Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DC0EBA410CD11EFBDCCD956017001B1.roa
File: 5DC0EBA410CD11EFBDCCD956017001B1.roa (raw, json)
Hash identifier: lhZHovSv0ZEkod5hyhUfwpIWkpBhyWzQzFrzUpf8/Eo=
Subject key identifier: D6:82:5C:88:54:F7:5D:1F:A0:D3:E6:97:13:C0:AC:CB:73:9C:0F:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B70B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DC0EBA410CD11EFBDCCD956017001B1.roa
Signing time: Mon 13 May 2024 02:06:10 +0000
ROA not before: Mon 13 May 2024 02:06:07 +0000
ROA not after: Tue 27 May 2025 02:06:07 +0000
asID: 209242
IP address blocks: 154.92.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46859 (0xb70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 02:06:07 2024 GMT
Not After : May 27 02:06:07 2025 GMT
Subject: CN=66417592-53d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:1d:10:00:f0:8b:2b:61:a9:71:5a:7c:f7:
e0:52:bf:60:72:18:40:da:e5:a7:9e:e4:a2:86:62:
2c:0c:5d:68:a4:e6:b1:ca:12:31:e4:d0:26:c7:c1:
ec:41:12:f9:c0:ce:06:37:d0:d2:75:4f:cd:6f:b5:
ab:95:88:9f:ce:47:69:21:2c:0f:2d:1c:31:d7:70:
e3:fd:2c:23:43:65:0c:5a:80:65:61:7d:9a:5a:29:
3c:15:3c:8c:01:47:a1:87:f1:5d:b0:25:67:82:19:
3c:dc:e4:5d:a8:4e:50:6b:1a:d6:f2:e4:82:3e:86:
71:de:3b:00:9d:9e:d7:e5:d5:4c:c6:18:c3:0b:b0:
96:30:db:8d:7d:2d:4d:09:97:80:f0:8a:7a:94:12:
f0:ab:f5:11:59:f8:1a:b4:1a:dc:e9:7b:b7:5a:5c:
7b:d1:7a:f6:ec:18:f9:21:33:ce:fa:73:62:0f:14:
23:b8:35:c3:5d:46:46:0e:33:a9:5f:3f:bb:61:9a:
7b:b7:01:88:2c:e2:35:f2:19:2a:6c:ea:bb:93:c8:
c8:c8:05:5c:71:60:0d:af:ab:a9:c1:35:2e:5f:30:
3d:2f:7e:20:98:ee:af:23:13:7b:88:04:b7:22:c6:
4d:86:0a:47:15:9b:52:1d:1f:9b:2e:89:68:3c:a2:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:5C:88:54:F7:5D:1F:A0:D3:E6:97:13:C0:AC:CB:73:9C:0F:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DC0EBA410CD11EFBDCCD956017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c8:2b:1a:98:48:48:79:25:9f:6a:ef:6a:1d:16:1c:f2:ce:
85:2d:08:6e:b3:72:3d:97:5a:75:60:48:bd:fa:f2:d3:5e:a3:
e9:ca:70:c1:34:83:09:cc:59:02:d6:b4:fe:0b:be:89:e1:7e:
ae:ec:5e:87:11:90:09:49:c6:f5:28:ca:78:38:f2:bf:5b:9a:
cd:a1:59:dc:ff:8a:06:b3:f7:27:a9:4b:05:cc:ca:5f:1e:2c:
36:d7:e2:b0:49:21:c7:98:97:13:f5:40:86:30:88:15:0a:fa:
ca:75:f2:9e:da:c9:a6:48:53:b7:94:79:b2:41:7e:df:28:7f:
53:62:82:9c:4b:b6:1e:f2:5b:8f:ee:11:4f:9d:2d:20:55:3f:
c8:a4:9f:de:c8:fa:25:6f:af:a1:da:17:fa:2e:75:08:df:4f:
43:77:4e:09:99:e1:12:11:88:2a:f3:c5:c9:ed:99:50:ca:da:
93:a2:fb:ef:24:ec:7e:0b:a0:5f:4b:88:ac:33:b0:48:01:bd:
3c:ee:16:d4:99:b2:d1:29:23:7a:09:2f:d4:6f:2c:f9:b1:e4:
9e:4f:14:a8:c0:a1:00:0b:7b:48:5b:cc:7e:9f:09:83:b3:7c:
43:29:0d:77:4c:e2:09:e7:8a:74:6b:16:18:1b:df:20:4f:68:
0d:c0:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org