Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5925FEC96B511EFB6013F68762E951A.roa
File: C5925FEC96B511EFB6013F68762E951A.roa (raw, json)
Hash identifier: NTNrzbq68Nnaj8xYSB9zjZ1HII0yTtZbVH+JUSCZWS8=
Subject key identifier: AC:8C:20:0F:29:C6:5F:EF:57:E7:5D:77:A4:3F:9F:AD:0A:92:39:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010423
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5925FEC96B511EFB6013F68762E951A.roa
Signing time: Wed 30 Oct 2024 11:54:52 +0000
ROA not before: Wed 30 Oct 2024 11:54:48 +0000
ROA not after: Wed 11 Dec 2024 11:54:48 +0000
asID: 138915
IP address blocks: 154.203.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66595 (0x10423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 11:54:48 2024 GMT
Not After : Dec 11 11:54:48 2024 GMT
Subject: CN=67221e8c-fffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:11:f9:4b:b7:86:95:c7:bd:2e:e3:87:ad:
d5:cb:e0:82:85:7d:e9:28:a0:69:91:c8:32:5b:cb:
b0:3f:b5:6b:80:4a:f2:83:f2:46:fc:32:f4:94:a8:
62:1e:5c:54:51:77:1d:74:26:e7:4a:d8:b3:96:00:
2c:37:22:31:9f:26:db:7f:6e:18:f4:3d:d9:ac:6c:
02:f6:06:7d:db:9b:87:f7:75:69:8d:73:2e:1e:51:
e1:3a:6f:ba:e8:26:43:b5:20:ea:d2:0c:30:d0:d4:
85:da:d2:be:b9:be:49:f5:0f:f3:74:89:89:1f:c0:
8a:e7:74:8b:e5:42:dd:75:80:96:86:e7:10:e8:7e:
06:12:0f:16:d8:2e:8f:4f:2a:21:3b:b4:40:ee:c3:
48:b5:44:39:92:11:d5:ae:a7:7f:6b:b8:e4:77:5e:
2f:df:c9:18:95:a3:60:07:62:cf:f0:bf:f1:cd:e6:
74:09:c1:25:a2:ea:b9:27:51:21:2e:dd:19:3f:3d:
a5:6b:d2:7a:6d:fb:e5:42:ae:af:50:dc:41:2d:4d:
7b:14:5f:7e:4c:67:27:74:2f:de:c7:1e:9f:62:24:
47:fa:c0:af:1e:01:ab:bc:57:06:ff:5c:ad:c2:ca:
35:11:98:15:a2:b1:ac:24:7f:18:19:97:6d:c5:4b:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8C:20:0F:29:C6:5F:EF:57:E7:5D:77:A4:3F:9F:AD:0A:92:39:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5925FEC96B511EFB6013F68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9c:a1:49:a7:c2:79:82:fd:88:3c:f5:b5:65:df:a7:67:e4:
cb:4a:dc:0a:35:a6:77:64:4c:c6:2e:ef:f4:13:ba:13:50:14:
71:69:92:15:32:69:85:16:e0:c2:da:53:ae:65:89:95:c2:16:
1f:99:e8:b9:e8:80:08:3d:23:7e:22:4f:f3:72:c9:c2:ba:2a:
2c:d5:43:ca:e9:5c:c4:ec:9d:f8:bf:e4:1c:f3:fc:ec:0d:5d:
38:29:26:4b:cc:bc:87:1e:d9:4b:39:8e:39:05:04:bf:f8:70:
68:e1:ec:82:5b:f6:3b:59:53:8c:7c:83:4a:d0:89:68:5d:96:
76:6e:18:3e:4a:84:f3:15:12:47:05:b8:fc:1e:a3:07:d4:e4:
91:c0:84:80:c1:24:e5:33:b9:83:93:ec:0b:5f:17:72:35:f0:
43:da:05:b8:da:17:b8:05:11:fc:75:42:82:38:e8:47:61:08:
4b:df:16:f5:a2:85:b7:12:5f:9f:3a:f5:f1:09:c3:b4:10:ac:
bd:7f:8a:e8:d5:1b:ea:bb:4b:a4:d2:70:8e:d7:19:39:39:37:
37:7c:21:95:66:e8:2e:e1:d9:f8:4b:d2:ec:6e:7d:ed:da:0d:
38:7b:82:ad:f0:4d:cc:73:95:75:58:a9:c5:74:77:93:02:18:
2f:31:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:35 2024 by rpki-client on console-ams.rpki-client.org