Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F796178A33111EF80981448762E951A.roa
File: 5F796178A33111EF80981448762E951A.roa (raw, json)
Hash identifier: jBPvvPv6PGtm4e/Aha6q0ZUQ/3VpGJEKR8JE672NSfc=
Subject key identifier: C5:CB:51:99:52:1C:34:82:D9:4D:E6:DF:67:C2:67:40:10:A0:4B:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F796178A33111EF80981448762E951A.roa
Signing time: Fri 15 Nov 2024 09:09:52 +0000
ROA not before: Fri 15 Nov 2024 09:09:49 +0000
ROA not after: Sun 12 Jul 2026 09:09:49 +0000
asID: 55967
IP address blocks: 154.85.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68980 (0x10d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:09:49 2024 GMT
Not After : Jul 12 09:09:49 2026 GMT
Subject: CN=67370fe0-30f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:cc:ed:f1:cc:ab:0b:4d:ce:65:ae:ac:ba:
a1:d6:0b:3c:25:c5:71:05:24:54:5b:6e:b3:bc:28:
94:26:ac:d0:e7:6c:44:43:59:89:52:81:78:76:6e:
64:c8:fe:96:db:66:ab:6a:55:85:92:e3:b0:d3:92:
6d:a9:7f:5d:02:4f:1d:0a:ac:b9:01:bf:05:d5:e6:
21:52:49:05:b2:45:6c:dd:5e:b7:b6:2d:86:99:91:
93:df:b4:ff:00:8f:02:1d:8c:18:ec:4b:43:fa:9b:
b0:16:06:17:27:94:da:c2:07:9a:52:db:3a:7b:3e:
8c:41:4f:3c:a3:47:a6:bc:b3:80:40:b2:e8:18:60:
a3:2d:81:21:56:fd:81:a3:d7:56:be:34:17:22:d3:
88:44:69:10:70:86:c6:7c:2d:e2:3f:eb:a4:28:f1:
09:97:b9:e6:92:48:6b:2d:b9:7a:41:e0:5c:50:75:
87:0d:7f:bd:c6:64:88:23:ab:e7:93:43:94:40:36:
73:0b:e0:ab:fd:91:b2:1d:40:2e:61:dc:b3:83:c4:
aa:86:31:24:c3:a9:69:63:3b:bb:c0:c5:1b:53:69:
62:ae:6c:87:68:4f:fd:8c:33:f6:a5:fa:63:a3:1b:
ad:c6:0c:8e:56:f5:65:9b:5f:67:20:0c:10:a3:58:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CB:51:99:52:1C:34:82:D9:4D:E6:DF:67:C2:67:40:10:A0:4B:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F796178A33111EF80981448762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:ec:8a:a1:51:6a:00:5d:b8:53:83:50:72:2b:8a:09:7e:72:
c2:ab:b3:bf:b0:73:8a:d9:e7:9c:9d:b5:8a:66:42:f6:2f:7e:
ca:78:79:fe:b6:5e:1a:dd:13:9a:84:59:c8:4c:ee:7e:3f:e0:
04:f9:44:16:02:07:63:8c:3b:1b:59:66:e7:f8:f2:48:ee:09:
51:c9:ba:f6:d0:5c:2a:8a:e2:8c:71:0d:53:61:28:74:d1:dd:
a4:c0:c1:67:7e:06:01:69:c3:c1:44:91:3b:1b:89:1c:69:6c:
97:53:ac:f2:71:fa:60:12:5d:8f:c8:78:f3:e3:80:17:10:e4:
f5:43:74:a3:10:50:b1:90:73:7a:63:9a:3b:81:39:c0:b7:80:
38:34:38:68:d4:eb:30:02:cc:89:bf:b2:d1:15:1b:f6:eb:3b:
d7:d0:79:a8:09:c2:f5:c6:d9:4f:57:d9:4d:11:da:75:89:6e:
70:0d:c9:dc:a4:80:62:16:ad:45:f6:fb:72:43:bc:d5:39:86:
ff:d2:b6:4c:09:9d:e4:5e:ee:32:d9:92:73:2e:ea:ab:22:01:
c3:ae:84:bf:5b:4f:1f:54:5d:cf:54:d1:ec:b1:ae:4c:c1:e2:
b9:25:ee:8d:5f:be:26:54:be:df:35:10:da:4a:2d:66:1f:ff:
03:b3:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org