee:0e:1a:40:89:60:94:20:
1b:2d:f9:03:27:51:d2:d0:6b:b4:66:fc:bc:58:c3:06:95:e4:
70:de:4c:37:c8:30:9c:b7:32:09:e9:68:15:2a:e3:49:7d:4c:
6d:6b:ab:77:1a:d0:5c:ca:d6:67:2f:72:90:16:36:43:b2:ad:
7a:19:ba:32:57:c7:c2:56:16:8b:84:59:94:7a:c8:dc:99:ed:
c9:99:8a:74:1d:58:3f:83:03:57:5d:a4:b5:26:ba:2e:ee:37:
5a:61:13:b5:48:63:95:33:0e:53:80:26:ad:ed:54:a7:58:62:
03:77:e4:34:d6:9c:d6:8e:26:2f:23:db:d5:ce:f2:0c:48:18:
11:bf:ec:4a:c6:4f:d1:c4:1a:39:38:e4:fb:df:90:04:3a:da:
0a:23:20:7d:5c:a4:28:3c:49:8b:3d:3f:3f:18:bb:66:4f:52:
19:ad:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:11 2024 by rpki-client on console-fra.rpki-client.org