Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB6A958A8F111EFA3697163762E951A.roa
File: 5CB6A958A8F111EFA3697163762E951A.roa (raw, json)
Hash identifier: CiDSY+okWPMLL6+F4ErEMZgn9xr2G8fTv+UbEIW3BPI=
Subject key identifier: 23:EF:DA:2E:A4:E9:E1:FC:0F:B3:82:1F:BD:61:4F:85:F6:A0:AC:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011157
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB6A958A8F111EFA3697163762E951A.roa
Signing time: Fri 22 Nov 2024 16:46:47 +0000
ROA not before: Fri 22 Nov 2024 16:46:42 +0000
ROA not after: Tue 03 Dec 2024 16:46:42 +0000
asID: 62240
IP address blocks: 154.195.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69975 (0x11157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:46:42 2024 GMT
Not After : Dec 3 16:46:42 2024 GMT
Subject: CN=6740b577-44c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:61:70:12:6d:84:11:c4:cd:90:88:e4:3d:
1e:0e:b6:41:3e:75:31:eb:11:87:55:20:a3:8b:01:
fa:c4:d3:7b:be:b9:15:ed:cd:61:2e:19:e9:f1:47:
45:a8:7a:13:f9:ac:fc:a6:7d:51:25:58:36:35:df:
a0:14:ae:21:f0:9f:b7:0c:8c:f4:14:09:d5:e1:d9:
0d:ea:99:19:ad:d1:57:93:78:2e:39:08:3f:d0:a6:
dd:ec:8b:9e:62:15:77:34:f5:68:6e:7a:4b:8c:e2:
00:ad:c6:f2:ca:e1:9f:cf:43:78:99:4b:59:08:7c:
e9:85:c8:98:cf:2b:be:18:35:43:15:aa:63:95:32:
6b:5a:76:0e:91:7a:4f:14:11:35:2a:ab:f7:d8:13:
60:67:70:ed:7d:44:1e:9a:8b:da:09:b1:49:a1:df:
04:cc:ad:78:fd:04:4b:76:2f:6b:0e:06:31:55:b5:
ac:21:44:40:39:40:ed:77:28:04:34:4e:98:aa:b1:
0e:a5:e0:85:8d:28:41:e0:ba:e2:df:33:72:c1:e1:
38:e3:6e:49:30:ca:9a:fe:03:f1:cf:37:3b:93:95:
2c:d0:58:d8:37:23:ce:33:8f:f8:bd:97:0d:fb:0d:
c2:83:22:59:a6:13:11:e4:82:32:f2:3b:72:50:70:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:DA:2E:A4:E9:E1:FC:0F:B3:82:1F:BD:61:4F:85:F6:A0:AC:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CB6A958A8F111EFA3697163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.166.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a2:c9:c7:5e:4b:cc:13:4c:e4:5f:0f:9d:37:ab:9e:1e:40:
8d:fa:9d:46:1a:b2:13:92:4c:1b:82:b8:4e:e8:59:71:cd:e0:
62:52:1b:1b:71:ef:5d:2b:91:d0:76:ac:5b:42:9c:86:4a:45:
e8:e0:e1:2a:8e:e4:03:0c:37:d6:c3:7b:77:6a:ec:e8:e1:dc:
3f:67:91:2a:f1:d6:7e:19:84:be:0d:8c:46:08:63:b5:77:3b:
1b:9a:b5:02:a2:ea:9d:9d:12:2f:74:98:01:bd:bc:7b:da:78:
86:db:5b:67:de:9b:76:22:24:26:70:f3:f7:24:17:fd:8e:20:
5b:0a:7d:27:80:5b:b4:73:e7:70:aa:69:c5:77:f8:3c:12:46:
ef:b3:45:93:be:61:94:95:3c:47:1d:7d:73:0e:e7:b9:26:2b:
b6:7c:84:9a:fe:15:aa:f4:9f:27:7e:3e:1c:41:16:4c:27:0f:
bb:1e:86:07:ab:11:dc:9a:89:d1:11:2d:3b:f1:03:48:dc:77:
62:da:df:40:31:e9:0e:9c:3d:04:42:41:5a:19:15:b7:6f:01:
3b:c3:20:1b:0a:f4:b8:e2:1e:35:e6:4e:bd:5d:38:ee:ca:66:
37:96:58:4c:ea:20:e4:93:8e:82:b0:db:4b:d9:94:d8:5b:bc:
39:67:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:32 2024 by rpki-client on console-fra.rpki-client.org