Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5BDD44CA30111EE99FA381AD25BE465.roa
File: F5BDD44CA30111EE99FA381AD25BE465.roa (raw, json)
Hash identifier: LMspE9973LtkilMH+w9eYh1IjYdyxJxOrND0lnDLl50=
Subject key identifier: 52:E8:8C:A3:4F:1A:D9:69:96:D8:CF:D5:C3:B9:37:01:20:50:AB:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 670D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5BDD44CA30111EE99FA381AD25BE465.roa
Signing time: Mon 25 Dec 2023 08:45:31 +0000
ROA not before: Mon 25 Dec 2023 08:45:27 +0000
ROA not after: Tue 07 Jan 2025 08:45:27 +0000
asID: 139057
IP address blocks: 154.85.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26381 (0x670d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:45:27 2023 GMT
Not After : Jan 7 08:45:27 2025 GMT
Subject: CN=6589412b-1606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:87:e5:0e:76:8e:17:3c:dd:a7:06:f4:fa:
1e:1b:a5:87:ed:52:0f:2d:ad:37:60:1b:96:48:65:
23:24:29:e5:18:3a:74:15:68:30:ca:49:95:6e:f1:
53:7e:3e:bc:f3:1a:ec:4b:93:82:dc:f3:e7:57:a4:
7c:7c:f5:03:9d:78:ea:bf:34:26:21:45:18:88:c0:
0a:89:f3:ef:af:d0:92:bc:3f:bb:13:44:7b:fd:b3:
bc:3c:9e:b1:90:36:3c:cc:97:ba:73:46:29:d3:89:
6c:54:7b:35:6b:84:97:c3:d3:f7:cb:91:79:d0:27:
3a:53:93:18:12:fd:d4:84:f9:f3:a7:ec:f1:e9:e2:
69:6b:5f:a8:ed:21:94:02:19:56:39:43:5d:77:03:
59:bc:02:60:00:67:2a:c6:ad:fb:ff:cd:4f:af:b3:
4a:be:67:7c:3d:b5:45:7a:14:35:e6:49:dc:24:d3:
db:d9:c0:1b:a5:cb:87:66:a1:04:94:c1:fe:d0:90:
b1:52:99:87:14:c0:b5:a3:84:83:db:99:8c:49:b4:
19:50:9f:1c:7e:fe:8a:d2:fd:c9:d2:72:b3:29:b4:
0d:15:9a:1b:82:35:ab:64:1a:8a:18:c3:8b:2c:f8:
bc:c6:fa:6a:4d:c6:eb:07:1e:28:5a:ec:61:67:5c:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:8C:A3:4F:1A:D9:69:96:D8:CF:D5:C3:B9:37:01:20:50:AB:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5BDD44CA30111EE99FA381AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:88:00:80:18:76:97:00:cf:56:c4:1f:97:74:1c:07:fc:06:
f3:d4:92:80:4e:a8:4f:16:ed:8e:45:43:13:36:4f:42:c4:c5:
96:67:91:09:5d:87:ae:b5:b3:88:09:98:06:f6:0a:5f:1c:5f:
e1:da:1c:7a:f9:a2:f6:b8:74:9d:42:06:86:10:65:a0:ef:cb:
6d:11:00:5e:82:00:7b:c5:97:d9:80:2f:24:85:10:88:d6:16:
7d:22:74:33:8c:2e:15:d6:92:0b:d1:1e:e8:c0:2b:1c:42:5e:
c8:b5:56:d7:27:8e:19:49:7b:41:cc:a0:63:9d:13:de:6c:7e:
57:1d:47:ec:64:db:68:e9:2d:20:57:b6:1e:30:40:fc:87:b2:
d1:2b:c5:b4:51:86:ee:00:4c:15:2e:ca:68:5b:3e:f5:e8:12:
f8:49:dd:96:f9:a9:59:2b:81:60:b0:83:c6:67:58:a6:0e:70:
58:40:0e:a2:b9:35:50:36:a5:07:68:71:e7:7d:98:06:e6:ab:
2b:d5:4d:3b:96:00:6e:02:9c:fc:53:99:f8:0e:11:94:52:9c:
38:78:f2:c1:53:d7:9a:d2:73:de:a4:e5:46:f8:c3:69:92:e8:
00:7d:08:9b:bd:45:4b:48:d6:67:0c:33:95:ad:8a:b2:77:97:
c1:3f:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org