Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECD41EEA30B11EE901AC529D25BE465.roa
File: 5ECD41EEA30B11EE901AC529D25BE465.roa (raw, json)
Hash identifier: CMJVaY8cbK7TBx6xRc9/f6kymRuCKuhxwsagETEdYn4=
Subject key identifier: 32:28:38:4D:56:12:F1:C0:BE:D5:04:E2:03:A3:7F:9B:AA:85:D9:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 672B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECD41EEA30B11EE901AC529D25BE465.roa
Signing time: Mon 25 Dec 2023 09:52:53 +0000
ROA not before: Mon 25 Dec 2023 09:52:49 +0000
ROA not after: Tue 07 Jan 2025 09:52:49 +0000
asID: 139057
IP address blocks: 154.85.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26411 (0x672b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:52:49 2023 GMT
Not After : Jan 7 09:52:49 2025 GMT
Subject: CN=658950f4-81e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:62:f9:99:f2:7a:5b:2e:a5:51:55:78:ac:
51:cb:d0:2e:86:22:25:1c:5f:92:81:be:4b:a0:77:
40:d0:62:ab:08:d9:9f:c9:7a:9f:f2:a6:c5:75:89:
94:52:eb:89:9b:e2:ed:97:cc:5d:47:e2:66:fb:96:
16:d0:d4:b1:1b:98:8b:42:5d:a4:bd:28:6a:b5:1e:
03:56:ed:90:b1:63:6e:3b:7a:03:ae:83:a6:a3:c4:
20:69:05:a6:d2:88:fd:8d:44:c3:38:ad:8c:7d:28:
ef:63:32:ea:4f:7f:b4:2b:5f:dc:5a:ea:d3:b4:90:
69:56:da:f4:39:1a:d4:f0:d2:b4:d0:ab:cf:b1:4d:
c2:55:44:88:4e:45:d7:bd:ce:81:9b:f0:58:89:de:
6d:35:4f:ad:9a:1f:0c:b6:3e:1b:f2:ef:38:9b:cf:
dd:56:03:23:5e:50:80:1c:b5:fd:04:b2:58:1c:60:
e4:67:c4:b8:fa:69:4c:e8:3a:05:ad:63:67:78:4b:
7c:0a:9a:c3:6d:74:d1:ce:da:ff:12:fe:b7:12:fe:
8c:52:dc:89:28:2d:ff:ca:c4:f7:cf:e3:49:54:fd:
89:35:d6:01:ee:b3:73:ff:a7:9a:f1:54:e4:00:7d:
5d:91:80:e8:54:d9:d6:0b:86:58:93:ff:c0:d1:09:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:38:4D:56:12:F1:C0:BE:D5:04:E2:03:A3:7F:9B:AA:85:D9:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ECD41EEA30B11EE901AC529D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.91.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f6:83:1d:5b:29:9d:2f:26:a2:a3:09:44:82:6e:d6:e5:be:
96:c2:20:d7:60:62:2a:0f:65:33:de:16:c8:48:e4:21:41:42:
90:40:0d:96:e7:7e:4a:5a:8d:aa:7c:5d:c9:da:b2:fa:46:04:
b2:8c:b1:16:04:3e:db:5a:e7:b7:45:34:46:3d:00:5d:8d:ec:
48:8e:d2:eb:a3:0f:2b:fd:1e:cf:8a:8c:2a:a0:ec:36:f0:48:
cc:d9:26:dc:bc:ee:fa:e3:24:c2:bc:a2:da:16:f7:dd:03:bc:
33:98:72:aa:9c:e8:8b:80:82:aa:18:72:89:3a:5a:9e:08:38:
a0:4c:bc:ed:c8:bd:ba:d0:89:0f:a2:da:a5:c1:02:d3:31:0d:
47:f1:e4:b1:f1:d9:b2:87:be:c3:ab:e7:81:6f:f7:f6:a4:85:
ee:79:e0:37:dd:2e:00:7e:60:74:51:ab:4d:b7:6b:53:9b:77:
4c:d2:00:e5:6a:a1:b6:b7:59:8c:10:a1:a6:b2:26:e3:a7:c2:
f1:a5:7c:b0:fb:96:95:48:a0:24:90:6b:b9:14:00:0b:b9:61:
bd:71:a8:4c:50:3a:f3:b8:9d:f3:32:62:00:ba:17:d9:f9:f7:
8f:45:22:37:87:5a:18:79:fc:c4:e7:cf:30:c9:20:e3:2c:af:
77:17:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org