Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED6E0F2014911EFB2800C61017001B1.roa
File: 7ED6E0F2014911EFB2800C61017001B1.roa (raw, json)
Hash identifier: Wenymr7YQyvdr3RHBAu6XHOrbsgAz4zk+oZIOHks/8I=
Subject key identifier: 91:F7:B4:0D:4B:6C:40:3C:39:71:4C:C1:E0:09:BD:C8:6C:D6:43:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED6E0F2014911EFB2800C61017001B1.roa
Signing time: Tue 23 Apr 2024 08:14:24 +0000
ROA not before: Tue 23 Apr 2024 08:14:21 +0000
ROA not after: Sat 11 May 2024 08:14:21 +0000
asID: 9009
IP address blocks: 154.85.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44799 (0xaeff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:14:21 2024 GMT
Not After : May 11 08:14:21 2024 GMT
Subject: CN=66276de0-26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:60:e2:2a:45:42:0f:96:58:b9:2f:74:c3:
22:23:7b:cc:ec:97:cb:52:a9:1e:5a:60:e2:68:05:
c9:34:d0:7e:91:e8:bc:44:43:dc:b3:53:55:6b:61:
53:eb:94:9a:17:a5:2e:98:74:4a:ea:1a:74:0f:eb:
48:26:00:5d:de:8a:63:4b:12:57:ad:af:18:03:16:
fb:01:b1:4f:2c:33:9f:a7:c5:4a:32:75:9b:44:79:
c4:47:4b:83:d4:94:7f:dc:d0:2d:90:6d:ce:6c:d9:
38:b9:bd:57:05:61:1f:63:ab:9c:1e:69:c1:f2:d5:
a1:6f:da:24:3a:02:3c:34:0b:de:14:cf:ec:c5:15:
62:30:1b:ca:3b:cf:01:cf:5e:95:9b:e9:9f:30:67:
7c:e2:ae:20:91:b2:f0:6a:58:08:f2:7f:d7:55:ac:
ef:b8:2a:99:28:4c:2a:3f:2d:e0:90:3d:e0:3a:9c:
1d:23:60:48:ed:c3:6b:cf:5f:d7:f1:e4:a6:e8:f2:
ca:f6:25:97:a1:fc:8e:2f:28:b3:5c:18:0d:9b:9b:
f1:18:08:c8:5d:86:ce:04:4c:62:3e:23:44:58:85:
ff:42:a8:d2:02:36:aa:af:36:1f:ae:47:62:46:d8:
9d:c4:94:7e:df:f7:d9:96:88:8c:d1:ab:54:b3:df:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:B4:0D:4B:6C:40:3C:39:71:4C:C1:E0:09:BD:C8:6C:D6:43:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED6E0F2014911EFB2800C61017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:dc:0c:c2:6e:8f:f4:7a:21:23:da:cb:41:b0:47:11:71:f4:
2b:57:4f:9e:f7:ed:d9:ee:53:c2:0a:de:52:4d:55:aa:fa:f5:
1c:a4:48:22:3e:91:69:8c:88:6f:d3:c3:3f:46:a8:2e:f9:c3:
4c:ab:71:64:f6:8f:9a:d5:52:73:6b:1a:3b:1c:c5:8a:4d:87:
18:09:d7:b8:0c:4a:42:33:43:a4:59:47:e1:c5:4b:41:00:53:
a0:31:2a:b3:42:65:3f:bc:bf:11:18:25:af:cb:ec:ca:a7:58:
13:a9:fb:81:a0:73:87:e5:02:df:1b:41:12:a5:db:ac:d7:ad:
7d:cb:26:50:aa:f2:ec:b0:26:95:05:0a:84:0b:98:ce:73:07:
97:74:07:d0:57:ad:60:00:0c:87:c4:2c:c1:a3:35:5f:8c:e5:
8e:db:82:f7:61:d0:87:94:3c:82:61:6e:56:3a:83:ba:81:59:
21:0a:e4:88:da:82:6c:77:78:bf:89:78:e0:25:de:be:b4:36:
c2:95:11:f5:08:10:ee:fb:fc:3a:20:5c:e9:ef:c4:34:77:b4:
36:bc:29:58:78:7b:e8:2c:c6:6e:96:55:56:33:c8:ca:0b:4d:
5b:5b:b6:d9:9f:04:f4:64:d4:5a:4a:ca:ba:c6:f3:9d:f5:ca:
81:2b:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:34 2024 by rpki-client on console-ams.rpki-client.org