Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/EC9655DEBAA211EEAEF6CA61775412E6.roa
File: EC9655DEBAA211EEAEF6CA61775412E6.roa (raw, json)
Hash identifier: yvnXk52RrKBf5bxHjNgZoK+IZnQ2KvhA6TE4cpIiWLU=
Subject key identifier: 76:0D:98:77:A1:82:3A:65:0E:EC:B0:67:E9:13:3D:70:3B:0D:25:05
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 02A2
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/EC9655DEBAA211EEAEF6CA61775412E6.roa
Signing time: Wed 24 Jan 2024 10:25:41 +0000
ROA not before: Wed 24 Jan 2024 10:25:37 +0000
ROA not after: Wed 24 Jun 2026 10:25:37 +0000
asID: 29286
IP address blocks: 80.250.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Jan 24 10:25:37 2024 GMT
Not After : Jun 24 10:25:37 2026 GMT
Subject: CN=65b0e5a5-7ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:8b:0a:af:14:15:58:fe:dc:d1:1e:d0:d0:
e2:ad:29:e2:6e:9e:32:ef:97:03:20:5c:42:30:dd:
d5:31:5d:25:81:cd:af:52:79:3c:5e:65:b7:62:3e:
42:db:4e:9a:e3:a2:9e:39:e3:20:f7:51:0c:66:a3:
cc:7b:35:f1:2f:90:6b:7b:f2:8b:2c:ca:09:40:e9:
fc:d5:46:1a:3f:69:b0:e7:09:cb:71:f9:99:20:90:
20:c7:14:59:c0:0f:6a:12:2e:dd:86:c8:33:c1:3a:
37:f9:25:8d:a1:d5:ca:85:07:69:e2:b3:ac:78:f2:
a7:08:5f:51:34:a3:d1:08:e9:ab:f5:ce:39:fa:4c:
64:99:a8:6a:6b:3c:d7:50:7b:f2:9a:a2:6a:72:e2:
5f:87:86:73:1c:2e:ff:80:5b:ee:14:27:5a:33:da:
2a:e9:fe:b5:49:7c:1d:98:c8:79:14:ec:0d:26:9e:
ca:ac:65:fb:49:3a:47:84:15:8a:2b:5d:58:24:98:
f5:02:a3:0f:72:c7:72:d3:38:68:ec:2e:ce:be:f7:
28:fd:d5:34:e2:d6:b0:75:bc:a1:c1:d4:6b:5d:35:
75:a4:a2:54:1f:34:04:e0:e7:36:5d:3b:01:d8:6e:
b9:23:28:dd:51:b0:b9:7d:10:83:1b:dd:9f:50:3b:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:98:77:A1:82:3A:65:0E:EC:B0:67:E9:13:3D:70:3B:0D:25:05
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/EC9655DEBAA211EEAEF6CA61775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.250.47.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:62:88:a4:c9:5f:b7:1e:2c:33:5e:92:6b:ba:85:13:0e:04:
01:44:55:a3:b6:38:5e:ca:50:69:ac:0b:ba:17:74:59:90:ef:
66:70:1b:23:1b:87:b0:52:5a:31:a2:30:15:11:ab:68:71:41:
9f:a8:a7:18:3b:a1:b0:84:48:5e:ae:7f:32:5a:21:bc:9f:37:
54:57:57:2e:b5:eb:3a:b5:13:57:da:c4:65:fb:8d:ec:36:7e:
ec:2d:c8:f2:ae:46:fc:2e:f5:85:e3:dc:54:c7:cf:c2:b2:2f:
e6:61:42:fb:1b:da:41:11:bd:b9:4a:2b:17:9b:8c:fb:72:0b:
ac:f5:d7:48:a8:24:2f:2b:90:c3:e2:3d:e6:47:e2:6a:08:e8:
b0:f9:c4:6c:4a:bc:eb:80:ef:53:c8:c0:b0:20:8e:9c:19:08:
30:3b:73:82:79:a8:2e:7f:20:bf:bb:9d:45:13:3e:90:7b:e7:
1d:fd:14:60:d3:7f:e9:ec:01:cd:9c:0c:43:25:e3:86:e6:09:
0f:35:e9:92:6c:85:fd:2f:a8:62:ca:31:2f:20:13:ff:9a:e2:
c0:bd:3d:00:b5:31:75:73:d2:96:6d:cc:e2:86:e9:85:cb:52:
79:f3:76:9f:bc:0e:f1:f6:88:79:90:50:5d:b3:0c:91:41:f6:
50:1f:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:31 2024 by rpki-client on console-fra.rpki-client.org