Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31724156062D11EFB22C6C3F017001B1.roa
File: 31724156062D11EFB22C6C3F017001B1.roa (raw, json)
Hash identifier: fHYp0qpNWQdrE0WzQeJF07/RJ1QqgjNzs1HL1pvUSio=
Subject key identifier: EE:E1:18:3B:01:31:9D:56:D7:2C:84:5B:59:79:F8:EB:DB:AC:BD:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B27A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31724156062D11EFB22C6C3F017001B1.roa
Signing time: Mon 29 Apr 2024 13:34:25 +0000
ROA not before: Mon 29 Apr 2024 13:34:21 +0000
ROA not after: Sun 15 Sep 2024 13:34:21 +0000
asID: 142286
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45690 (0xb27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:34:21 2024 GMT
Not After : Sep 15 13:34:21 2024 GMT
Subject: CN=662fa1e0-50b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:5d:24:c6:95:8c:a4:dd:bb:32:f2:03:a6:
c4:2c:0f:88:60:fa:bb:9c:12:f2:a5:79:4f:a6:d6:
70:4f:25:22:56:b6:b9:b4:58:58:c9:aa:91:78:97:
b5:46:8c:d7:eb:9f:d9:16:99:92:2f:99:49:59:fc:
97:d5:1c:cf:bc:7c:db:90:83:b8:28:d9:02:ee:1c:
56:0c:f0:70:c2:7d:9c:6d:c2:d9:ad:08:64:44:6e:
cb:50:ae:48:aa:ab:db:08:12:14:3e:20:cf:0f:04:
d3:37:bb:74:d7:ab:ed:dc:46:ea:5b:1c:b8:d3:8d:
d0:a7:f8:e2:d3:32:ee:d9:a6:f8:4b:98:d5:94:05:
16:3c:ef:a9:e3:ca:2b:7d:cf:c1:fc:24:e4:c7:cb:
05:7b:43:20:79:4a:c0:fb:ef:0c:74:9d:ca:e4:d2:
63:17:b1:34:ac:51:cf:68:07:20:43:45:28:7d:58:
44:e1:9d:e8:c7:1e:ad:2a:d8:cf:ea:12:b8:36:b1:
1f:bf:e2:f3:48:7d:4f:36:6e:9c:df:02:38:5e:83:
35:cc:3d:b8:b7:6f:56:82:2c:0b:b0:4a:49:9d:9b:
b1:0a:b9:bf:3d:28:a0:84:d8:4b:9e:22:86:72:2d:
e8:78:d1:e0:f3:2f:c4:09:fb:29:19:56:fd:4f:67:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:18:3B:01:31:9D:56:D7:2C:84:5B:59:79:F8:EB:DB:AC:BD:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31724156062D11EFB22C6C3F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:8c:04:a9:21:51:c0:44:b3:bd:86:9c:7f:63:51:25:64:ce:
c6:9f:c3:0f:13:92:7a:59:9c:34:d9:74:02:e8:b8:99:82:ff:
d5:55:63:a1:dd:e4:78:43:87:57:ea:37:be:2e:c7:35:9e:62:
cd:64:aa:0f:fe:59:15:2d:b4:48:79:4f:df:67:81:ce:51:3f:
6f:c4:2d:5b:8d:0f:d4:27:c8:57:a3:77:ea:8b:f3:df:54:16:
a1:4b:21:29:ae:b8:8b:d6:88:4f:e8:1e:cc:76:b6:07:43:27:
a5:70:27:bd:8c:fb:31:e9:b3:b0:3a:2c:33:9a:cb:18:e2:63:
8a:f4:19:d4:1a:26:73:02:32:0e:ac:a4:c9:59:41:b1:c1:fa:
c8:b4:51:d7:66:8c:8f:43:33:ea:bc:ba:1a:9c:21:1f:90:05:
b3:6f:6e:40:89:07:2c:b6:36:1f:87:f2:82:e9:ae:d5:de:a7:
1a:99:d4:9f:cd:31:78:b6:c8:cd:41:a6:1f:9b:aa:9c:51:54:
05:b2:94:d7:13:3c:6b:0d:19:fe:fb:41:21:31:3b:6b:cd:07:
45:37:bc:3b:6e:c6:32:b0:b6:08:c3:82:57:96:c8:f8:db:a3:
a4:cf:b2:f6:12:7d:17:ff:fa:a4:1a:7d:46:ed:4f:14:f1:1a:
be:5e:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:19 2024 by rpki-client on console-ams.rpki-client.org