Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C4BB4141911EFB9F9A539017001B1.roa
File: EA9C4BB4141911EFB9F9A539017001B1.roa (raw, json)
Hash identifier: a0SvlHQKB02L/8Nz9FhI02GWC04buSe06TpSvyHSrHc=
Subject key identifier: 82:C2:B7:06:29:E2:98:6E:80:9B:C7:6E:75:AB:F4:99:BF:B6:4C:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B825
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C4BB4141911EFB9F9A539017001B1.roa
Signing time: Fri 17 May 2024 06:51:42 +0000
ROA not before: Fri 17 May 2024 06:51:38 +0000
ROA not after: Thu 04 Jul 2024 06:51:38 +0000
asID: 44559
IP address blocks: 154.209.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47141 (0xb825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 06:51:38 2024 GMT
Not After : Jul 4 06:51:38 2024 GMT
Subject: CN=6646fe7d-c8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:8e:6a:ce:fe:bd:f6:e5:51:66:7d:43:e5:
a1:d0:5a:7f:86:03:bd:32:1f:09:05:7c:57:8b:4f:
e8:00:ce:4e:95:8d:dc:81:fe:84:26:dc:37:a5:6c:
df:6d:15:5a:71:50:19:eb:64:e0:ca:8e:d4:45:e5:
8a:d4:cf:8d:e2:94:d8:ec:a9:10:6b:8f:4e:0d:de:
29:c0:d6:81:84:d6:34:e5:18:c2:a7:ba:11:99:66:
ea:87:b6:63:66:43:3e:35:f7:9d:82:61:f7:c0:a7:
f8:c7:20:86:13:88:59:2a:51:80:4f:cd:93:f3:83:
21:0f:c9:69:39:03:df:ce:af:30:3f:a9:57:3a:f1:
c6:87:47:f6:5d:e2:42:68:30:2d:af:b5:f1:ef:8f:
fb:81:fd:5d:ce:1c:e8:ec:7b:c5:ee:57:1f:5a:17:
b6:8c:49:48:eb:8a:b7:8b:4c:b6:ea:74:2f:61:41:
29:a1:fe:99:00:00:f5:1f:9a:f0:3b:ed:30:06:93:
3e:40:d1:1f:6f:6c:d2:4c:80:00:55:15:47:ea:14:
4f:2a:22:1e:46:27:1d:0b:77:a1:be:c6:2d:04:ce:
e0:1b:40:4d:58:dd:80:28:3a:7d:2c:00:31:c7:2a:
45:e9:13:5d:68:64:8d:36:ea:c1:c1:a4:02:53:30:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:B7:06:29:E2:98:6E:80:9B:C7:6E:75:AB:F4:99:BF:B6:4C:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA9C4BB4141911EFB9F9A539017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:99:32:ed:90:08:2a:5d:89:8b:36:c1:04:46:90:65:96:23:
9e:9f:80:45:b7:f6:64:dd:58:36:df:a8:29:48:91:8f:e1:b1:
70:32:fc:78:81:48:84:ec:e7:e7:53:4c:48:e1:ef:d1:a5:60:
94:3a:c9:de:4e:7e:2e:d0:1c:e6:bb:60:f5:01:67:5a:8d:07:
b3:24:cb:0a:5b:f3:ef:52:3e:3d:8d:72:9b:4b:58:aa:25:f6:
f0:8a:5f:b3:e3:81:a1:eb:ed:7b:55:f1:97:26:bf:bf:67:03:
15:dd:1c:ab:fa:38:5c:cb:c2:e3:d0:16:f5:8e:0f:f4:e7:65:
fc:57:7b:7c:1f:1a:2b:61:41:39:7c:92:d8:48:fe:24:e0:22:
d0:7a:dc:f2:c7:c0:fa:bd:04:e6:7b:7d:dd:23:1b:bf:c8:c6:
11:8d:d0:06:ef:a7:98:29:42:d1:c7:03:f6:62:a0:04:49:c6:
4f:5a:68:0c:bf:d9:74:dd:43:65:dd:e6:5d:4c:61:e9:f2:65:
49:a4:f3:42:8d:f6:3c:4a:f0:f9:65:53:6f:c7:ab:98:0f:6b:
06:18:4a:dc:89:91:8e:12:94:b4:2d:8a:cf:c3:d7:c4:a8:a1:
52:82:8d:24:51:c6:29:e2:e4:82:bb:cd:54:71:7a:a0:24:cd:
a4:8d:7d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:14 2024 by rpki-client on console-fra.rpki-client.org