Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0DF70A82BE11EEB7EBF23C4AD9E6FC.roa
File: 5B0DF70A82BE11EEB7EBF23C4AD9E6FC.roa (raw, json)
Hash identifier: LgF+h285VcutdM6nFLEw/+LylujnniV8cY8yweKvS+I=
Subject key identifier: 7C:83:D9:51:D0:28:56:CC:76:BA:02:37:85:13:F1:53:57:92:5A:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5002
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0DF70A82BE11EEB7EBF23C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:20:58 +0000
ROA not before: Tue 14 Nov 2023 07:20:54 +0000
ROA not after: Tue 12 Nov 2024 07:20:54 +0000
asID: 397630
IP address blocks: 154.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20482 (0x5002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:20:54 2023 GMT
Not After : Nov 12 07:20:54 2024 GMT
Subject: CN=65531fda-dd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:e7:ae:a8:de:9f:ff:b1:75:7f:fc:4f:05:
43:dc:d0:b6:70:10:4d:b1:a4:6d:6d:36:62:d8:74:
8a:01:23:18:6e:76:e8:64:b4:89:03:d2:b6:e7:cf:
ee:80:d8:2e:eb:d7:e0:9a:56:ff:60:65:cc:c7:37:
5f:ce:c5:76:d0:00:58:70:21:d1:85:18:54:e5:a5:
74:99:8d:ea:0e:e3:0e:7b:c3:cf:b7:02:9e:8c:c1:
2e:0d:75:b7:8d:bc:76:85:56:cb:75:c0:f7:ec:d5:
dc:96:6a:5e:96:db:17:b3:a2:62:fa:b4:50:68:9e:
30:07:d0:aa:59:be:9a:50:75:d6:9f:bb:23:27:62:
ce:39:c4:90:94:95:c6:14:7f:12:01:23:80:a4:ea:
5f:64:27:30:3f:af:75:7a:e5:6a:ba:99:f1:ca:c2:
e1:c2:2e:bc:ac:d6:0b:e3:c8:1f:2c:72:75:aa:48:
91:1b:58:2b:2e:02:f7:8c:68:0c:64:4d:c6:39:26:
bc:07:40:56:24:d7:32:fa:93:64:b4:4d:ba:4f:7b:
f8:64:aa:46:a2:33:9d:34:58:04:98:90:9b:5e:6e:
6b:ef:04:09:65:54:5e:73:c4:0e:39:ba:70:92:b0:
9e:e9:56:25:e3:e0:4d:be:ba:c7:27:7c:66:31:70:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:D9:51:D0:28:56:CC:76:BA:02:37:85:13:F1:53:57:92:5A:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B0DF70A82BE11EEB7EBF23C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:71:ed:5e:3c:d1:9c:30:d2:cc:c0:42:3f:84:30:4a:8f:16:
14:04:7d:71:c8:da:f0:08:a2:a2:f6:46:d1:f2:a6:69:cb:85:
a6:dc:7d:e9:d3:07:75:85:37:04:f3:15:17:a6:24:5a:d9:c1:
a8:64:4d:10:2a:3a:58:a8:93:c9:85:37:5f:8c:55:28:35:81:
53:df:2a:c0:1d:41:b2:78:34:e3:1e:d1:25:d6:d7:3e:64:20:
66:0c:cc:4f:d8:aa:1e:ce:ac:9c:0d:42:f0:44:ef:e6:07:85:
99:67:16:10:a5:86:5a:f2:cd:10:58:9a:71:52:26:2d:55:31:
49:f8:23:9b:dd:51:7b:c7:ce:92:32:ac:a7:1a:71:5f:75:39:
98:62:b4:e3:27:11:ef:88:87:76:ff:cb:81:a5:8c:7c:58:22:
2b:64:f6:28:f3:d1:39:b2:95:28:37:b2:72:42:5f:e8:c6:bb:
dc:0b:11:a7:35:ab:d3:02:23:7e:7a:59:2a:d3:00:5a:5c:f9:
79:5f:41:74:e1:0e:ca:82:98:15:17:37:f9:2a:64:bb:3d:7f:
7d:c6:a9:5a:e9:c8:b2:ff:df:5c:92:23:f7:9b:2c:a1:46:a7:
e6:b2:bd:3b:65:54:5b:2a:90:fa:95:0e:2f:53:7f:e8:9e:f8:
cb:02:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org