Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC2A5CB0A30211EE827BC81BD25BE465.roa
File: EC2A5CB0A30211EE827BC81BD25BE465.roa (raw, json)
Hash identifier: biqyzwyaqQs+eGBo7UeefuUPao+VV0z8T0qm1nQ2EQA=
Subject key identifier: 45:DF:03:52:AF:02:99:82:66:F5:9D:E4:E6:12:FF:EE:F8:13:79:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6717
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC2A5CB0A30211EE827BC81BD25BE465.roa
Signing time: Mon 25 Dec 2023 08:52:24 +0000
ROA not before: Mon 25 Dec 2023 08:52:21 +0000
ROA not after: Tue 07 Jan 2025 08:52:21 +0000
asID: 139057
IP address blocks: 154.85.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26391 (0x6717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:52:21 2023 GMT
Not After : Jan 7 08:52:21 2025 GMT
Subject: CN=658942c8-3fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:ee:f3:96:72:5e:7b:db:4c:08:4b:25:c9:
c7:7e:00:2c:9b:67:4f:89:3c:9c:e6:b0:cd:ba:37:
e4:c4:71:e2:2a:cb:12:32:47:b6:b1:87:a8:ab:0b:
9f:5c:cd:e3:31:c7:6f:06:9d:7e:d0:2a:4b:ab:a4:
fc:34:6e:72:12:27:65:4a:3b:ef:cf:4d:72:e5:e6:
19:29:72:56:3b:ff:e9:10:1b:2b:4a:49:6a:b2:41:
d9:3b:c7:54:07:e9:5a:bc:4a:0d:45:de:c8:95:ae:
d7:12:75:96:83:18:37:f1:69:58:05:11:d8:8e:1c:
cf:b8:0f:ae:f0:69:54:28:ac:59:31:87:8f:5a:4c:
73:69:c8:a5:24:c0:11:33:dd:a7:db:f4:84:8e:cc:
3c:11:8c:c6:d4:5d:e7:d9:c8:54:d8:d4:c3:2e:07:
4a:90:86:e3:f2:43:47:6f:00:7e:3a:9a:76:10:c8:
72:b2:e4:f1:75:77:c7:c4:5b:4a:12:01:43:cb:e9:
0f:a7:34:97:63:86:bd:54:49:97:6d:39:8e:69:47:
bb:fb:76:f7:8e:7d:b1:1e:7c:19:11:9a:99:72:bd:
f0:40:f1:05:15:5a:ed:1c:59:d8:a2:c3:00:c7:83:
22:1d:5a:15:d7:3d:30:bd:ef:93:d7:26:fa:d6:bc:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:03:52:AF:02:99:82:66:F5:9D:E4:E6:12:FF:EE:F8:13:79:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC2A5CB0A30211EE827BC81BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b8:13:d4:b7:d2:44:3e:95:a9:af:19:35:bd:8d:51:b4:27:
77:10:21:fa:0c:f0:77:21:71:3b:6c:48:4e:7b:25:da:82:ff:
7c:54:39:eb:76:6e:42:d5:79:73:c3:5c:e7:e0:57:44:d2:1d:
18:2b:49:e7:f3:ca:92:0d:42:63:e7:a8:64:56:36:96:37:48:
65:fa:ed:da:1f:e1:c9:7a:f1:37:0f:dc:f0:77:be:4e:40:2a:
39:ef:f4:7e:ab:e2:31:8c:fc:84:a3:8a:fb:f5:24:be:f6:fe:
a6:ef:21:28:fc:be:18:c4:d0:e9:b0:11:ad:25:0a:69:72:40:
b2:d0:86:52:7b:0a:44:d4:8c:4c:60:1d:a1:93:65:85:70:1e:
15:74:e1:d7:a6:7e:78:fe:42:6a:99:40:2b:fd:29:45:bf:fa:
0d:2a:38:84:63:d3:f5:5c:d7:c6:7f:c9:04:6d:f2:e5:f7:cd:
a9:9d:da:cf:7c:78:60:48:88:66:28:ca:7f:d3:4e:1d:22:b3:
29:bd:2b:84:90:39:5a:f9:93:bd:db:e3:ad:15:2e:02:bd:47:
36:74:7d:ff:02:a9:d2:67:82:58:df:25:09:b4:e7:ff:bc:bc:
b9:ca:8e:58:48:eb:40:6a:e0:86:d1:64:9a:61:84:09:7c:30:
8d:14:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org