Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2F08AEA30311EE8041CE1CD25BE465.roa
File: 7E2F08AEA30311EE8041CE1CD25BE465.roa (raw, json)
Hash identifier: EQw4VuhbL2svquCCtGJ+Gju9DDaFUPVck67omqy85rg=
Subject key identifier: 5E:01:1F:04:6B:6F:C7:14:A3:55:5D:24:B8:BB:1A:42:B3:B5:2A:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 671D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2F08AEA30311EE8041CE1CD25BE465.roa
Signing time: Mon 25 Dec 2023 08:56:29 +0000
ROA not before: Mon 25 Dec 2023 08:56:26 +0000
ROA not after: Tue 07 Jan 2025 08:56:26 +0000
asID: 139057
IP address blocks: 154.85.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26397 (0x671d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:56:26 2023 GMT
Not After : Jan 7 08:56:26 2025 GMT
Subject: CN=658943bd-d272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:f9:2f:be:19:4a:9a:df:4e:27:fc:8a:0f:
d3:7c:65:3b:44:1e:3b:e8:4d:7d:a4:21:c2:41:95:
24:69:3a:f9:a4:3b:f5:d3:7d:19:98:8a:0e:81:c0:
a8:fb:da:b6:58:76:62:a7:2f:7c:f2:a3:bd:cd:58:
26:6c:e5:dc:14:c9:73:20:c2:1b:a4:51:7f:41:73:
16:83:ec:99:6a:da:e1:94:4b:1f:8a:0e:53:68:98:
c5:54:c5:a1:56:5c:7c:0c:63:7c:ca:c3:94:31:f0:
63:53:c5:5f:63:40:64:88:a0:e0:4a:15:b2:04:5f:
4c:0c:7b:19:ea:29:f4:62:9f:05:96:51:99:35:5a:
d1:ce:b5:be:22:d2:2b:1e:d9:a9:bc:c0:f3:a1:6a:
3a:f1:83:2f:f3:97:e7:9f:e5:8a:68:39:bb:8f:eb:
6a:94:14:e0:91:99:33:81:ad:29:52:bd:24:f5:46:
13:07:e5:d7:c2:fb:95:33:af:3a:43:45:c3:1f:1c:
01:92:fc:b7:a8:62:ec:12:16:af:17:f9:8f:04:bd:
f6:3d:ef:12:9c:e7:01:88:41:fa:44:6f:0e:47:df:
9e:a7:a0:71:82:fe:86:89:7d:ca:61:db:16:b1:f4:
f0:cb:c8:5d:2c:3e:1e:de:eb:54:de:1e:01:57:1e:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:01:1F:04:6B:6F:C7:14:A3:55:5D:24:B8:BB:1A:42:B3:B5:2A:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E2F08AEA30311EE8041CE1CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c2:82:13:c8:92:bc:8a:d5:d0:ca:34:b1:c6:b1:5c:d0:d1:
c4:0f:c7:ed:9d:ef:3a:55:96:a5:b2:b0:61:a5:72:95:90:7f:
36:5d:94:7a:2b:31:55:bc:af:a8:60:e7:d3:4b:ba:f3:a2:dd:
5f:f3:17:fb:14:9e:87:a8:8f:e0:56:ba:d9:16:6a:3e:4c:e5:
34:7d:08:76:88:40:df:34:ae:23:4d:37:c7:52:a4:69:e4:62:
87:5e:17:08:bc:55:4f:ef:5d:52:6a:60:03:0e:f6:11:4f:eb:
67:16:b6:ae:c2:e4:36:ef:bd:2f:86:60:d3:0d:97:ca:ad:48:
fe:5b:99:01:34:da:6f:4a:7d:94:b1:f4:1c:9f:41:e2:1b:37:
23:c3:5d:cb:46:d5:be:30:ba:30:b5:bc:5f:e3:d4:ef:e6:68:
d5:16:0b:eb:ad:5f:64:93:d0:1d:73:06:e8:96:30:32:11:c1:
d6:4d:36:e2:cd:80:11:7e:ca:50:a1:df:ae:fc:c8:79:b1:8d:
35:c7:32:0e:e2:46:6b:0d:a3:f1:8e:f4:5e:17:53:ce:af:d4:
63:79:81:b6:b5:0e:76:0a:72:74:48:b2:a3:e9:28:3d:eb:92:
d5:c0:3a:ef:02:5a:57:bd:8b:20:8c:28:dc:a0:af:2b:1c:aa:
04:84:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:58 2024 by rpki-client on console-fra.rpki-client.org