Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978FFA1884F611EE9BF601514AD9E6FC.roa
File: 978FFA1884F611EE9BF601514AD9E6FC.roa (raw, json)
Hash identifier: MFvUPmfXFEdha6uf3xOklwYFfQ3oD0aDMOdhXKtwz74=
Subject key identifier: 0D:DA:CE:05:77:DF:D3:E4:49:0A:AE:EF:31:EF:EA:10:B2:A2:2B:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5065
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978FFA1884F611EE9BF601514AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:08:33 +0000
ROA not before: Fri 17 Nov 2023 03:08:30 +0000
ROA not after: Tue 12 Nov 2024 03:08:30 +0000
asID: 54252
IP address blocks: 154.201.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20581 (0x5065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:08:30 2023 GMT
Not After : Nov 12 03:08:30 2024 GMT
Subject: CN=6556d931-7385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:bb:b3:a9:69:af:50:92:88:6b:f0:be:25:
cc:d5:c7:eb:54:87:48:43:0f:fb:19:6c:1e:9c:54:
6c:e6:d1:b5:8d:9f:07:42:c4:3c:8f:75:a7:f5:e0:
51:75:73:1c:d3:da:43:35:d6:d0:2b:06:40:0c:76:
a8:77:6b:6f:cc:18:1c:40:97:36:4f:2b:bd:d8:3d:
2b:4f:63:91:2f:06:ca:fc:ea:87:be:99:8d:48:32:
89:35:ec:61:e8:52:3f:49:4c:28:7a:1f:b1:00:8d:
5f:a4:69:f2:54:b1:34:5b:c6:f8:81:5a:55:e4:55:
42:22:a8:6e:95:a4:4d:06:41:1d:4e:dd:7b:91:92:
03:34:2e:9a:c1:79:0c:d9:90:5d:7c:b6:fd:b9:9e:
e9:68:be:b5:9f:42:4c:83:12:d1:28:8c:4a:e5:c3:
cc:45:7a:9e:33:cd:f2:4a:49:8a:b3:a9:18:de:c8:
de:cd:eb:bb:99:32:e4:dd:ac:c4:5c:fa:de:2c:73:
3b:57:98:52:14:46:7e:d1:82:94:73:36:9f:d0:87:
03:e6:06:14:43:e0:32:d4:19:0f:72:cf:70:02:c3:
8f:4c:5c:18:00:68:df:09:ee:20:81:fc:64:ba:54:
93:eb:22:05:b2:cd:3b:22:4d:8e:42:0d:76:34:a3:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:CE:05:77:DF:D3:E4:49:0A:AE:EF:31:EF:EA:10:B2:A2:2B:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978FFA1884F611EE9BF601514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:22:a2:ce:df:b0:13:2b:12:ba:b6:17:ea:ee:17:96:cc:d0:
66:d6:0c:1e:c9:96:a8:9b:e5:17:2e:c4:c0:02:f1:df:95:b4:
65:1e:df:1f:e4:01:01:d6:54:ba:f7:f0:75:20:19:cf:06:20:
13:41:09:0b:0b:87:be:5b:e3:6c:68:f7:46:8a:a8:87:3c:2e:
84:2d:ea:64:54:94:8d:60:70:fe:41:92:f8:65:c9:a9:cd:30:
0c:98:a6:3a:32:1d:7b:50:cd:9a:dc:eb:6f:01:f3:0b:43:fc:
a0:3c:b5:fb:52:70:da:1f:6d:3a:34:31:25:73:3d:2d:d3:ed:
0b:ae:dc:0b:e3:30:8f:5d:a9:52:83:9e:d9:d4:da:46:9b:a8:
9b:e7:e5:d2:07:b6:1b:31:ea:a1:8c:9f:b7:30:b0:f8:d4:8f:
82:98:bd:d1:64:df:48:2c:d7:30:b2:fe:6f:a8:cc:3f:f9:26:
bf:a6:0d:9b:4a:1d:ef:d7:52:10:97:05:9a:1e:38:a1:36:7a:
5e:66:f4:6b:33:d1:ae:85:21:73:12:9b:7c:68:a7:79:89:d7:
11:9c:a2:b3:e9:f1:0b:b3:a1:39:a9:54:2b:0c:8f:9a:ff:a1:
37:2d:7e:06:6d:f1:c7:ef:97:c8:4d:52:63:e3:26:82:12:f8:
dc:60:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org