Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74F855248A8011EEA9B6D5554AD9E6FC.roa
File: 74F855248A8011EEA9B6D5554AD9E6FC.roa (raw, json)
Hash identifier: OKTZtGsSMH5Dg4f8+NgmJ/iFyvUNQAERPYchQ0M5MNM=
Subject key identifier: 0A:2B:51:3C:30:4D:A2:10:2F:FC:A4:8C:FA:28:13:89:FE:A0:E6:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 52C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74F855248A8011EEA9B6D5554AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:18:02 +0000
ROA not before: Fri 24 Nov 2023 04:17:58 +0000
ROA not after: Thu 28 Nov 2024 04:17:58 +0000
asID: 272816
IP address blocks: 154.85.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21186 (0x52c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 04:17:58 2023 GMT
Not After : Nov 28 04:17:58 2024 GMT
Subject: CN=656023fa-da79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:1f:7f:86:fb:3e:3b:dc:1f:52:5f:d6:95:
09:63:b9:c0:84:97:7b:68:06:15:5f:e4:3a:85:b0:
f0:ff:bf:8e:6e:ff:2c:45:43:b6:ae:ff:be:d1:88:
ad:75:9f:31:c0:b0:a2:d4:23:c5:8a:52:65:f8:70:
cf:a1:8d:ff:05:0b:85:06:91:b8:28:03:15:85:b3:
b0:e6:62:a4:f0:a2:d6:79:73:4d:30:b0:11:ff:5e:
9f:af:17:24:ff:d2:b1:ef:75:c3:81:ec:02:f5:cf:
4c:85:a4:5e:0d:ed:01:79:0c:27:63:69:47:a6:67:
b7:a1:ad:64:6f:13:2e:2a:dd:00:a7:5d:1a:bd:23:
75:cc:21:35:65:0a:7f:cd:a4:17:e4:0a:69:1a:86:
2d:66:e2:4a:69:29:2d:a2:ba:06:34:5b:b2:49:ab:
13:3e:69:ef:98:8b:b9:30:95:00:74:a3:78:35:7a:
7e:67:ff:00:72:fc:6f:ee:e0:09:52:d6:61:ea:1e:
0e:a0:66:a5:5d:ee:db:70:44:46:d5:93:b6:82:89:
bd:77:04:fc:55:12:1b:39:59:74:8f:8b:32:2b:99:
5d:37:c9:00:d4:66:49:88:8b:7f:4e:4f:a0:ab:ae:
38:7a:29:a5:c4:86:21:85:a6:af:e2:07:59:67:0a:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2B:51:3C:30:4D:A2:10:2F:FC:A4:8C:FA:28:13:89:FE:A0:E6:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74F855248A8011EEA9B6D5554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.2.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:98:3a:5d:12:e9:db:16:e0:58:e5:7d:29:e7:ae:da:8c:
98:86:a4:1a:46:94:b6:e9:79:9e:0b:5b:19:e5:17:1b:3a:35:
f7:fd:54:b4:69:54:49:3f:a6:02:a2:64:3b:e5:72:8c:54:68:
86:c8:2a:13:3d:b1:cc:d9:41:f7:2d:a6:48:5e:f7:bc:c0:0e:
9f:98:30:5c:43:7a:88:bd:a0:11:a3:3e:c7:3e:ee:7b:9e:c9:
ed:94:b9:95:8e:2e:3f:ce:80:9f:77:11:e0:21:34:3b:75:45:
80:74:71:0e:79:f1:29:99:f4:48:28:b0:d9:68:80:29:b0:4b:
a2:9d:d8:74:22:16:02:7a:64:cc:b0:99:5e:03:0c:97:d4:2c:
19:eb:bc:01:06:0d:70:37:b8:77:ef:aa:34:7d:b3:a6:f9:ad:
3d:75:7e:68:2d:9c:cb:bb:1b:c8:53:75:48:e3:a9:26:5f:16:
2b:41:34:d0:79:9e:0b:fa:be:b9:d9:07:d3:46:27:70:68:4c:
51:47:cf:8e:2b:23:c2:87:58:75:8b:53:21:24:1b:8e:67:38:
68:cc:b2:1f:6b:ec:75:4d:e2:cd:3f:f0:30:0c:12:66:7e:f6:
a3:b2:0f:ce:e3:2f:1b:31:07:1a:ce:9f:d7:9e:cf:24:5a:70:
7f:10:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org