Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D5BF6ECB0FA11EE8F252E53775412E6.roa
File: 9D5BF6ECB0FA11EE8F252E53775412E6.roa (raw, json)
Hash identifier: 3fB+8k0LSI99VrrF3M1h6SC8f3ptKG3ae1ZJIHyd6+g=
Subject key identifier: 75:10:8D:16:0A:4C:B4:22:CE:7A:95:FD:09:ED:00:97:63:A1:55:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 745B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D5BF6ECB0FA11EE8F252E53775412E6.roa
Signing time: Fri 12 Jan 2024 03:28:12 +0000
ROA not before: Fri 12 Jan 2024 03:28:09 +0000
ROA not after: Tue 07 Jan 2025 03:28:09 +0000
asID: 139057
IP address blocks: 154.85.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29787 (0x745b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:28:09 2024 GMT
Not After : Jan 7 03:28:09 2025 GMT
Subject: CN=65a0b1cc-29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:13:2e:0e:65:72:df:77:1f:b0:35:cc:cc:
c9:77:29:f8:45:54:7f:80:74:b8:31:67:df:a2:62:
cd:1f:2f:28:1e:ae:39:73:3f:23:69:2e:e1:d5:80:
f5:b2:8a:e8:94:6c:31:eb:8e:76:bf:1a:c3:a9:f1:
66:2c:6c:94:c6:c5:2b:dd:38:c7:5c:fb:d4:bc:f4:
59:97:63:29:54:20:b0:c5:af:0f:11:f9:27:00:fd:
9d:28:6b:7a:14:87:08:ac:0a:64:f9:e0:e6:c9:c3:
b9:6d:e5:59:ae:d7:a3:2b:e3:88:70:76:f9:b8:2c:
86:c5:25:f9:f3:fb:39:ac:b5:1d:1e:49:2e:61:f6:
14:6d:05:bb:1d:db:96:d0:b7:d4:f7:1c:ed:d7:f0:
f3:8a:11:c1:68:14:7f:c3:60:5a:dc:9f:ee:e5:e6:
78:fe:8b:0e:38:04:42:29:d6:3b:d3:26:81:c5:01:
0c:8a:29:82:ec:65:b1:87:2e:86:df:92:77:43:d5:
29:a3:ad:5f:7b:c5:ec:87:91:d7:ed:51:ed:01:2e:
6d:93:e3:47:8d:43:62:f2:46:c9:14:0b:c9:ab:a4:
45:3e:70:22:c2:bf:9b:90:58:07:75:1b:68:06:5a:
ad:b7:40:4a:fb:0d:19:7b:a7:d1:00:44:91:da:e1:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:10:8D:16:0A:4C:B4:22:CE:7A:95:FD:09:ED:00:97:63:A1:55:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D5BF6ECB0FA11EE8F252E53775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a8:f3:c3:83:0e:5d:16:dc:fe:18:93:f7:01:cb:1f:31:44:
d1:2e:9d:8c:b5:6e:30:71:07:69:e3:2b:28:32:5c:4b:e6:30:
c4:5c:92:21:90:0b:e7:54:0e:a6:67:eb:d5:81:2a:61:41:d3:
9f:2d:84:ee:47:a0:e5:6c:1e:14:27:5b:af:e4:66:f2:c3:5f:
cf:65:af:3e:e9:cd:64:6d:3b:9c:94:13:bd:0b:65:57:db:1e:
5d:8c:a3:fb:9d:e7:8b:8e:83:96:69:e1:36:ce:95:ee:78:02:
38:20:f8:18:a0:5d:a2:7a:9d:e2:74:e3:51:6f:aa:24:5e:b2:
32:e8:cb:2e:35:56:ed:d6:c9:30:0a:3d:2c:24:84:dc:87:ff:
37:78:58:7b:9f:7d:f2:1b:35:89:81:e9:be:6b:29:8b:5d:ac:
d1:fc:65:0b:0a:1e:78:7f:a5:31:d6:78:e7:70:6e:68:9d:ae:
7f:dd:35:87:f1:e5:7e:c6:b3:a8:99:1b:38:a6:58:35:f6:ef:
e6:f4:d0:6a:12:fa:0e:63:af:e6:1d:85:7b:4d:a8:c4:80:d8:
ad:f6:54:42:d5:53:7c:01:f5:9b:0c:5b:ca:cf:b9:77:51:42:
00:01:00:7c:b3:a2:a3:23:c8:6a:53:44:19:08:93:6f:1a:bc:
61:09:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org