Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F81D24CCC211EEABD8B28B775412E6.roa
File: 28F81D24CCC211EEABD8B28B775412E6.roa (raw, json)
Hash identifier: JaUiv9/+xrgAnMj25/1/1KJX0eCKgsP4oFQ+R6UUnqg=
Subject key identifier: 1A:D4:5E:17:69:49:60:F9:70:09:6B:92:BC:EE:A5:8F:CB:3B:BA:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F81D24CCC211EEABD8B28B775412E6.roa
Signing time: Fri 16 Feb 2024 11:54:38 +0000
ROA not before: Fri 16 Feb 2024 11:54:34 +0000
ROA not after: Fri 26 Apr 2024 11:54:34 +0000
asID: 9009
IP address blocks: 154.216.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35605 (0x8b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:54:34 2024 GMT
Not After : Apr 26 11:54:34 2024 GMT
Subject: CN=65cf4cfe-4d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:d5:06:e4:6c:77:6a:c5:38:ce:16:2b:cf:
7c:86:f4:b7:f1:66:78:3b:67:5e:c1:8f:85:3c:ca:
f6:24:77:03:ba:45:f4:77:7f:7e:b3:d1:f1:63:d1:
a6:f2:3a:5d:ba:db:5b:a1:a5:c5:fc:86:80:9c:31:
89:20:be:93:30:a3:ea:ee:de:f3:dc:e5:47:da:48:
bc:73:7a:ed:24:47:42:8c:83:d5:d1:1a:92:e4:89:
5c:91:11:28:bb:4e:d8:5b:bd:40:51:81:2e:c2:73:
93:f5:eb:75:b3:51:2e:11:89:df:13:6e:ee:44:92:
1f:69:aa:93:65:23:73:10:b5:f8:46:d1:71:a3:ee:
ce:52:31:0e:63:e8:07:07:9b:e4:36:d5:46:44:1b:
59:ba:33:c3:a9:df:5b:64:e0:72:68:42:0c:a7:96:
77:a1:67:f0:fe:c6:3e:35:da:f8:91:96:03:0a:cb:
bd:79:bd:b8:f4:3e:82:0a:cf:fb:d1:88:c3:47:54:
03:2d:25:17:cd:36:4f:8e:17:71:c4:3b:50:96:81:
be:2f:3b:7a:90:e1:db:7c:54:4d:d7:97:b4:29:0a:
1c:ff:aa:20:e7:14:52:8c:2d:a3:d3:ed:7e:bb:fa:
da:3d:22:8d:ee:ff:ae:00:41:39:b7:8a:31:6e:73:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:5E:17:69:49:60:F9:70:09:6B:92:BC:EE:A5:8F:CB:3B:BA:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28F81D24CCC211EEABD8B28B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.250.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b1:0e:8b:34:39:e7:ca:46:86:ca:45:01:d1:2b:6d:d8:a1:
42:02:ef:af:b1:b3:03:dd:18:7b:56:e4:94:30:9a:93:42:99:
30:16:a0:60:e3:10:2f:d7:ec:1c:60:d7:cd:a2:17:74:4f:c5:
4b:2b:76:10:39:4f:67:e5:51:97:ee:84:ec:6d:3e:4b:7d:00:
8b:6c:d2:25:6a:10:b8:09:21:84:e9:b0:6f:04:27:a0:53:33:
2f:12:5d:19:6e:c5:c3:94:0b:c0:f4:f9:d1:85:54:18:ba:67:
33:67:eb:17:f9:0b:c2:e7:af:c6:55:2b:d7:18:fd:3f:21:0a:
f1:4c:f2:72:80:7e:b5:b8:64:ed:b6:43:8f:d2:8c:43:f2:8a:
96:6c:62:24:34:ea:f4:22:be:6d:15:b2:ca:1d:15:0a:70:48:
4c:21:a4:69:19:15:f7:73:b9:f6:33:29:79:cf:c0:f1:1e:90:
7b:ed:d5:89:eb:f8:64:d4:28:73:30:28:48:ef:18:cb:14:e5:
d0:57:2f:ea:58:13:95:b4:ec:81:e9:a3:4f:0c:64:9b:6f:ec:
4e:61:ba:30:40:f0:73:5a:3b:37:87:06:29:a6:0c:57:8f:06:
e8:2b:d9:55:53:39:e1:ee:97:53:7a:ed:80:93:90:93:19:b0:
e4:4d:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:31 2024 by rpki-client on console-ams.rpki-client.org