Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/40750D8E82FF11EEA9EF75854AD9E6FC.roa
File: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (raw, json)
Hash identifier: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=
Subject key identifier: EC:39:C3:90:50:B2:9B:98:F1:98:A1:D7:FD:9F:EC:3C:46:2C:A1:7D
Certificate issuer: /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial: 022D
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/40750D8E82FF11EEA9EF75854AD9E6FC.roa
Signing time: Tue 14 Nov 2023 15:05:30 +0000
ROA not before: Tue 14 Nov 2023 15:05:27 +0000
ROA not after: Tue 14 Nov 2028 15:05:27 +0000
asID: 328155
IP address blocks: 154.65.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Validity
Not Before: Nov 14 15:05:27 2023 GMT
Not After : Nov 14 15:05:27 2028 GMT
Subject: CN=65538cba-335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:7f:79:48:e9:d3:cf:46:73:fb:ee:19:cc:
54:4b:e9:0d:39:fc:66:7e:63:5e:05:cb:3e:9a:07:
ef:b9:7b:94:23:f7:74:1c:4d:5b:e8:73:ed:8c:e7:
4d:97:b2:49:a7:63:a9:c1:e0:7d:65:68:2b:ef:2e:
3f:ba:2c:a1:d3:41:5c:2b:5a:01:17:5e:a1:91:42:
0c:31:a7:c4:f2:10:55:43:92:20:98:45:6d:d0:64:
fa:55:36:40:45:9e:4d:61:2d:8b:c2:52:57:19:ca:
a0:9d:0e:8e:61:45:0e:74:b5:2d:01:30:dd:a0:c4:
40:73:95:e2:c4:7c:3f:6a:07:5e:1a:4e:8f:99:26:
fc:08:b1:60:8e:59:88:53:2d:a1:8b:6b:c3:0b:b7:
a2:98:64:98:1d:4e:dd:e4:f6:43:38:b2:40:2f:69:
40:0e:6b:2a:f9:8c:bf:83:87:54:2c:ee:1f:bc:13:
74:97:df:f2:cc:fd:d7:56:d5:7f:88:1f:da:6b:b6:
b5:5a:bb:04:8a:a7:b5:15:99:25:2d:d4:68:2a:20:
d3:ef:89:fa:b4:24:66:13:46:b6:e1:17:95:c8:4f:
45:d7:f1:5f:06:55:8f:60:83:08:7c:68:e9:56:59:
8c:d4:da:1b:3c:d3:89:9e:85:4a:c2:17:50:90:6f:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:C3:90:50:B2:9B:98:F1:98:A1:D7:FD:9F:EC:3C:46:2C:A1:7D
X509v3 Authority Key Identifier:
keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/40750D8E82FF11EEA9EF75854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.65.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:58:09:88:a6:c4:bd:3d:d2:89:db:80:99:0b:cf:cb:d7:c7:
61:af:27:1a:24:7b:0f:90:c0:1b:10:21:56:49:99:65:2f:78:
07:fd:a5:e0:60:70:2c:2a:c0:7f:f7:62:eb:48:89:51:07:7d:
58:32:37:4a:a0:87:36:72:12:bb:dd:54:35:1f:48:21:a6:f3:
05:0f:69:36:d4:d5:f5:fa:59:71:57:bf:16:12:d6:30:d4:43:
a1:18:13:03:33:c4:25:97:0a:19:5c:57:f3:d0:69:46:8b:6a:
70:6d:80:8d:5e:79:c7:ac:83:55:27:b8:07:e9:31:73:fc:c2:
7b:1c:3f:5e:37:2d:31:e6:83:05:19:9a:41:f9:fd:25:38:36:
9f:7f:eb:c3:04:d8:65:36:d0:e9:0c:13:25:90:47:2e:84:fa:
cd:85:0c:0c:88:c2:2e:8a:2c:7c:ed:13:e4:c4:58:ea:36:82:
e8:7c:d5:89:e2:e6:f3:9b:56:74:61:c9:dc:9d:a3:db:5a:ea:
7a:12:34:7f:86:0b:32:7b:ff:e4:f0:f1:3d:39:19:4f:41:81:
45:0b:60:80:65:60:80:73:ef:cb:7b:9b:fa:47:0d:9f:82:63:
3d:ec:ef:0e:45:60:68:46:9d:d2:bb:dc:65:19:0f:ff:ee:61:
68:23:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:27:40 2024 by rpki-client on console-ams.rpki-client.org