Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E34770CE83C711EE9ABB13844AD9E6FC.roa
File: E34770CE83C711EE9ABB13844AD9E6FC.roa (raw, json)
Hash identifier: R9BzRWgZfj04pulMYT3j00K6RTcyvq/CVx2w9admMNw=
Subject key identifier: 58:ED:3E:25:3C:76:17:56:16:17:F0:D0:3D:C3:18:E7:38:89:FF:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5025
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E34770CE83C711EE9ABB13844AD9E6FC.roa
Signing time: Wed 15 Nov 2023 15:01:43 +0000
ROA not before: Wed 15 Nov 2023 15:01:40 +0000
ROA not after: Tue 12 Nov 2024 15:01:40 +0000
asID: 397630
IP address blocks: 154.83.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20517 (0x5025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 15:01:40 2023 GMT
Not After : Nov 12 15:01:40 2024 GMT
Subject: CN=6554dd57-e2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:70:89:d3:bb:d7:d6:0b:0d:03:80:22:d6:
75:0a:06:b5:b3:46:05:08:e9:13:74:aa:2c:6c:b0:
a5:a1:34:59:e9:9d:ad:d0:83:e6:62:03:f0:fa:ab:
d1:c6:d9:34:c2:77:b6:d5:ed:b4:fc:17:e9:c1:f9:
7a:2f:89:08:4e:e5:c9:87:84:c2:35:b4:18:3d:f5:
57:ca:0a:e6:2c:b2:c7:c2:6a:24:ea:85:78:eb:9f:
b7:4a:f7:a2:0e:b3:ee:78:00:0f:55:77:f2:ec:eb:
61:20:ea:41:59:19:74:36:d3:95:96:54:b4:ce:58:
bd:d8:7d:95:7a:4b:07:5c:11:f2:74:14:11:e9:07:
63:b3:5f:16:3f:f8:2a:65:ab:ad:7b:bc:94:97:5b:
4e:0e:96:22:a4:1f:1d:22:7b:d0:96:da:3f:95:16:
1f:13:57:9c:39:d0:f5:64:ea:f1:6e:ce:68:96:52:
f2:c6:8a:e5:f2:26:3b:4a:86:81:e9:90:9f:47:61:
35:81:fd:c8:23:60:33:57:08:50:17:05:31:dc:fa:
72:fd:6b:ca:87:23:ff:81:4a:55:91:a9:8f:3c:ba:
d7:d4:1f:e8:ee:8d:fb:c8:23:f0:7b:8e:50:0a:09:
da:a9:46:70:b9:e7:5a:4c:16:8f:a4:54:b3:d7:cb:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:ED:3E:25:3C:76:17:56:16:17:F0:D0:3D:C3:18:E7:38:89:FF:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E34770CE83C711EE9ABB13844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e7:ba:03:5c:14:a5:40:c6:4c:30:85:de:7c:11:2f:a1:1e:
31:6d:82:e1:a5:ad:3e:5e:0d:70:d4:0a:cb:44:31:53:07:6f:
e5:5b:73:52:21:bd:3f:f7:ba:76:b6:7c:95:ff:ed:1b:7e:6b:
02:e5:17:c5:69:b3:62:44:b9:16:ce:ca:a8:f6:ef:af:2e:39:
95:d0:ad:2b:2b:6b:f8:05:c3:39:8f:47:c6:c3:67:18:ce:8c:
e2:a4:01:92:f8:a7:12:44:a6:7f:7f:e4:ab:fe:f9:8f:0d:c1:
2d:4d:79:7a:2f:64:0d:1c:75:a2:eb:94:fe:1b:55:6e:2c:97:
c4:67:a0:2b:c3:10:1a:95:af:ae:02:08:f6:54:3e:66:e0:3c:
43:57:26:fc:ad:ab:cb:21:8e:0e:9f:65:4e:79:c6:53:a5:78:
64:6b:42:9d:83:1f:f5:d4:aa:29:c8:9c:3e:6d:82:a8:f7:73:
4b:7c:0d:8e:c7:d9:d6:da:7a:ab:1c:bf:10:86:38:46:43:1f:
cd:94:d9:9a:da:b5:11:34:95:40:55:e6:f4:39:62:93:0b:64:
77:15:0e:41:81:6c:17:b5:23:98:10:0b:21:06:5d:6e:4b:a3:
be:e1:30:57:c1:58:21:68:1c:36:20:0f:b3:c3:41:cd:0a:8c:
9a:b3:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org