Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC34AE01EE311EFA450C4DC7CDC24C2.roa
File: 1EC34AE01EE311EFA450C4DC7CDC24C2.roa (raw, json)
Hash identifier: kQzvUCVS3k6UHfkLZnC6kcMjxjBA47GIdsjMFdIa94s=
Subject key identifier: 19:45:60:A8:15:A0:C5:28:23:BD:C4:D2:BC:85:57:7D:5C:E3:F3:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC34AE01EE311EFA450C4DC7CDC24C2.roa
Signing time: Fri 31 May 2024 00:17:10 +0000
ROA not before: Fri 31 May 2024 00:00:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:04 +0000
asID: 49505
IP address blocks: 154.209.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48172 (0xbc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 00:00:04 2024 GMT
Not After : Jul 1 00:00:04 2024 GMT
Subject: CN=66591705-78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:46:0e:f5:77:24:be:cc:eb:3d:47:bf:47:
15:ff:5f:6c:7e:49:86:58:66:45:e0:17:80:c5:1b:
5d:21:13:86:04:7d:3d:1c:f6:25:b7:1f:5e:a9:35:
a9:1a:f8:f2:2c:2f:b1:78:1d:0a:9e:b4:5d:98:1f:
fe:e5:8b:5d:b9:b5:a1:bf:44:f7:4e:28:b8:83:15:
31:5f:e6:18:ab:6b:44:46:b5:7d:5e:f3:cd:95:96:
17:2c:90:97:3d:1d:0e:ad:98:58:46:16:eb:1b:de:
c2:4c:88:31:b7:30:53:74:2e:90:84:54:b4:50:e2:
36:b3:58:d7:9e:9d:ff:db:b6:8d:75:4d:3f:51:26:
2e:18:5b:31:68:f4:5d:4f:80:be:04:2b:84:6f:b5:
59:4d:af:f1:6a:cf:4f:92:3a:79:71:fc:35:5d:0d:
04:73:14:3d:1f:d0:e4:9e:19:21:b5:05:8c:98:12:
50:5b:b5:c4:ab:cb:4f:f8:ef:c9:ba:a0:e1:4e:48:
9f:ae:05:35:49:f2:f9:3b:d7:25:a1:c9:cf:60:b0:
78:d8:e1:a2:f9:da:86:7a:cb:9d:57:5f:5f:d5:ee:
0c:35:99:ff:a9:21:e5:6b:3a:03:c4:3a:12:66:89:
7e:a9:36:42:88:aa:eb:cb:f9:0c:37:2a:64:d8:60:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:45:60:A8:15:A0:C5:28:23:BD:C4:D2:BC:85:57:7D:5C:E3:F3:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EC34AE01EE311EFA450C4DC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.192.0/19
Signature Algorithm: sha256WithRSAEncryption
34:5e:09:7e:8f:56:57:6b:74:f7:14:ad:2b:d7:1f:0d:b6:ae:
df:77:e6:3f:17:e9:86:2f:60:c7:0a:3f:4b:ab:83:e9:78:9e:
5f:70:3e:65:03:1a:23:c7:94:ac:af:fb:fb:1f:ba:3e:31:da:
2f:28:a3:68:8e:f7:5a:54:ff:12:21:e0:86:11:fe:e2:2d:3c:
3e:38:ef:72:22:65:bc:9c:43:4f:1e:7b:4a:19:5a:c6:48:bd:
17:1d:cb:e6:66:eb:be:dc:1f:75:1d:58:ec:e9:b9:05:73:ee:
92:8a:f6:e3:37:a9:31:2d:d1:0f:a7:b4:69:11:2e:49:6d:51:
3f:3a:b4:37:a1:70:bf:2f:3e:3f:16:1c:dd:95:6e:3c:f1:e8:
73:77:f2:f2:04:cf:99:88:96:d0:96:bc:1a:89:45:11:88:28:
80:ea:2d:d0:bb:a0:d1:53:b5:a1:62:a3:4a:08:7a:97:4b:78:
a8:ce:33:a7:b4:a4:40:93:c7:be:ce:6f:e0:db:f0:b1:da:1c:
2b:9b:01:9e:9b:53:5a:4a:28:00:8d:c6:60:fc:62:aa:e4:75:
0a:cb:73:85:f3:e0:3f:38:25:78:b3:c8:59:b1:20:a4:09:ae:
69:08:18:aa:5a:4d:40:5d:ae:5b:f2:5f:02:64:1d:42:ea:6d:
63:b5:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:37 2024 by rpki-client on console-fra.rpki-client.org