Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F806FC038111EF97FCF8F4007001B1.roa
File: 16F806FC038111EF97FCF8F4007001B1.roa (raw, json)
Hash identifier: 97r3Iu7LrmL5sxKcy/eHkc/IA28Ghp3UjefTSrPk9Xw=
Subject key identifier: 84:9E:8E:66:85:E2:CE:24:0D:65:59:CB:00:D6:2E:7F:B7:0C:23:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B14C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F806FC038111EF97FCF8F4007001B1.roa
Signing time: Fri 26 Apr 2024 03:57:24 +0000
ROA not before: Fri 26 Apr 2024 03:57:21 +0000
ROA not after: Tue 03 Sep 2024 03:57:21 +0000
asID: 131685
IP address blocks: 154.210.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45388 (0xb14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:57:21 2024 GMT
Not After : Sep 3 03:57:21 2024 GMT
Subject: CN=662b2624-65c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:aa:02:d7:a6:a1:7a:65:38:0b:a8:91:c1:
e7:fe:9a:35:e8:6b:d3:82:32:e5:01:79:3f:f9:00:
30:cd:2f:b4:2e:a6:b1:33:36:03:12:1d:c9:38:60:
75:07:c6:2b:9f:0c:26:6a:88:75:17:e7:1c:f5:dc:
8f:6a:7d:7c:33:1d:ab:d9:d6:de:bb:3c:9a:62:15:
d7:65:a0:02:a9:24:8f:27:d4:6e:6b:f4:30:aa:c1:
e5:21:c8:68:f1:8f:8b:7e:ed:17:05:c4:ed:fe:86:
33:2c:90:9a:35:ec:fe:64:6e:bc:b2:54:d1:7b:8a:
f5:0f:fd:f4:19:f9:6f:63:8a:20:15:b2:63:38:6b:
32:ae:5d:b4:fe:6a:45:7e:b0:75:33:a3:55:9b:9f:
05:02:e5:4d:b4:fd:3e:44:9c:2c:d6:c1:d7:77:fb:
e1:4d:be:18:3c:5b:8c:80:7a:bb:fe:d2:35:34:aa:
9b:9d:40:46:7b:1f:80:bd:f6:51:4a:6c:93:99:fc:
86:6f:a1:f1:e8:04:fd:52:99:a5:51:11:9c:c2:d0:
c2:9f:cf:31:5e:14:df:9e:39:5c:6f:ac:d5:b4:18:
92:e3:ae:04:e9:fc:42:dc:77:74:92:fb:80:7b:f2:
8b:1b:d9:9d:12:52:7b:e2:31:b2:da:dc:6f:01:01:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:8E:66:85:E2:CE:24:0D:65:59:CB:00:D6:2E:7F:B7:0C:23:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16F806FC038111EF97FCF8F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:cc:10:5d:17:83:19:22:71:1e:52:3d:a3:d2:85:25:1f:d6:
9b:f4:fd:64:74:0d:98:74:bd:67:2b:69:ac:cc:9a:ed:ea:ad:
de:5c:6e:1d:8e:80:5e:2a:83:72:42:b5:64:e7:9f:dc:3f:90:
fc:8c:70:79:83:4f:57:37:05:5b:03:c7:e3:f7:32:a6:8d:55:
32:4f:44:a6:af:c6:fc:74:1b:41:50:66:7b:44:2a:2e:4a:02:
a8:81:22:24:64:cb:62:1d:ab:8c:da:29:f4:5c:05:97:03:ec:
48:3e:bf:27:5e:07:60:46:12:6f:84:14:15:41:d1:04:00:8c:
9e:ae:fc:31:7d:e9:4c:83:e5:a1:21:20:44:0a:50:8f:a8:bb:
6b:b8:95:74:86:7a:b8:d1:90:b9:b2:ce:f8:ce:92:8b:39:ef:
f1:02:31:c2:c0:52:2b:bb:b0:39:04:34:da:21:a9:fc:eb:fe:
90:c4:74:0f:84:ec:a3:cf:db:20:0b:a7:d5:a9:f4:87:24:a6:
2f:45:0b:e4:b5:3e:ef:e1:1c:af:b5:bb:43:18:62:8f:bf:39:
b6:a5:27:db:a3:e5:66:69:e1:7f:27:84:cb:0d:a7:95:a9:68:
bc:7a:73:31:10:27:0a:1d:17:98:5a:be:72:c3:1f:fd:f2:e4:
9b:23:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:18 2024 by rpki-client on console-ams.rpki-client.org