Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F1B7805F211EFB6A65761017001B1.roa
File: 268F1B7805F211EFB6A65761017001B1.roa (raw, json)
Hash identifier: c8cNqaXh1BHeqEmK55c/B1rb3SWwwN1ET66BxzgBn4w=
Subject key identifier: E6:0F:7F:82:BC:AF:77:8D:57:76:D7:6B:FB:A5:8F:67:55:2A:EF:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F1B7805F211EFB6A65761017001B1.roa
Signing time: Mon 29 Apr 2024 06:31:46 +0000
ROA not before: Mon 29 Apr 2024 06:31:43 +0000
ROA not after: Sat 01 Jun 2024 06:31:43 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 01 Jun 2024 06:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45544 (0xb1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 06:31:43 2024 GMT
Not After : Jun 1 06:31:43 2024 GMT
Subject: CN=662f3ed2-151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:10:7c:ca:bb:75:09:68:64:80:ef:cf:b8:
ef:5d:9a:11:ba:c0:f8:d1:cb:5d:d2:a5:f0:ea:ea:
5d:1e:5e:70:38:7b:7b:56:a4:c3:cf:2e:09:c8:0e:
0e:94:2a:1b:f9:5d:c4:d3:95:71:8e:d3:70:d8:da:
e6:92:bd:30:ae:ff:74:c8:0e:3d:2a:7d:cc:53:76:
8c:ca:df:71:77:4f:99:5c:65:5f:08:bd:cf:c8:c8:
f4:cb:d7:69:6d:b7:77:dd:81:46:df:89:4c:08:ed:
cc:fd:88:b2:82:76:a1:a9:46:ab:d7:6f:56:23:69:
7f:08:14:7e:e3:ba:b5:0c:6e:ca:19:8a:be:1c:f5:
02:fd:4e:52:84:e5:b3:7b:4f:85:0a:67:99:53:3b:
73:c6:b7:59:58:93:af:4c:34:0b:ff:40:52:8a:b6:
23:d6:7e:7f:36:62:99:e0:fb:d8:26:c4:37:d7:d7:
52:08:ca:17:8f:58:3b:ad:00:e6:40:88:d8:55:37:
d9:49:fc:50:92:e8:8d:74:84:6e:9e:5a:b2:58:db:
8e:38:cc:0b:10:a0:5a:98:8b:0c:c1:9d:d8:5c:59:
92:8e:c5:10:11:f3:de:16:62:db:ce:d0:03:f7:9c:
c6:8d:a0:2f:2c:f5:00:53:7a:b0:86:93:5c:0b:7f:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0F:7F:82:BC:AF:77:8D:57:76:D7:6B:FB:A5:8F:67:55:2A:EF:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/268F1B7805F211EFB6A65761017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:9f:e7:c3:f2:b9:6c:c3:ad:b4:90:80:48:a2:c6:fd:7e:37:
26:af:5a:1a:14:15:4e:16:15:d7:a9:f0:b3:67:95:f7:c7:c7:
6d:7a:9f:26:8a:e0:e4:00:e7:34:7e:11:40:16:54:65:09:c2:
85:b9:db:30:d0:6b:0d:0e:60:ee:41:60:c4:07:b7:8c:05:47:
cf:86:64:82:cd:4d:03:53:5d:13:da:b3:ce:e9:57:bd:d1:16:
aa:38:6c:fe:8f:87:2f:8e:07:79:85:9b:87:f2:0d:89:3c:6d:
3f:a0:6d:c8:21:5a:5f:b8:fe:f9:b8:7c:48:5e:f8:39:72:64:
fd:6c:0b:b6:c2:0d:1a:94:36:0e:5f:2f:3e:98:2e:06:e5:4e:
f2:10:7f:27:dc:33:3a:8c:68:6b:79:a4:6d:28:1c:8c:a4:21:
15:d3:50:07:be:37:4f:a5:bd:4b:23:2e:52:54:72:d6:4b:5e:
62:6c:93:eb:8d:97:d8:a7:fa:9a:88:f9:db:4d:82:5d:76:4c:
38:e7:e3:66:23:7c:0f:7a:db:3e:98:cd:4f:dd:6b:6b:38:e6:
f8:3f:0c:2c:37:6f:4e:61:9b:1b:ed:fd:e6:6b:c5:03:2d:3d:
16:3c:49:06:f6:55:2a:be:a5:07:11:b9:ef:45:df:a7:9c:02:
57:ce:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:00:38 2024 by rpki-client on console-ams.rpki-client.org