Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CD0D92696E11EE88E3E35D4AD9E6FC.roa
File: C5CD0D92696E11EE88E3E35D4AD9E6FC.roa (raw, json)
Hash identifier: USU6SoUNAPHgvaiD+hHGNZopMqcbzVnP/rcU0D2k2Uw=
Subject key identifier: 7E:83:CD:08:7E:2F:94:58:84:AC:9B:37:B2:BA:68:42:9C:11:D4:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 45C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CD0D92696E11EE88E3E35D4AD9E6FC.roa
Signing time: Fri 13 Oct 2023 02:18:18 +0000
ROA not before: Fri 13 Oct 2023 02:18:14 +0000
ROA not after: Mon 30 Sep 2024 02:18:14 +0000
asID: 201411
IP address blocks: 154.205.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17856 (0x45c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 02:18:14 2023 GMT
Not After : Sep 30 02:18:14 2024 GMT
Subject: CN=6528a8ea-9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:39:40:85:24:df:5c:d2:fc:c5:7e:5d:54:
41:ac:19:50:27:3d:08:57:3e:05:5d:11:b0:c7:79:
3d:c7:bc:c0:d8:9b:e3:6f:28:9b:ef:b9:63:dd:b6:
fa:03:70:53:6a:d1:de:94:6f:e7:1c:63:c2:ae:60:
99:60:43:b6:f5:68:cb:16:9a:71:dd:24:c9:55:0b:
dd:8b:8a:93:5b:bb:7f:e4:f1:ea:9e:bd:1b:6e:8e:
e5:57:c9:72:98:0a:68:d3:40:95:02:db:81:a2:0f:
67:c9:68:ec:62:7e:61:15:2c:32:f5:12:b7:7f:a2:
35:10:08:a6:9e:80:d7:ee:ed:84:f4:01:f2:5e:df:
32:0e:56:4e:00:45:6b:68:53:82:f2:7b:9f:04:65:
e5:dc:17:9a:f0:e9:15:78:82:c5:1b:39:14:5b:6a:
b1:1e:af:02:02:93:41:2a:14:ad:9b:94:4e:cd:20:
04:a5:50:ca:90:c4:19:77:cd:7e:fd:99:ef:b1:12:
a9:2d:6d:aa:bd:62:c3:73:58:90:97:6c:9a:bf:d2:
81:db:3f:d0:29:7b:06:d3:ed:65:32:bc:6f:5b:7b:
7a:1e:e9:86:9b:ce:ff:f7:3b:40:74:83:98:24:9b:
72:5d:47:ee:2c:98:4e:32:bf:8b:84:fe:ae:c7:da:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:CD:08:7E:2F:94:58:84:AC:9B:37:B2:BA:68:42:9C:11:D4:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5CD0D92696E11EE88E3E35D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.188.0/24
Signature Algorithm: sha256WithRSAEncryption
68:91:d6:f9:83:4e:b4:13:1b:b7:d2:b3:e7:8c:cd:03:46:97:
16:af:25:38:c8:4c:5a:84:a7:af:bc:39:90:e0:7a:c0:7b:4e:
be:ac:6e:b6:e2:d7:e2:6b:6f:ef:11:27:5a:d7:5e:84:70:7a:
89:e4:c1:eb:4a:86:ce:0b:22:47:be:b3:bc:b4:5b:e3:c0:65:
44:6c:bd:97:7a:29:bf:40:8d:df:1b:56:ae:31:cf:9f:84:a6:
e1:39:d7:1e:3c:8e:61:88:d1:00:59:31:d7:2a:dc:c4:0e:9f:
43:35:fc:e6:55:40:0b:0d:86:b9:62:89:58:08:6a:35:f5:91:
99:57:dc:c8:97:80:55:f8:7f:7d:16:93:4e:bb:b2:81:fb:eb:
7c:43:d7:d4:47:90:31:94:23:b3:19:78:a0:82:2f:73:13:98:
79:c4:21:69:d1:b2:31:ca:f4:3e:00:c3:65:60:6b:0a:08:c5:
0f:4e:33:79:46:51:c6:e2:44:df:e0:9c:a7:3f:90:bc:45:4d:
5e:6a:54:11:0b:1e:a0:bf:f8:21:70:e8:c1:b5:e9:10:a2:37:
f6:27:f8:ca:71:98:0d:ab:19:71:f7:93:d3:8e:08:5f:37:43:
7b:b8:74:db:c8:cf:05:7f:67:19:c3:20:ad:27:e7:77:b2:c6:
d2:2a:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:28 2024 by rpki-client on console-ams.rpki-client.org