Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96571B6610CB11EF96C19C48017001B1.roa
File: 96571B6610CB11EF96C19C48017001B1.roa (raw, json)
Hash identifier: N1nAeg+D8a0xkoZwERsJkdyeRldDMce4RWPjAdqIRFA=
Subject key identifier: 21:39:74:94:89:E9:8A:CE:DD:8D:46:83:4B:8A:9B:69:11:BB:27:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96571B6610CB11EF96C19C48017001B1.roa
Signing time: Mon 13 May 2024 01:53:26 +0000
ROA not before: Mon 13 May 2024 01:53:22 +0000
ROA not after: Wed 21 May 2025 01:53:22 +0000
asID: 137510
IP address blocks: 154.205.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46855 (0xb707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 01:53:22 2024 GMT
Not After : May 21 01:53:22 2025 GMT
Subject: CN=66417296-d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:46:36:1b:33:49:05:48:e3:98:57:49:0b:
54:4c:42:9f:37:ff:9e:8d:1c:68:c7:67:66:52:e5:
d0:27:78:94:98:a0:2b:75:4f:a2:35:a2:7a:0a:73:
ea:24:6b:e0:94:ef:8f:29:67:8f:86:5d:70:bc:63:
e1:91:cd:5a:3c:a0:11:16:23:60:2e:b2:3f:c4:ac:
10:31:f8:46:95:5b:d0:89:63:40:af:d1:ad:6f:7e:
b2:75:34:de:ce:03:16:69:54:c5:b9:49:4f:25:2d:
3a:b3:71:d5:54:76:7a:3f:ff:be:f3:4e:c3:21:49:
f5:60:a5:29:5b:c0:c4:6a:81:9e:23:0f:74:a4:93:
eb:cb:9c:f4:70:d2:9b:02:3d:7d:92:fe:31:8b:32:
fd:b2:cb:4e:fd:ea:38:74:a5:f5:d1:7b:39:b0:53:
40:8e:bd:ef:d2:7f:ce:d5:12:af:92:97:7f:73:7f:
9d:9b:e7:27:c0:ac:89:65:9d:bb:e7:d4:e6:ae:84:
de:37:48:af:7c:71:71:33:b3:ce:0b:6d:1d:d6:74:
18:ec:e7:a0:04:17:4a:03:ee:8c:ea:79:66:eb:80:
4d:a7:18:a1:f5:bf:9a:3a:14:a4:59:a7:7c:be:18:
8a:50:96:8e:5c:56:eb:db:5a:ae:94:fd:e9:d5:8f:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:39:74:94:89:E9:8A:CE:DD:8D:46:83:4B:8A:9B:69:11:BB:27:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96571B6610CB11EF96C19C48017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.187.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:98:b7:ba:fc:31:a7:92:1b:a6:05:13:17:02:30:85:40:44:
75:9f:71:d4:23:be:7d:5d:75:c9:35:e5:32:d4:75:1b:25:8c:
3a:fe:8f:08:08:26:fc:6f:90:5e:49:2b:a9:39:fa:02:ee:82:
3e:13:c2:43:1e:b7:2a:d6:6f:eb:6c:c9:eb:fe:0d:63:35:9d:
71:b9:fe:7b:17:4f:58:00:fe:53:c1:60:3d:9e:36:46:93:16:
37:bb:d4:b4:14:45:18:98:8d:ef:d4:17:9b:23:76:4e:15:01:
f3:53:cd:ec:a7:4b:17:96:ba:7c:6b:77:f0:3d:ee:49:2d:a4:
c1:78:da:12:e1:6d:0c:a9:0a:32:ba:80:44:98:ae:c0:32:bf:
2d:a0:1e:65:c9:f1:9a:17:24:68:57:0a:69:15:d9:a0:32:d8:
a6:a0:8e:9b:a1:38:73:22:66:af:8a:4a:c0:d4:10:75:c5:00:
f3:37:d1:b4:9e:25:ad:43:a6:98:75:92:7a:59:50:96:75:03:
85:84:a3:68:ff:fd:3c:54:5e:37:2c:ac:89:48:79:dd:a6:23:
71:a0:41:e0:03:1f:0c:56:27:1d:c4:8a:5e:ff:7c:15:4f:fd:
48:35:02:60:e6:36:93:6c:5a:b7:f9:e4:12:cf:8d:3f:05:dd:
18:70:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:24 2024 by rpki-client on console-ams.rpki-client.org