Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FC943169A9211EF9423F747762E951A.roa
File: 5FC943169A9211EF9423F747762E951A.roa (raw, json)
Hash identifier: SV2kohZiNHAJkk90Jsg6qzTNeh9XwGDopIHKxJvvwpQ=
Subject key identifier: 52:87:B1:11:76:A0:B2:B0:55:3E:B3:E7:0A:43:13:F5:01:97:39:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01067A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FC943169A9211EF9423F747762E951A.roa
Signing time: Mon 04 Nov 2024 09:51:33 +0000
ROA not before: Mon 04 Nov 2024 09:51:30 +0000
ROA not after: Sun 04 May 2025 09:51:30 +0000
asID: 134687
IP address blocks: 154.89.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67194 (0x1067a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:51:30 2024 GMT
Not After : May 4 09:51:30 2025 GMT
Subject: CN=67289925-857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:a0:70:49:79:d3:4f:8a:4d:a7:ef:f6:c5:
6a:8c:03:13:68:9f:5e:36:2c:00:43:b1:0c:ba:43:
61:50:7b:a1:c8:76:f8:ab:e7:12:27:2d:1d:1b:33:
df:04:9a:0b:72:14:d9:56:61:1b:07:69:e9:d1:3b:
3e:96:3c:89:b3:81:54:83:ee:9c:4d:9b:30:59:18:
1a:a1:b5:b7:16:82:26:2a:9d:34:c3:8c:be:46:03:
49:03:4f:e2:e0:ff:5b:37:a8:a8:6b:bf:51:1d:ab:
9e:0f:1c:67:1d:a5:79:01:98:92:92:f6:6f:99:db:
68:09:7a:61:a7:c9:ff:0c:ff:04:28:fd:f1:e4:23:
fe:1f:82:06:2e:bb:ea:2e:be:91:d7:e6:b9:c9:8a:
99:fc:32:14:6c:f0:bf:08:47:ee:9e:2d:54:17:e7:
ef:bd:be:6a:b2:50:d9:f2:19:88:2a:8a:85:59:37:
ea:43:c0:70:0e:c8:e1:71:e2:7e:ec:cc:f3:a2:86:
6a:44:ff:14:3d:16:1a:b8:3e:0b:8c:d9:2f:1e:9f:
0f:18:1e:10:d5:8f:08:b9:6d:5a:b9:33:9f:e5:40:
d2:88:b4:fc:ab:9a:3b:b2:e7:3f:95:2a:90:70:07:
4c:fd:f3:87:3a:42:70:18:b0:74:2b:e1:45:ed:98:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:B1:11:76:A0:B2:B0:55:3E:B3:E7:0A:43:13:F5:01:97:39:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FC943169A9211EF9423F747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.1.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3d:82:95:53:59:d1:6d:fd:10:01:fc:76:11:12:89:6f:b1:
a9:17:d6:90:e3:be:be:2a:75:ef:ac:ff:6c:93:65:f1:a8:03:
5f:98:68:09:b5:e7:58:d7:a5:f6:82:12:ff:0e:62:c2:40:24:
94:78:dc:8e:51:42:72:50:b5:b8:be:1c:39:ba:94:79:50:c4:
b4:a4:6f:7f:50:db:83:2e:7b:66:a6:37:d0:d3:74:32:f1:a0:
ec:38:16:35:ff:99:18:a8:dc:c4:f9:aa:ea:b3:47:31:34:a2:
68:b4:0b:88:ef:33:91:76:56:11:d1:b3:ea:39:3e:53:37:b6:
5e:ba:7a:4c:81:6c:3f:b3:04:6b:4c:ed:3f:23:c4:fb:78:27:
80:ed:a4:3c:c3:a7:d8:f7:16:5f:49:ca:59:64:42:47:41:61:
e1:04:50:6a:79:42:f7:3a:23:2c:50:05:89:64:51:fb:75:a0:
15:8a:0e:33:42:73:7d:62:71:72:75:6a:18:2c:51:59:67:db:
91:66:cb:31:9d:4b:d5:f0:8f:1d:da:59:de:5d:67:e6:6d:2d:
76:7e:04:60:17:40:e3:80:84:9f:2b:10:ac:23:6b:83:d4:5e:
f9:3c:21:98:fb:a2:99:07:b5:cb:7c:9d:19:45:3f:a3:92:49:
a9:51:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org