Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216B8DE6062B11EF93EFD12E017001B1.roa
File: 216B8DE6062B11EF93EFD12E017001B1.roa (raw, json)
Hash identifier: nHe1KdDvJnJAZPy+eRyHeSSN2Xgrp81v86CGj6d/u5w=
Subject key identifier: CA:00:43:CA:71:2A:8F:D2:C4:77:7D:DC:4E:AF:F4:A8:A6:4D:F4:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B262
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216B8DE6062B11EF93EFD12E017001B1.roa
Signing time: Mon 29 Apr 2024 13:19:39 +0000
ROA not before: Mon 29 Apr 2024 13:19:35 +0000
ROA not after: Fri 07 Jun 2024 13:19:35 +0000
asID: 138915
IP address blocks: 154.223.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45666 (0xb262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:19:35 2024 GMT
Not After : Jun 7 13:19:35 2024 GMT
Subject: CN=662f9e6a-db9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:c2:08:88:95:c6:bb:ef:04:d0:a4:32:f7:
41:02:31:16:37:2d:71:0a:ee:99:69:3d:a6:1a:88:
47:2e:ea:05:29:4f:eb:ed:b1:76:c3:9d:6c:99:f7:
e8:79:2f:81:10:c5:de:09:c7:23:e4:9c:d9:ff:b1:
97:42:a3:06:ff:86:c3:2d:a5:df:bf:eb:69:98:17:
66:55:07:9c:8d:1a:06:a0:2e:7e:90:47:9e:1a:f2:
08:11:13:4f:7e:69:56:c9:8d:13:17:11:c3:f4:4d:
8b:9f:d8:0c:6c:27:b0:d1:ab:7e:91:c1:01:51:16:
06:98:35:d7:15:e4:76:89:32:8d:ab:c1:f8:8b:03:
70:38:fb:f7:7d:a2:4a:37:43:7e:60:9f:56:3c:62:
f5:c7:22:53:cc:42:de:7b:45:f6:49:88:a3:e4:f9:
2c:e2:e5:63:5a:2b:7e:51:ce:f6:15:fd:b5:85:7c:
bf:35:bc:3f:ab:56:2b:6a:55:74:ea:3b:47:44:d9:
72:5e:c5:a8:aa:ce:81:ac:81:28:78:1a:ec:e4:f3:
1d:f7:d9:68:01:45:c4:bb:fc:01:4e:3c:ee:ff:d0:
18:1d:e3:06:a4:f9:00:af:b8:d2:0c:b8:a6:eb:eb:
b6:1e:6e:23:9f:1a:2e:70:69:24:21:69:55:a6:43:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:43:CA:71:2A:8F:D2:C4:77:7D:DC:4E:AF:F4:A8:A6:4D:F4:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/216B8DE6062B11EF93EFD12E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.34.0/23
Signature Algorithm: sha256WithRSAEncryption
48:96:b3:0d:ce:d3:c4:c1:8d:85:58:5c:8b:18:98:5d:96:00:
ed:fa:d0:87:f0:16:e8:46:02:c7:bc:39:85:fb:7e:a8:b1:83:
7d:bb:c2:cf:66:f9:0b:29:83:4d:56:15:71:ab:9f:21:4d:95:
9f:2f:93:9b:5c:7c:47:2c:30:04:42:a7:9f:14:7c:74:bf:43:
08:08:4c:ef:9b:d9:26:50:36:4c:4f:b1:61:bf:d7:af:3e:09:
89:19:aa:37:7a:18:18:91:d3:f4:4b:5a:78:48:c3:02:59:a9:
c1:aa:31:03:0f:fd:ba:0a:db:4d:11:e5:34:31:94:a5:bb:3a:
bc:48:83:2e:7d:74:38:bc:ca:3f:2f:43:3b:24:d0:fc:19:99:
33:e0:e8:c2:28:ba:9f:22:cf:e3:08:c1:65:19:33:44:0d:73:
bf:af:44:57:93:c4:c8:84:de:54:29:b3:36:bf:82:b2:cd:14:
00:94:9b:56:db:8e:48:c5:2b:2d:d5:5d:f3:cf:96:c6:5d:c0:
ac:53:b9:a8:ce:82:16:7b:0a:91:7b:ef:e7:5e:1f:68:62:c2:
50:18:8d:ab:05:1d:b8:80:f7:e2:b4:59:8d:5c:3e:c3:d7:74:
3f:ce:69:e7:a1:1f:e3:da:f6:bd:1d:69:dd:63:e5:df:9d:db:
59:ea:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:18 2024 by rpki-client on console-ams.rpki-client.org