Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A71F20A2C511EE88719A26D25BE465.roa
File: B1A71F20A2C511EE88719A26D25BE465.roa (raw, json)
Hash identifier: z1sUk0brfDxmM2+YGH5Y7B6jGFP3OO6OqHH8Yv+ANCk=
Subject key identifier: 93:76:37:E5:02:54:8D:D6:80:4E:86:00:10:DD:87:3F:46:E9:EE:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A71F20A2C511EE88719A26D25BE465.roa
Signing time: Mon 25 Dec 2023 01:34:07 +0000
ROA not before: Mon 25 Dec 2023 01:34:04 +0000
ROA not after: Tue 07 Jan 2025 01:34:04 +0000
asID: 139057
IP address blocks: 154.85.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26257 (0x6691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:34:04 2023 GMT
Not After : Jan 7 01:34:04 2025 GMT
Subject: CN=6588dc0f-7e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:9a:22:06:b9:ab:04:55:3a:cd:84:55:36:
23:8b:2f:1f:3d:1a:fb:dd:40:76:de:a4:f7:69:c3:
c7:ff:d7:ad:38:3c:09:4e:6a:82:32:3f:c3:13:f7:
cf:2a:74:09:eb:35:63:85:9f:39:f4:65:1a:4d:2b:
5a:e3:fe:40:a5:1a:02:cf:af:b0:05:72:ae:49:71:
d8:8d:f6:c7:48:4f:01:c3:96:53:63:a9:50:17:aa:
fa:41:d1:0d:ff:fa:7b:18:96:d1:bd:18:08:9e:02:
83:28:30:49:d3:d5:9c:de:cc:99:0b:e4:63:61:73:
75:c2:0d:d3:f1:a5:dd:a1:4b:c2:40:1e:bc:dc:5a:
75:b0:99:1e:3b:99:84:4b:03:7f:67:2a:d1:e4:36:
e8:ab:69:e4:ec:3f:06:92:1d:2a:4f:ea:dc:b1:1c:
b3:73:ae:48:c3:f7:ad:91:d0:a6:be:0e:ce:84:e7:
fd:9f:b7:b3:bb:76:30:25:90:67:22:76:0f:89:d6:
80:49:a9:0c:d3:0a:e8:88:0c:5a:87:08:44:ba:c6:
3a:31:61:ed:91:a8:70:7a:45:50:a5:47:67:cd:11:
86:00:6a:bd:6d:40:59:c5:9f:22:df:19:71:07:c7:
2e:f0:28:20:38:29:d3:fc:a6:93:44:d5:28:19:ae:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:76:37:E5:02:54:8D:D6:80:4E:86:00:10:DD:87:3F:46:E9:EE:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A71F20A2C511EE88719A26D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:dc:60:d6:4b:78:e5:5f:cb:35:92:aa:36:0b:b7:e3:f2:11:
a9:8a:d6:dc:e8:9f:c9:40:ca:61:08:af:4d:c2:59:ea:c9:98:
1b:ed:6d:36:fb:b9:1b:72:d9:c2:43:86:f4:09:1b:53:ad:f8:
1f:24:1c:5c:a7:ad:b2:b0:10:10:ce:c8:d0:9d:b1:e5:fd:e4:
36:c2:64:42:9a:8d:f9:c7:f0:09:b3:a7:6e:69:78:38:4c:40:
79:6f:90:b0:b8:4b:b6:8c:3c:fb:71:13:e2:4c:98:29:e6:24:
c6:1a:b1:74:ca:52:ce:61:42:89:ce:f9:83:ab:3e:0b:d6:ca:
9b:52:b1:1a:f4:81:11:42:30:d2:1e:09:c0:0b:10:1c:6a:95:
d8:6e:ef:b0:d0:45:bc:84:00:30:fc:c6:03:fa:ea:b4:3d:d1:
eb:92:97:80:c6:10:c0:32:cd:77:25:e7:3b:20:ad:2f:e0:e2:
37:4f:b5:2b:bc:98:f2:fe:00:e3:bc:ad:fd:d9:99:47:3b:be:
44:ad:96:5a:96:40:08:d4:d0:97:bf:f6:24:b9:c9:a6:b3:cf:
07:f4:a5:6a:59:03:9c:da:ac:5b:95:72:2e:44:ef:00:e3:69:
80:bf:5f:a9:c1:66:56:5a:0e:ab:5d:48:de:f5:35:70:b0:46:
63:3a:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org