Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E357234CCBD11EE9E8EC383775412E6.roa
File: 0E357234CCBD11EE9E8EC383775412E6.roa (raw, json)
Hash identifier: /+izlV+KxUBc5DB52UZtpmMKVFdac1Yy2p7fclrZbq4=
Subject key identifier: DF:62:12:AB:56:AF:1A:F4:E4:D7:A8:02:56:37:95:B8:79:F4:A7:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E357234CCBD11EE9E8EC383775412E6.roa
Signing time: Fri 16 Feb 2024 11:18:05 +0000
ROA not before: Fri 16 Feb 2024 11:17:57 +0000
ROA not after: Fri 26 Apr 2024 11:17:57 +0000
asID: 9009
IP address blocks: 154.216.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35563 (0x8aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:17:57 2024 GMT
Not After : Apr 26 11:17:57 2024 GMT
Subject: CN=65cf446d-01b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:99:07:30:87:2b:26:94:6b:cf:e1:41:a3:
a7:00:f3:26:2f:be:88:20:89:3d:e3:0d:65:73:49:
a9:4f:4d:32:78:d4:42:19:f3:7d:bd:f2:4d:ab:fb:
7a:74:51:20:5e:0b:6f:ea:5e:be:99:ca:e6:59:6a:
20:6c:f3:f1:e1:c7:28:54:aa:76:6d:9e:7b:98:6a:
5a:69:7d:27:a0:b6:ac:35:94:45:ef:ae:5b:33:70:
e4:0a:ab:87:09:14:b9:23:c3:ec:a7:3e:60:b1:3a:
64:1c:23:9f:c7:ab:5a:0b:09:22:03:7e:a1:33:02:
80:fc:f8:4e:48:8a:e1:7a:40:01:bb:ee:8d:6a:e1:
71:f1:28:79:14:6e:39:f4:39:5f:57:39:60:3d:91:
cc:c5:b7:64:84:7a:5f:f2:61:6a:ec:40:a4:38:b7:
ca:32:fc:83:7c:d8:11:1d:d7:ce:23:ef:75:bf:a9:
6b:e4:69:39:76:75:b7:38:d0:cc:94:e0:61:e9:48:
1c:3d:d1:a8:2b:cb:12:73:bc:69:15:d2:f0:e7:86:
c9:38:38:92:7c:1f:92:5a:03:a9:e9:1b:a5:6d:05:
91:73:fc:20:54:28:8b:5e:43:72:a3:61:bc:87:13:
ad:e6:2c:d9:9d:a3:1f:cf:a0:17:52:ca:51:6f:73:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:12:AB:56:AF:1A:F4:E4:D7:A8:02:56:37:95:B8:79:F4:A7:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E357234CCBD11EE9E8EC383775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.229.0/24
Signature Algorithm: sha256WithRSAEncryption
43:65:ed:f7:b7:b5:8b:de:56:13:07:51:58:f6:ba:70:a2:12:
c0:ed:38:22:3c:04:4c:76:ec:8b:3f:4c:77:21:ee:4d:61:8e:
30:36:3d:1b:f5:5e:aa:01:3b:8d:bd:26:f4:4d:ea:b8:13:39:
8f:7c:18:e9:f1:d4:7c:d9:6a:35:d2:30:48:90:84:54:4d:87:
5e:d2:1d:c0:a3:28:e2:4c:57:e6:92:87:5a:15:ba:cd:98:72:
fb:45:ca:58:fd:a3:66:ca:ef:2f:db:fe:d5:53:0a:5e:c3:42:
3c:c3:72:8e:91:b9:2b:bf:81:17:7c:ed:51:3b:af:c1:77:e4:
fc:bc:c6:55:5e:a1:57:6a:04:f7:85:d0:d5:f9:3e:76:e0:24:
f1:62:98:10:b2:0b:af:ea:09:65:60:d4:6b:84:32:ff:73:70:
ce:94:97:fa:9a:99:a3:f7:60:b8:c7:42:25:25:5d:eb:87:b9:
0d:43:d5:e4:19:f6:b2:b6:49:f6:88:7f:51:a2:f9:99:c4:33:
eb:4f:62:92:47:0f:fd:b3:ea:92:1f:c9:cf:38:ab:81:3f:2e:
bf:a3:e9:5f:be:a3:0a:61:0f:0d:17:e3:c4:9b:49:62:80:fd:
58:c6:ec:81:8b:4e:5f:f4:a9:48:ed:84:6d:c3:03:7c:63:f0:
67:03:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:28 2024 by rpki-client on console-ams.rpki-client.org