Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6EA30C82BE11EE901B723C4AD9E6FC.roa
File: 2E6EA30C82BE11EE901B723C4AD9E6FC.roa (raw, json)
Hash identifier: 9P/+grEhDjz3r43Lc+2NDavKJqfES0mAKKPUNv2tlpw=
Subject key identifier: 05:0D:01:52:39:FE:05:13:CE:DC:22:4F:2B:BE:5C:65:C4:C4:57:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5000
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6EA30C82BE11EE901B723C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:19:43 +0000
ROA not before: Tue 14 Nov 2023 07:19:40 +0000
ROA not after: Tue 12 Nov 2024 07:19:40 +0000
asID: 397630
IP address blocks: 154.202.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20480 (0x5000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:19:40 2023 GMT
Not After : Nov 12 07:19:40 2024 GMT
Subject: CN=65531f8f-e4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:67:8b:c1:a6:f3:ab:56:3b:9a:9e:55:98:
d1:f2:c0:a7:97:9e:1b:60:b7:c6:ad:46:5f:41:ee:
f7:b7:05:58:16:2e:ef:06:54:7b:a5:07:05:83:29:
0f:b1:c2:fe:51:ef:f5:6a:07:6b:43:76:28:55:39:
34:53:4b:51:bb:ee:cf:59:a7:91:67:98:6c:71:90:
b3:d5:d8:aa:6b:52:b5:5f:db:c2:da:6e:48:ff:1e:
af:cd:88:62:f5:fb:e3:e0:cc:6c:da:03:80:2e:1e:
11:d2:f7:93:37:39:ff:db:39:51:b1:67:e8:aa:1a:
67:5d:64:06:c7:df:82:1c:ad:eb:ae:4d:37:41:e2:
bd:c5:fa:ca:23:96:c3:0c:32:2f:7a:e4:20:36:56:
89:34:de:27:87:2c:09:10:7d:a8:9c:96:25:21:95:
c8:15:e9:26:73:c9:56:a0:80:ba:71:19:19:27:c5:
c7:df:13:16:df:17:4c:6f:c4:55:29:2a:ba:f7:d9:
c3:45:7d:05:b0:37:e0:b0:84:bc:06:89:1d:1c:d6:
07:34:9f:3a:a2:2d:67:cd:ef:6e:58:09:b9:0c:11:
92:47:f1:58:b8:da:f8:7b:82:39:3d:a7:bb:8f:32:
01:f0:7e:65:2c:c0:dc:4b:fd:39:0e:03:b6:48:0f:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:01:52:39:FE:05:13:CE:DC:22:4F:2B:BE:5C:65:C4:C4:57:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E6EA30C82BE11EE901B723C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:94:a6:15:34:43:97:60:08:8b:84:81:51:3b:09:92:42:83:
9f:d4:8f:fb:3b:9b:52:cd:16:22:76:86:a8:0b:c3:e8:cc:74:
56:49:74:45:53:a6:51:7b:06:92:c9:d8:57:21:df:9a:3a:1b:
ad:95:60:0c:36:ac:58:17:eb:b5:53:6e:10:f9:b7:aa:49:86:
9c:d2:7b:fc:6d:69:fe:4a:4e:cd:07:7e:cb:ee:99:cf:0f:f3:
45:ee:58:27:16:e3:92:fd:a9:df:da:d7:1f:6f:d6:a6:a6:26:
5f:37:82:92:2d:2c:0d:ac:ac:6a:93:50:64:68:b0:0c:42:e7:
98:54:b7:c0:47:c3:2a:45:d5:f2:58:e8:5a:c5:57:be:a6:63:
9e:6c:6a:74:55:ee:d6:8a:ba:49:7a:31:f6:e8:62:10:a5:09:
6b:43:75:53:8a:13:63:3d:85:a7:07:77:60:97:a8:5d:b2:29:
a1:a1:b2:f3:2f:1e:3d:61:21:07:ae:2f:fb:18:a9:a0:56:67:
43:7b:4c:8c:07:c9:70:27:0e:7e:aa:ad:ab:5b:aa:aa:40:e4:
d7:28:c1:35:47:ba:8c:88:e2:2d:57:3a:33:ce:48:82:6a:5f:
31:ea:06:7f:fa:99:a0:aa:7a:7c:32:30:37:fb:27:4c:d9:3b:
7b:63:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org