Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89361F6A2C611EE9CC6D629D25BE465.roa
File: D89361F6A2C611EE9CC6D629D25BE465.roa (raw, json)
Hash identifier: 6ifIQczmLPdLVXNTsnZuL9LMj2Ky2GS1cG+DN0WM/w0=
Subject key identifier: 09:4F:D4:06:32:41:4A:20:51:E9:CE:A6:10:A6:82:7E:57:05:57:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 669D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89361F6A2C611EE9CC6D629D25BE465.roa
Signing time: Mon 25 Dec 2023 01:42:22 +0000
ROA not before: Mon 25 Dec 2023 01:42:18 +0000
ROA not after: Tue 07 Jan 2025 01:42:18 +0000
asID: 139057
IP address blocks: 154.85.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26269 (0x669d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:42:18 2023 GMT
Not After : Jan 7 01:42:18 2025 GMT
Subject: CN=6588ddfd-c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:ea:71:f9:f6:09:7e:dc:60:e7:28:4d:f1:
37:11:c4:d2:d5:41:c5:87:6d:df:22:79:61:1c:c5:
14:e3:00:4e:62:76:de:ee:65:f7:a0:35:67:87:1e:
ca:6e:fa:f9:ac:d2:3c:90:f4:13:d6:48:33:20:52:
14:b9:0a:4b:a9:f4:c4:e8:21:1d:75:cb:db:60:a4:
aa:db:2e:52:42:3f:e7:21:01:f8:5c:52:8c:bc:49:
83:a2:13:f7:75:cd:ee:ef:bd:34:89:25:38:43:15:
03:f3:af:cd:8b:4d:7d:db:61:7b:9a:e1:a8:3b:ca:
44:cb:6c:b4:55:6c:8e:93:6f:84:cf:e9:5b:cf:a7:
9e:35:7e:41:fa:9b:be:7c:48:fc:98:28:56:e9:ef:
49:05:fa:9c:e9:0f:0b:9d:86:a4:2b:04:9e:7d:c7:
61:a6:37:c9:c4:93:bc:59:28:10:30:6e:64:a4:74:
42:57:4b:ba:cd:77:4c:ef:03:4e:f8:6e:06:06:35:
c6:66:ae:54:bc:0d:02:f0:e5:30:8a:50:8b:23:72:
b1:b8:7e:7d:38:4f:d8:52:3d:d3:23:1d:a6:ee:41:
3a:b7:42:06:1b:97:f2:25:db:49:62:47:e1:52:b2:
cb:4a:34:ce:6c:72:a6:6e:56:a5:34:a1:c8:02:f6:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:D4:06:32:41:4A:20:51:E9:CE:A6:10:A6:82:7E:57:05:57:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89361F6A2C611EE9CC6D629D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.74.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a5:36:3a:fe:05:6d:92:af:5a:df:95:08:af:7f:d8:96:a0:
7a:28:2b:9c:38:b3:9d:76:42:a9:38:98:44:12:22:68:a0:c9:
b8:59:8b:75:2c:b5:aa:f6:a7:93:56:99:3c:81:f2:01:92:bc:
85:83:3d:11:9c:d7:c9:c7:db:23:3d:c6:2a:2b:ed:5c:cf:f7:
6c:5b:03:74:7d:24:ed:5b:37:15:ef:dc:3d:a7:56:cf:73:4f:
52:85:0a:ff:18:2f:fc:1f:f0:58:52:85:f2:93:59:06:3a:b7:
72:d7:e7:b8:5b:bb:6a:cf:f1:f3:95:82:77:62:c2:5f:a9:b0:
2f:a0:a5:98:aa:c3:50:7a:e9:d2:66:27:36:6f:ac:c5:32:1e:
b7:50:d1:6f:7e:13:ea:8b:e2:68:27:e5:b2:2a:ce:ab:81:b8:
8a:fa:19:0a:07:3a:50:ef:c6:14:41:7c:44:d5:08:cb:f4:61:
8e:01:a0:7b:8a:3f:2e:2e:ec:c7:be:9d:08:47:73:cc:01:4b:
be:87:1b:2f:44:96:5c:d6:20:ce:99:a0:11:35:a3:4c:f3:57:
9a:64:5c:56:bc:f3:48:55:3d:eb:9e:5e:e7:e5:64:a0:76:7f:
7d:97:6c:63:c7:a6:72:16:bc:a4:20:8e:04:f2:c0:78:5f:84:
a0:ea:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org