Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA9586CFEA011ED81ACE4664AD9E6FC.roa
File: 4EA9586CFEA011ED81ACE4664AD9E6FC.roa (raw, json)
Hash identifier: O0J+j3Bi8pgkBjbAP49AEWBfV5UGrIMkyaw1+Xxq3CQ=
Subject key identifier: B4:AF:A8:A0:F2:11:7E:1C:85:0B:CF:ED:3E:FC:C3:B0:07:0A:84:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2850
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA9586CFEA011ED81ACE4664AD9E6FC.roa
Signing time: Tue 30 May 2023 04:13:19 +0000
ROA not before: Tue 30 May 2023 04:13:14 +0000
ROA not after: Wed 15 May 2024 04:13:14 +0000
asID: 63888
IP address blocks: 154.207.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10320 (0x2850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 04:13:14 2023 GMT
Not After : May 15 04:13:14 2024 GMT
Subject: CN=647577df-2c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:e4:1a:35:83:1c:74:da:19:82:f9:56:f5:
4b:31:27:25:8f:73:94:04:c3:de:bb:9c:69:44:88:
00:e6:b5:31:9e:66:a9:2d:f4:0a:32:b5:22:ef:5d:
52:3e:8e:08:94:9b:ea:26:58:6a:df:2b:8e:42:d9:
8f:80:dc:70:6a:54:db:67:33:c8:05:12:9d:f0:04:
94:c2:d2:bd:83:e3:49:28:77:b7:0e:29:31:2b:c1:
de:ba:9d:93:ed:21:36:79:52:f3:2d:bf:aa:73:2f:
14:77:dd:ca:9f:2e:26:b8:da:e3:66:d4:f5:cc:70:
e0:f4:39:69:83:9d:34:9c:fb:8b:e1:5d:10:71:cf:
6c:66:e7:b4:02:c9:bb:c8:4c:72:d0:2e:4b:96:3b:
9a:fb:ed:1f:6e:8f:04:ea:e5:c3:50:92:e8:4e:fd:
50:e5:ef:65:6a:83:53:98:d0:f2:5f:73:6b:19:87:
c4:14:1d:cf:3a:89:bf:7c:3a:33:af:49:e9:c5:9f:
59:01:e7:f1:ee:9d:06:ce:fe:b0:d3:05:19:7d:6b:
c4:3b:96:a1:49:2c:b1:ea:c2:a0:c4:c0:22:1e:5b:
bb:2e:58:4f:a3:f8:73:ab:aa:8d:51:6b:cb:b5:06:
0c:e7:3f:bc:ab:20:5b:8b:6d:f9:71:c2:5b:08:53:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:A8:A0:F2:11:7E:1C:85:0B:CF:ED:3E:FC:C3:B0:07:0A:84:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EA9586CFEA011ED81ACE4664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:57:e7:6b:b7:31:72:fc:f1:bb:91:b1:30:bb:c1:73:c4:f7:
c6:ff:75:cf:cc:26:4a:a6:39:0c:39:8b:fa:e3:0e:5b:de:c7:
44:98:b7:d5:35:f9:23:27:1d:87:56:9b:ee:2c:81:b7:6b:2a:
34:72:c4:e5:3f:fc:ea:7c:79:b5:32:2f:ed:fe:5c:68:93:5c:
78:c4:6d:7f:36:43:8d:41:27:27:3b:e9:26:d6:7f:c2:e8:05:
01:4a:a6:cf:3b:53:c2:da:47:87:97:98:51:43:4e:c2:ed:d0:
1c:78:93:3e:c3:a7:9d:7f:04:fe:e4:79:46:2a:92:07:d7:af:
87:42:d4:5f:92:87:d2:61:0a:91:33:92:a0:49:c7:27:8d:c3:
e1:d0:0d:d2:b3:2d:08:b1:b5:30:34:a7:7e:12:61:b3:a4:80:
04:16:b2:6a:19:8b:72:54:5f:fe:2f:eb:95:29:57:b7:cf:05:
21:5c:0e:4e:7a:75:81:c7:b7:64:2b:d8:b9:15:32:1f:87:8c:
7f:03:88:fc:1a:46:b9:5c:28:b9:0e:f3:62:9c:40:fe:b3:7b:
c9:f4:09:49:85:52:d5:0b:78:8e:a9:24:c9:e9:5c:31:29:4b:
5c:e3:c9:7c:5f:cc:ab:21:fb:86:20:50:f1:ad:a2:22:5c:26:
fc:b7:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org