Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA26CE80A2BC11EE996E110FD25BE465.roa
File: EA26CE80A2BC11EE996E110FD25BE465.roa (raw, json)
Hash identifier: ahN5BDkDL+g4tLZoNCnphUdusXllutsvVCFUOz52v34=
Subject key identifier: 78:51:89:3C:E3:86:6B:FA:1D:B1:B5:CD:D8:6B:6C:7F:4D:12:56:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 666A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA26CE80A2BC11EE996E110FD25BE465.roa
Signing time: Mon 25 Dec 2023 00:31:16 +0000
ROA not before: Mon 25 Dec 2023 00:00:12 +0000
ROA not after: Mon 23 Dec 2024 00:00:12 +0000
asID: 133012
IP address blocks: 154.91.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26218 (0x666a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 00:00:12 2023 GMT
Not After : Dec 23 00:00:12 2024 GMT
Subject: CN=6588cd54-8b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:a5:45:06:72:cc:28:a0:10:54:c3:3c:00:
93:3f:c3:1d:12:42:2a:fd:e0:3f:8a:c4:85:84:ef:
62:73:30:78:63:ff:c9:34:22:a4:41:89:dd:ea:39:
2b:f5:54:7b:bf:88:5c:8c:b9:73:82:d7:39:cd:b4:
71:20:2e:e1:ec:a8:5a:74:22:bf:f7:3c:a3:9f:64:
3a:16:6b:23:ec:b9:4d:08:1e:50:69:e3:8e:71:31:
f2:41:a6:b7:de:d9:48:88:e5:12:ec:1c:53:7d:00:
ec:cf:74:70:08:35:b0:b5:e4:46:82:6c:8c:62:9c:
5b:fb:4a:69:75:eb:f2:06:ef:de:71:d2:3d:5a:89:
e4:1b:05:0e:d1:0f:4f:9f:50:69:22:ef:e0:53:9e:
a6:e1:59:2f:03:65:39:e3:7d:29:ec:37:ac:a1:cd:
80:56:19:69:36:8e:b6:01:3a:27:4c:d8:62:e8:e6:
38:16:05:a7:50:87:cf:9f:bd:65:5b:29:95:7e:54:
ff:04:93:38:9d:3c:ab:48:ff:78:53:01:94:e8:67:
58:e5:61:ce:68:30:a4:93:b0:cd:93:f8:ec:25:14:
2d:c1:fb:cd:03:5e:07:92:ab:6a:e3:c0:9b:12:97:
eb:d1:64:c4:96:78:96:86:7f:88:ed:da:d2:a8:60:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:89:3C:E3:86:6B:FA:1D:B1:B5:CD:D8:6B:6C:7F:4D:12:56:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA26CE80A2BC11EE996E110FD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.3.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6f:2a:66:a6:11:5a:5f:25:31:c8:15:7a:23:6a:25:4f:b0:
86:0b:28:6b:6a:4d:f8:22:c9:00:30:4a:6d:be:ea:40:46:05:
10:c8:59:72:7a:32:39:e5:de:0b:97:10:fc:f2:e0:d2:31:3d:
fd:a3:45:67:1a:d6:ea:33:0d:0c:77:a2:ae:d8:24:f8:f7:bb:
be:f2:dd:59:5b:c9:4a:d5:2a:15:da:6c:b6:1d:93:ee:92:2f:
f5:73:dd:6d:ed:90:61:3c:36:5c:4d:6b:8d:c7:86:a1:e4:36:
68:a6:58:f2:cc:9f:bb:fe:77:a6:ae:42:67:ec:49:b9:9e:87:
67:bd:7d:d2:9f:ce:fb:73:23:18:74:a7:65:f2:80:2d:b1:ef:
06:e2:ae:23:1c:bb:51:31:98:89:7f:9f:a6:27:2a:72:8d:7a:
1d:85:57:87:69:3e:bc:f1:50:61:3f:06:7d:c2:52:f5:eb:78:
1d:09:86:da:96:26:c7:62:69:c1:08:9c:5c:c0:28:57:69:28:
a2:e8:f7:01:f8:90:aa:8f:91:90:31:08:a4:07:16:8f:3e:be:
00:aa:bc:6a:6b:35:01:0e:d5:2e:cb:5f:60:da:bd:84:10:30:
55:af:1f:b0:5f:7a:7a:ef:42:3e:95:9e:6d:9c:8d:17:86:de:
83:ad:9e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org