Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E89D8B696B511EFB04A0666762E951A.roa
File: 5E89D8B696B511EFB04A0666762E951A.roa (raw, json)
Hash identifier: UtGihoPBAHPCWfjBn2rGmnPZTJjzVPm7yQW0P1KUpYc=
Subject key identifier: 2B:33:3E:17:B6:62:3B:6E:CC:4C:E1:15:82:A0:9B:78:E9:3C:CD:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01041F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E89D8B696B511EFB04A0666762E951A.roa
Signing time: Wed 30 Oct 2024 11:51:59 +0000
ROA not before: Wed 30 Oct 2024 11:51:55 +0000
ROA not after: Wed 11 Dec 2024 11:51:55 +0000
asID: 138915
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66591 (0x1041f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:51:55 2024 GMT
Not After : Dec 11 11:51:55 2024 GMT
Subject: CN=67221ddf-cbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:00:71:8a:53:4b:47:ed:cb:2c:26:20:e1:
3e:25:4c:0b:23:c6:de:9f:3c:78:ec:b7:35:79:24:
d4:b5:c7:69:29:88:42:91:01:44:ae:8e:4f:ec:e4:
da:57:5c:63:f6:9f:7e:95:b8:05:cf:56:8e:f8:db:
a8:ab:d4:aa:ef:ef:ea:0c:94:46:48:d9:33:71:a3:
78:73:74:17:46:dc:91:69:7b:a9:8f:0c:95:0b:b8:
d0:f1:23:21:43:36:61:c2:3a:5e:80:b7:a2:0e:e1:
d5:7e:a4:71:73:f3:9c:a5:6c:48:3e:6d:c4:8a:4b:
d4:87:33:cc:0d:06:df:aa:fe:52:b2:ea:42:d1:4b:
09:81:9c:ae:f7:24:40:ec:46:4e:6a:40:24:df:78:
77:16:bc:5d:6a:13:ad:f4:b4:81:56:d4:82:e7:98:
e3:93:96:fc:6b:dc:c5:99:6a:36:df:7e:c8:a3:23:
d4:9b:db:08:91:32:52:e0:61:d1:3c:ca:5f:a5:fc:
ff:c8:b4:be:4b:d0:e5:e4:3e:05:84:72:84:71:97:
c1:33:46:05:7f:96:7f:57:d6:1d:3f:50:49:5c:f8:
e1:66:08:f2:48:45:6c:d8:23:e6:db:54:84:ee:ab:
7a:32:ce:6e:61:2d:73:28:c0:74:10:4a:45:03:b9:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:3E:17:B6:62:3B:6E:CC:4C:E1:15:82:A0:9B:78:E9:3C:CD:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E89D8B696B511EFB04A0666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a9:3b:e9:7d:c0:5e:e0:9e:3d:a1:62:c0:45:da:ee:a9:15:
96:54:21:d6:9e:de:09:93:55:20:d2:07:82:75:3d:a0:64:37:
1c:b8:0f:57:86:32:ca:f9:ba:e1:e9:6e:c5:98:fd:5e:33:74:
e9:2f:1c:d5:4b:75:a3:93:28:be:b6:d0:41:ae:50:2e:78:f6:
9e:ce:57:05:32:f8:2b:38:bb:0c:4e:d8:1f:06:fe:19:93:6f:
8a:89:a4:9d:a9:7e:cb:e6:e2:d8:88:73:7a:3a:f6:22:b0:8e:
df:a4:9a:d4:3b:48:39:3a:2d:ae:ba:b3:d7:b0:ea:eb:ef:57:
eb:38:ca:a3:89:5c:e9:3f:74:36:99:b8:ab:c5:98:de:64:57:
de:8f:23:a1:e5:56:77:a2:31:b4:d1:c3:9d:e1:45:2b:ad:a9:
45:01:a9:00:b9:f2:dd:a9:62:8e:c9:60:77:c5:b0:5d:19:b8:
61:b0:38:46:72:9a:2d:30:c5:13:8a:15:5f:78:0b:89:82:39:
1e:1e:9a:a3:ad:4f:0c:d2:a3:cb:54:59:e8:e5:28:44:5d:fe:
5a:5d:58:0c:07:22:94:16:e3:63:a0:f7:aa:69:23:8d:be:d7:
2a:8b:e3:cf:54:77:0d:06:3d:10:7b:ac:ab:7f:09:55:76:10:
81:cf:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org