Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB89EC96A30011EEBD285C18D25BE465.roa
File: EB89EC96A30011EEBD285C18D25BE465.roa (raw, json)
Hash identifier: rEHv7iKcpJO2nm3vlcBlWc0/RLRK02Ezs+f/LkZJjRA=
Subject key identifier: F6:4C:A1:02:C9:59:CB:7E:FE:E4:F3:4E:48:96:F2:3A:C0:C2:B9:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6703
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB89EC96A30011EEBD285C18D25BE465.roa
Signing time: Mon 25 Dec 2023 08:38:04 +0000
ROA not before: Mon 25 Dec 2023 08:38:01 +0000
ROA not after: Tue 07 Jan 2025 08:38:01 +0000
asID: 149981
IP address blocks: 154.85.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26371 (0x6703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:38:01 2023 GMT
Not After : Jan 7 08:38:01 2025 GMT
Subject: CN=65893f6c-1acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:18:82:c3:f1:46:ab:b5:7c:3e:05:11:16:
ac:29:74:de:16:bb:1a:3b:66:32:33:8a:96:87:f4:
5a:84:8f:47:b6:2e:89:f8:19:93:36:f3:7d:bf:83:
3e:ab:60:04:82:38:5e:c8:40:ac:56:d3:3f:1c:0c:
22:d0:e3:11:a1:39:17:ea:d9:19:04:2c:3a:7d:8f:
b4:07:07:bf:86:33:c7:e8:4c:30:85:52:42:ab:2d:
40:be:63:1f:6e:73:f0:73:82:7a:b8:33:73:47:00:
39:ba:18:96:fb:8c:58:7c:22:ed:84:46:36:94:f9:
52:0e:5e:db:bb:46:ff:1d:81:28:81:21:6a:83:fe:
e3:1f:2d:d3:45:9b:3b:1b:c8:81:be:80:19:36:95:
4c:09:22:54:57:e9:85:6b:81:98:bf:5b:31:cb:88:
bf:46:b9:c4:56:09:6b:af:17:4d:ca:78:be:b1:17:
99:bb:98:07:a6:02:1e:b6:f7:25:8c:45:41:03:31:
1a:4b:9d:f6:ad:5d:23:7b:55:ce:67:34:d9:a3:be:
f4:d1:e1:9f:75:36:1e:ca:05:c6:da:44:0e:a0:f2:
4d:0e:b5:66:22:a9:81:17:89:8c:8d:da:d8:e3:a7:
02:34:aa:6a:5c:2e:92:11:bc:0f:00:fb:b2:60:78:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:A1:02:C9:59:CB:7E:FE:E4:F3:4E:48:96:F2:3A:C0:C2:B9:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB89EC96A30011EEBD285C18D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:25:bc:1e:c4:35:46:82:9c:08:88:bd:1c:dd:67:d9:ba:af:
68:33:5e:f6:a0:02:60:31:2d:2d:7b:f4:22:d8:b3:53:69:6c:
86:aa:d7:bb:ff:7b:da:0b:a3:3f:ad:12:90:8d:e1:da:d6:12:
4a:2e:74:04:39:2a:8f:6e:eb:4d:88:c9:3e:b6:d9:f2:2b:01:
be:3c:6e:bc:e7:2a:dd:64:8c:21:fc:60:34:28:de:28:b5:82:
c8:b9:c6:b0:d6:ac:a3:48:29:63:7c:d7:a3:4f:15:0e:7f:cc:
65:29:f4:8a:b1:69:bf:3f:2f:be:d6:97:33:66:db:2d:ef:8d:
cc:57:92:12:f2:78:02:5b:90:48:82:95:12:d9:e9:30:be:8a:
c9:f4:07:a8:4d:66:f6:4d:8a:21:c7:36:64:9c:99:74:02:b2:
e2:c9:0a:08:b1:fb:79:f4:81:d3:b9:48:f5:42:b8:62:88:b5:
59:e5:52:b5:51:05:ba:c8:dc:c8:de:0d:8f:f1:a6:25:34:5f:
f8:ef:d9:92:34:08:df:17:40:2e:c8:a5:3d:ee:d3:12:a0:b3:
00:13:c4:df:a7:92:e6:2d:5f:e0:f8:d0:84:68:5b:3e:78:a2:
3b:74:e6:34:a2:e4:00:44:5d:8a:60:5c:f4:20:35:a9:34:4e:
9b:f4:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org