Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537C8C5C060F11EF9DAF6C4D017001B1.roa
File: 537C8C5C060F11EF9DAF6C4D017001B1.roa (raw, json)
Hash identifier: a9A+UJwpJOShmZelV9IpONV4rXKO0/QWt9LG3anqDHw=
Subject key identifier: 73:9B:28:BE:E7:D2:2B:24:3B:59:D5:29:73:8B:EC:03:71:41:D9:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B21A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537C8C5C060F11EF9DAF6C4D017001B1.roa
Signing time: Mon 29 Apr 2024 10:00:37 +0000
ROA not before: Mon 29 Apr 2024 10:00:33 +0000
ROA not after: Fri 07 Jun 2024 10:00:33 +0000
asID: 138915
IP address blocks: 154.223.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45594 (0xb21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:00:33 2024 GMT
Not After : Jun 7 10:00:33 2024 GMT
Subject: CN=662f6fc5-b473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:43:22:bf:a5:d5:2e:04:60:50:8c:9f:67:
1d:15:43:a7:31:a1:ee:dd:92:17:60:fb:20:97:6d:
8d:5e:0c:b0:8b:dc:fb:0e:7e:76:9e:f1:bd:c7:6e:
bd:b1:13:09:c7:d0:f7:ab:00:05:5a:2e:e4:2b:46:
0c:53:1d:98:07:95:12:9b:6d:b4:96:9c:41:08:a0:
1c:33:86:af:c6:ce:63:e5:60:64:d0:32:0d:0a:bf:
29:ca:23:42:7e:c6:63:18:22:01:34:bb:f6:ca:72:
42:94:1f:17:27:b1:f5:ff:f8:ea:0e:bb:c2:c6:2e:
50:96:42:ee:d4:3c:13:ab:5f:18:93:2d:7a:af:e3:
69:71:f4:a8:32:42:df:f8:f1:25:9d:b4:4a:80:c4:
5c:ea:ef:8d:e5:87:0d:1f:90:93:3b:f9:49:bc:b7:
3f:7b:7c:7a:62:9e:6b:43:63:95:2a:6d:7f:4e:e7:
aa:10:0f:06:6b:97:02:e3:fd:39:ce:7d:a6:25:2e:
5e:89:94:40:70:cf:37:38:c9:ee:a5:64:ff:2a:08:
80:10:67:d2:b1:fc:a1:31:38:42:d3:2e:dd:11:58:
ac:0b:d9:41:f2:b7:2c:68:bf:d6:90:66:22:ea:ab:
04:3b:c6:b9:47:cf:e9:69:7c:55:a3:6e:f4:69:7e:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:28:BE:E7:D2:2B:24:3B:59:D5:29:73:8B:EC:03:71:41:D9:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/537C8C5C060F11EF9DAF6C4D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:04:b9:f3:48:42:49:58:bd:6b:08:be:29:a3:bf:a4:b9:38:
81:f7:87:d8:39:26:e5:a3:b4:4d:79:ca:6e:a4:d3:40:5e:e0:
c6:73:11:f9:7b:f5:7d:e3:61:32:b9:f3:10:05:3f:14:8b:f6:
a6:a7:59:d6:f3:14:c7:26:77:40:40:69:24:fe:39:ed:43:43:
78:e8:f0:fb:54:e0:bb:b8:5d:53:96:51:49:a4:a9:c5:a0:36:
73:36:be:80:d8:76:eb:24:62:70:44:70:75:d6:3d:b4:23:d5:
60:74:ad:1f:8b:35:a4:9d:44:8a:e3:33:bc:3c:e1:4c:16:ca:
f4:17:bb:1c:91:09:8c:71:0a:28:37:1c:52:0d:52:45:55:f7:
e9:34:a9:78:d3:21:55:c3:8a:6c:48:f9:1c:f8:d4:ed:4c:b3:
77:6e:bf:ba:1b:c3:32:27:87:e0:ab:c8:9d:71:c5:d6:0f:ad:
c6:c3:07:30:04:31:61:9a:c0:6a:96:60:52:9b:b4:69:c4:81:
99:35:c8:b0:6b:4d:f9:33:74:5b:42:60:a8:bd:6b:66:c6:f7:
d5:83:aa:b4:03:2b:53:da:7b:d5:23:e6:24:74:b2:99:8f:4d:
bd:40:80:57:74:41:7e:c5:fd:fd:4f:85:92:8a:4c:b0:17:c5:
a5:aa:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org