Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA850EC72D711EEB026B2714AD9E6FC.roa
File: FDA850EC72D711EEB026B2714AD9E6FC.roa (raw, json)
Hash identifier: t9e3BwlSvEV2Tz/pBPHnZBrvP6ILNAyRwrgZNpGmPtc=
Subject key identifier: 12:15:97:6E:CA:5A:E8:8B:A6:88:CB:5E:1A:16:87:9E:D7:9C:1A:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 48C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA850EC72D711EEB026B2714AD9E6FC.roa
Signing time: Wed 25 Oct 2023 01:44:10 +0000
ROA not before: Wed 25 Oct 2023 01:44:06 +0000
ROA not after: Mon 27 Oct 2025 01:44:06 +0000
asID: 55020
IP address blocks: 154.211.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18625 (0x48c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 01:44:06 2023 GMT
Not After : Oct 27 01:44:06 2025 GMT
Subject: CN=653872e9-5441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:21:b0:6f:95:2c:68:37:5b:63:9e:b0:49:
04:be:93:b4:b2:1c:e1:18:49:82:ce:a3:ca:49:24:
b0:4d:0f:98:f2:ee:d8:a0:25:8e:9a:bb:f9:2f:6f:
5c:53:f9:3c:23:21:ce:4e:5c:f8:1a:3e:e6:97:08:
d1:c3:04:d5:79:f9:5c:06:65:32:68:bc:21:fd:97:
0e:cb:0b:9b:54:b3:e9:44:ff:4b:fd:0b:3b:57:ba:
74:d4:e0:90:3e:47:32:25:a1:f3:a8:a1:7b:4f:ea:
b2:b8:b3:ba:90:7e:ff:55:36:d8:70:b9:33:43:d2:
64:df:7d:f6:4d:68:34:e7:75:2f:b0:c4:c7:cf:7f:
fc:68:02:cc:e4:68:6b:d5:8b:d2:df:8a:72:12:2e:
10:30:a8:ad:6c:01:08:52:2f:72:16:ad:bd:7d:da:
46:e8:a5:9c:73:b2:9d:1f:ae:8c:ba:68:45:7c:91:
6a:ec:e7:0f:1f:a4:a2:77:65:76:c5:0e:6c:66:36:
8a:96:9b:d2:f7:61:d2:87:ef:2c:93:c1:90:85:6c:
87:e2:75:ae:57:50:67:ed:b1:2b:86:2f:ee:98:98:
46:e3:2b:9c:31:cb:99:c1:1f:37:ba:49:b8:bd:0b:
28:f9:83:16:ae:91:68:1e:33:ff:43:fd:af:5c:10:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:97:6E:CA:5A:E8:8B:A6:88:CB:5E:1A:16:87:9E:D7:9C:1A:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA850EC72D711EEB026B2714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:db:e9:5c:7d:a5:27:5c:c0:da:1b:17:bf:13:30:43:01:f4:
9c:50:05:b2:30:7b:47:f8:fe:f1:73:c5:b2:fc:16:8f:59:4e:
77:9e:03:13:80:09:6f:c6:3e:77:8d:25:1e:b6:6b:01:5a:79:
e6:61:f7:1e:d4:36:3f:cb:80:eb:10:e3:47:72:1a:d8:e4:6b:
e5:dc:7e:88:fe:1f:ec:fb:04:fd:ec:1e:ee:7a:99:d3:fa:83:
1c:bb:42:1a:46:cc:51:e9:0a:4b:9a:16:66:11:13:25:35:a5:
03:9e:08:a2:ab:44:04:7d:e0:81:ae:a5:83:0f:dc:78:af:67:
3f:2a:26:2a:da:6f:5e:20:0e:ac:f6:a8:2f:e6:4b:3a:4b:bd:
38:26:50:97:49:ca:bc:ec:f6:31:10:fd:bd:85:99:35:c5:28:
7c:55:08:33:91:09:f2:82:c8:00:ac:ca:61:6c:cf:72:4d:7b:
1c:31:19:9e:40:36:38:de:aa:5f:44:72:e8:cf:fe:20:dd:af:
b5:85:8e:e8:21:54:e4:46:63:33:1a:c3:c2:6f:83:68:4e:37:
e9:ca:59:8c:e5:6f:06:53:7b:2e:51:7f:68:05:30:97:ce:fe:
8b:77:cc:d5:7a:f3:ab:64:c9:97:28:c4:c1:fa:69:04:29:f9:
b7:96:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:44 2024 by rpki-client on console-fra.rpki-client.org