Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2EC64AA141911EFA8493139017001B1.roa
File: C2EC64AA141911EFA8493139017001B1.roa (raw, json)
Hash identifier: jPK8qTBWrzMY95Mb05uTMBSWbjZmhTV5XwNYdDTWD7U=
Subject key identifier: 1C:A1:0E:F8:81:08:DA:B4:30:CF:A0:BA:0D:5F:93:CA:02:E3:2F:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B823
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2EC64AA141911EFA8493139017001B1.roa
Signing time: Fri 17 May 2024 06:50:35 +0000
ROA not before: Fri 17 May 2024 06:50:32 +0000
ROA not after: Thu 04 Jul 2024 06:50:32 +0000
asID: 44559
IP address blocks: 154.209.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Jun 2024 11:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47139 (0xb823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 06:50:32 2024 GMT
Not After : Jul 4 06:50:32 2024 GMT
Subject: CN=6646fe3b-d17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:d9:d8:dd:18:85:f2:c0:99:71:0e:90:14:
3a:54:30:61:d1:04:dc:ba:7c:91:b5:9e:07:5a:19:
49:6d:40:54:02:74:bd:6a:72:9c:48:ea:32:16:7f:
ab:3d:2b:33:64:29:86:89:81:e6:b5:a2:9a:1f:a6:
13:f9:b6:ec:58:02:6a:22:97:b3:6d:58:af:cf:f3:
aa:b6:20:5f:22:1d:79:52:84:50:9d:23:af:cb:22:
2e:d9:c9:27:77:70:fc:2f:3c:90:4f:11:d5:b4:a8:
e2:47:b7:4c:3b:2a:55:d3:c1:7d:88:a9:7f:2d:52:
d8:9a:68:a1:ec:78:0e:ef:aa:80:1b:c7:fa:18:bf:
5f:ae:f0:5d:90:cc:3d:2d:68:84:19:4e:a7:e9:8c:
19:64:9a:35:e9:83:6f:9b:53:ca:68:96:85:f8:c7:
80:d5:14:6e:8b:41:ba:0b:7c:8e:ac:af:8d:21:cf:
f9:c2:ae:ae:a6:3a:51:ff:16:01:f9:09:b3:c9:0a:
19:d8:a4:60:00:8d:1b:aa:ea:76:d4:0e:24:da:62:
ce:98:32:a1:7f:05:ac:3a:98:7f:e4:0b:c5:0a:bc:
00:1b:5f:cd:d5:99:eb:42:d4:10:59:3b:27:d9:b9:
12:8f:3f:f8:bc:b6:6f:03:55:d6:6a:3b:29:21:9d:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A1:0E:F8:81:08:DA:B4:30:CF:A0:BA:0D:5F:93:CA:02:E3:2F:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2EC64AA141911EFA8493139017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:92:33:4a:77:4e:b7:3d:f3:ae:cf:b4:5c:a6:d7:6f:1d:53:
e4:15:e3:75:6d:cc:09:f7:4c:ad:ee:86:36:dc:25:81:46:35:
eb:9e:2c:9c:3c:6a:75:c6:7c:00:ca:28:23:f5:12:d0:b8:5d:
72:86:74:5a:dd:4d:f3:12:fc:74:bd:ab:21:91:ae:c6:90:49:
59:ff:1c:14:68:72:74:27:ea:6f:d6:fe:36:77:ff:a8:8e:0f:
88:37:41:9c:44:81:2f:76:f1:51:e2:7f:57:68:eb:eb:79:cb:
fb:b5:46:56:a5:97:6e:91:c9:bc:d4:3b:88:36:32:b1:7e:c2:
e7:51:27:ac:62:15:38:cd:78:ce:42:1d:be:1b:7e:10:0c:26:
98:16:c3:34:9c:bb:9d:54:8a:cc:a6:22:32:52:d0:96:ef:32:
41:f0:92:f1:bd:9c:2a:c1:a2:46:e7:df:46:9c:86:ed:1b:e5:
87:f1:6e:9c:a8:21:a2:49:4b:8a:40:08:d1:18:6d:17:67:d1:
b1:78:a0:a8:46:9b:7b:b6:90:73:6e:83:ae:7d:02:fb:f4:f2:
f0:c7:18:79:9e:17:84:7d:d5:90:b8:ae:b3:ee:79:04:d7:71:
2d:c6:a9:9f:cd:7d:a4:06:3a:8c:dd:9b:bf:83:c5:27:ec:ea:
e1:84:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:13:31 2024 by rpki-client on console-fra.rpki-client.org