Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/64F50FBC740C11EE99EADC474AD9E6FC.roa
File: 64F50FBC740C11EE99EADC474AD9E6FC.roa (raw, json)
Hash identifier: W0IpuC6GX4xRD5RgHmpflT28ws+r3XoBXlaHP+TeZBA=
Subject key identifier: 25:FD:60:ED:CB:52:36:5B:0D:BC:14:4D:12:5C:02:70:9B:8A:D1:AC
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: 0112
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/64F50FBC740C11EE99EADC474AD9E6FC.roa
Signing time: Thu 26 Oct 2023 14:31:48 +0000
ROA not before: Thu 26 Oct 2023 14:31:44 +0000
ROA not after: Sun 26 Oct 2025 14:31:44 +0000
asID: 15964
IP address blocks: 154.72.182.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 May 2024 00:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 26 14:31:44 2023 GMT
Not After : Oct 26 14:31:44 2025 GMT
Subject: CN=653a7854-2037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:e0:2b:3d:a7:8f:bf:fd:c2:51:f0:31:05:
d2:61:22:1b:ed:5f:3b:75:35:e0:17:a9:bb:85:c7:
96:d9:61:13:4a:d5:ba:bd:32:36:4e:e2:34:2a:20:
7e:db:08:1b:28:60:01:0e:c2:aa:20:47:c7:04:27:
8b:73:a6:55:6a:51:b4:06:87:91:6a:c5:92:7f:d0:
7d:3b:6d:7f:45:97:3a:0b:12:ce:e3:96:4d:44:77:
f2:f6:7f:bc:1f:26:b1:4f:51:c2:51:9b:89:94:aa:
01:29:d4:b4:30:ae:61:2a:27:d3:3a:d8:e2:81:f4:
64:b2:16:90:92:5f:a5:68:4e:06:74:68:31:63:c1:
2e:88:e0:e9:dc:30:31:75:6f:86:18:09:e7:e8:5d:
f1:20:81:8d:72:9c:0a:0d:c0:17:0a:69:c2:8b:7d:
0e:ba:51:16:7f:4d:a2:3d:b1:50:4a:6f:d3:05:67:
e7:a5:2e:99:73:2c:09:0e:a9:24:54:fa:61:a1:f2:
3f:ea:7d:64:50:a6:01:4b:95:3b:d3:a2:70:15:e4:
a1:94:6d:4a:1c:9a:73:23:2c:f8:63:a5:04:d2:db:
3a:5d:80:60:13:68:40:bb:97:34:37:3d:d9:e7:17:
7a:72:65:34:58:9d:1a:b3:40:43:3e:a1:18:2c:13:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:60:ED:CB:52:36:5B:0D:BC:14:4D:12:5C:02:70:9B:8A:D1:AC
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/64F50FBC740C11EE99EADC474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.182.128/25
Signature Algorithm: sha256WithRSAEncryption
22:c0:a0:3d:2b:20:cd:e8:2d:da:d6:d3:7e:53:b1:b6:af:99:
7a:9b:93:c6:e6:ad:f0:6e:4d:7b:d0:0f:03:3e:49:e1:dd:d5:
ec:59:c2:1c:15:0f:08:54:46:be:89:5d:07:b0:a0:8b:86:e2:
e2:4c:96:6d:f1:14:f2:f5:d4:10:17:37:f9:a2:4e:a8:52:1f:
fd:fd:82:9c:65:ff:b2:19:e9:11:9e:74:28:ea:ab:0e:9a:7a:
61:73:b8:15:31:e4:48:72:ec:6c:0e:25:a9:d2:a9:9c:5d:5e:
13:f1:4f:98:60:7a:ef:ff:00:32:d6:80:de:54:99:7d:09:71:
55:a4:55:51:8c:f1:9f:d5:c2:3d:78:38:82:c1:ef:aa:54:95:
6e:f1:33:22:0f:18:93:2a:db:06:29:ba:ee:15:80:b5:63:da:
63:8e:3b:0c:86:48:a2:68:18:42:9c:1a:d7:0f:88:75:ed:58:
47:bd:39:09:c2:eb:ce:36:8a:a1:63:ed:48:b1:da:a2:b9:de:
71:84:73:38:1a:1f:b3:31:fa:a0:35:20:83:b8:66:5d:6a:eb:
3d:46:f2:39:cc:fa:21:42:dd:6a:df:0c:56:be:f3:86:bc:43:
5f:f4:32:77:ed:16:85:48:2a:b2:b8:02:fb:3a:9a:01:bb:f6:
17:64:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:29:28 2024 by rpki-client on console-fra.rpki-client.org