Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1FA37AA2C411EEBA30BF22D25BE465.roa
File: 4D1FA37AA2C411EEBA30BF22D25BE465.roa (raw, json)
Hash identifier: /OIBeUmko9g7qzjTCNLrBxYSonkPByu6KkmK+pIF9e0=
Subject key identifier: EC:9A:8C:12:F7:2C:03:29:0B:01:F6:C0:70:D2:FA:50:5C:3A:D9:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6683
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1FA37AA2C411EEBA30BF22D25BE465.roa
Signing time: Mon 25 Dec 2023 01:24:09 +0000
ROA not before: Mon 25 Dec 2023 01:24:05 +0000
ROA not after: Tue 07 Jan 2025 01:24:05 +0000
asID: 18004
IP address blocks: 154.85.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26243 (0x6683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:24:05 2023 GMT
Not After : Jan 7 01:24:05 2025 GMT
Subject: CN=6588d9b9-72a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:9b:64:01:35:cc:04:64:9c:65:70:ec:c1:
5d:0a:85:22:c5:06:3f:3e:d4:bd:5d:7c:34:98:fa:
20:80:42:7e:2a:6f:d7:46:cd:ad:00:fd:ab:24:bd:
85:0c:99:22:6d:67:71:74:2d:77:38:fb:fa:28:38:
0e:2c:96:e0:79:e2:8d:eb:f5:8d:d4:f2:ea:fa:56:
c9:e7:e8:b4:01:bd:ca:1c:6f:a4:c7:08:df:6b:d1:
56:1c:69:8a:97:c9:92:20:96:4d:ff:c2:28:75:67:
fd:9a:80:35:87:a6:a0:63:ec:a8:f1:2e:3d:0c:51:
4f:92:f5:94:6e:3a:95:31:7d:86:eb:1f:df:a5:e5:
3d:ae:1b:d9:1b:ba:f7:bb:b6:ac:6e:0b:6e:27:2f:
43:fe:88:bd:58:4b:d6:1a:9e:2d:d6:77:67:07:e4:
4a:88:d2:9d:d1:fb:e2:46:4c:38:56:f6:d5:94:b3:
25:27:79:28:d4:13:24:79:bd:c7:5d:91:04:31:f1:
5e:2c:3b:aa:a7:cf:65:0d:ba:91:13:99:7f:f9:e4:
a8:a3:f2:ac:7c:9a:98:24:c5:e0:01:20:46:4f:e5:
a8:77:69:12:ac:de:9b:51:96:78:72:3f:b6:ff:d4:
11:9e:78:cf:37:cf:d7:62:b6:92:1c:88:3f:a1:34:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9A:8C:12:F7:2C:03:29:0B:01:F6:C0:70:D2:FA:50:5C:3A:D9:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D1FA37AA2C411EEBA30BF22D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fb:cf:3a:57:16:6a:7a:5c:be:28:3e:ad:3e:97:c8:05:e8:
6d:05:68:3a:60:23:f1:6a:85:6a:48:43:3b:59:1c:26:a4:1e:
5b:b3:6e:ac:77:60:0c:44:c1:cd:1c:21:40:ba:d1:87:80:5e:
9d:b2:67:f8:34:dc:28:f3:08:b2:74:c7:c4:ca:84:51:54:9a:
86:26:ad:cb:46:dc:ce:9d:d2:a7:ea:9a:57:a9:71:e6:92:ae:
50:58:80:8a:00:15:2c:99:45:7a:97:57:50:77:9a:69:96:5f:
71:92:70:d5:27:59:13:87:c9:67:8b:a9:a4:3e:0f:6c:cb:56:
a0:29:e6:cc:f9:52:5b:70:27:ca:ff:34:d7:13:b6:fd:d8:b1:
a6:b0:c1:e1:55:2e:8d:3f:26:c4:d6:3e:62:c9:90:46:19:aa:
5e:60:cb:be:b7:bd:f7:90:14:9d:7f:4b:9e:3a:ef:da:bd:36:
66:b1:bd:3b:74:73:c3:cc:00:9c:75:0f:47:c7:e2:39:66:4b:
be:8d:12:a3:e5:92:dd:fc:9c:73:79:55:60:56:41:f7:c3:06:
79:2a:8f:41:5f:21:26:ba:68:f7:7f:41:95:ad:da:cf:b0:1a:
90:a3:93:13:66:41:ae:6a:d0:26:1b:eb:80:f6:3f:6e:75:1b:
59:37:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org