Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB0111EFAEF11EE9CA3A520017001B1.roa
File: EFB0111EFAEF11EE9CA3A520017001B1.roa (raw, json)
Hash identifier: 0++Z0B+ipS7xa5TeP5iX+Bs4Sw2PperhYWr65XPwvCc=
Subject key identifier: 9B:16:C5:70:23:8A:EA:AE:3B:07:40:72:76:81:AF:28:E0:10:70:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB0111EFAEF11EE9CA3A520017001B1.roa
Signing time: Mon 15 Apr 2024 06:18:12 +0000
ROA not before: Mon 15 Apr 2024 06:18:09 +0000
ROA not after: Thu 30 May 2024 06:18:09 +0000
asID: 63139
IP address blocks: 154.94.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44222 (0xacbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:18:09 2024 GMT
Not After : May 30 06:18:09 2024 GMT
Subject: CN=661cc6a4-c07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:98:32:0f:34:1a:5e:d4:28:1f:3c:20:ed:
a1:c3:ff:44:45:4b:51:66:40:5b:8b:e1:43:ac:68:
8a:c7:fb:f8:81:37:dd:21:1c:2a:8a:87:27:f0:9c:
d1:05:58:1c:2a:a0:f8:95:10:d0:1c:e2:83:10:7f:
6f:d9:5b:76:be:a0:db:91:d0:54:f0:e6:4c:95:52:
cd:bf:02:76:b7:93:10:86:46:60:4d:9d:4c:49:d3:
6c:f2:d6:2e:ac:32:3d:6a:6b:d2:15:62:3b:75:2f:
eb:9b:27:3c:e1:34:3e:7c:fa:cf:be:7e:02:9f:6c:
82:e1:77:09:0d:b0:cc:07:78:e3:67:ad:fc:e7:5e:
93:12:3f:d4:f1:17:95:09:1b:a8:5f:f1:b9:08:24:
aa:10:fb:60:28:6f:81:63:37:d6:e4:99:ab:24:26:
1f:e3:5d:00:d4:f3:61:89:fb:56:ff:52:2e:d2:9b:
67:15:0b:dd:06:7f:86:39:8d:1c:37:d1:df:88:2a:
6a:d2:ee:8d:c3:35:ed:13:81:ac:d7:25:0d:66:23:
64:9e:77:84:9e:29:e7:84:6f:de:39:91:db:43:cd:
1e:e8:53:d0:c9:5c:8c:9d:2f:a8:a9:e7:3f:c3:9d:
66:a9:74:50:16:1c:d5:cb:e8:3b:81:52:25:2c:7e:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:16:C5:70:23:8A:EA:AE:3B:07:40:72:76:81:AF:28:E0:10:70:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB0111EFAEF11EE9CA3A520017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bc:ef:38:1c:07:bb:b1:54:09:98:f8:66:a5:f1:10:45:21:
2f:ce:5d:36:ac:8a:1f:09:26:2a:0c:37:00:7a:70:a9:50:1f:
00:e9:09:7a:d4:68:a8:11:1f:4b:a3:ee:98:01:b9:8f:60:90:
61:74:ca:16:2e:2c:bd:c6:05:42:b8:64:ba:f6:64:d1:aa:a2:
14:cb:5f:4b:df:a4:0b:26:d4:a7:35:42:26:53:08:7a:af:fd:
77:8e:da:38:3a:58:0e:e0:17:90:a6:9b:71:67:b5:91:98:79:
db:7e:f5:84:0f:56:e4:2f:7a:99:43:5c:0d:64:84:f0:c0:d7:
52:6f:c5:d7:2f:c4:a5:56:fa:86:40:94:b2:0e:d9:21:19:eb:
03:fe:7d:38:44:8c:24:c9:76:77:30:ea:53:c1:50:9f:48:28:
ce:65:6a:31:9f:c5:06:a4:04:40:5a:32:bf:5c:4c:fb:ef:99:
a2:61:35:e9:9e:5a:0a:7a:27:40:a2:47:63:cf:22:76:b4:54:
d4:88:61:ea:19:21:bf:c7:66:ce:01:de:a5:09:76:d0:51:02:
9e:14:ec:c9:a8:ad:e2:fc:da:35:bf:84:df:93:63:10:29:79:
18:ca:5d:80:08:60:00:03:ea:70:fc:01:e6:95:9f:72:b2:de:
4a:7b:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org