Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7207606D211EF87171D02017001B1.roa
File: 57F7207606D211EF87171D02017001B1.roa (raw, json)
Hash identifier: cKXsfWE2pW0qqOc/QA39K/lPtkzosRUWn3E1gqjp3/I=
Subject key identifier: A4:56:BF:C8:C1:76:29:B7:01:48:1A:C2:8F:31:F3:50:69:AB:45:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7207606D211EF87171D02017001B1.roa
Signing time: Tue 30 Apr 2024 09:16:36 +0000
ROA not before: Tue 30 Apr 2024 09:16:33 +0000
ROA not after: Mon 20 May 2024 09:16:33 +0000
asID: 39600
IP address blocks: 154.86.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 09:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45751 (0xb2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:16:33 2024 GMT
Not After : May 20 09:16:33 2024 GMT
Subject: CN=6630b6f4-c123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:a9:46:34:b7:c7:38:30:fd:d2:f4:d0:4e:
a4:9f:e5:85:09:10:f6:d6:8f:52:7f:0d:f5:ca:c0:
0f:ed:85:7b:1c:e2:b1:6f:18:a5:9e:dc:39:b0:b4:
11:b2:d4:a1:6a:b4:6f:36:61:44:8a:98:c2:9b:fc:
83:7b:31:71:65:76:3d:d9:d3:02:4c:ee:34:9c:32:
de:a6:b0:6e:b2:f3:f7:5d:a6:24:f2:09:50:c0:61:
62:38:68:14:a2:1c:3d:aa:02:6d:f8:66:dd:28:4e:
af:3b:08:df:f7:ce:d7:32:53:e7:47:92:4c:20:c0:
c8:9f:f3:a2:a4:dc:d7:99:26:57:1a:39:44:58:6d:
51:a2:2a:8b:99:0d:36:df:5f:43:29:58:5f:a0:a8:
11:3c:54:9b:c8:de:3f:2a:a5:27:3c:50:2a:b7:d4:
2b:dd:70:af:45:2d:e1:84:df:0c:14:3a:f6:df:d5:
fd:b8:f7:fb:c8:45:a2:47:45:35:14:50:b9:11:37:
a7:28:fb:6d:9d:57:8b:ba:47:02:11:95:f8:29:59:
a1:f7:58:f4:ee:6f:7d:71:43:a0:b7:00:a1:a4:c2:
98:64:52:27:60:a3:ba:ae:fb:fd:c6:cf:bf:ed:cb:
3c:c9:15:94:ec:18:55:ed:07:d2:a5:7a:25:05:e8:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:BF:C8:C1:76:29:B7:01:48:1A:C2:8F:31:F3:50:69:AB:45:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7207606D211EF87171D02017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.120.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:a3:c9:f8:40:fa:9c:db:de:8e:06:c7:ea:95:f9:3c:9a:f7:
5c:cf:13:4e:5d:59:1f:a7:6a:be:2f:d2:64:e4:65:5d:38:43:
45:34:72:5c:28:7f:64:77:34:1b:d6:bd:68:77:21:57:5f:5f:
db:31:40:12:2e:a0:df:6a:4a:bb:eb:88:f5:c8:ab:ef:a8:82:
98:19:cc:49:da:3f:14:ed:ba:ae:b2:c5:c7:e4:47:4a:67:c9:
67:b7:c8:df:f8:64:c3:79:b6:a7:aa:f9:64:5b:c9:4b:59:2e:
02:38:72:84:8b:12:42:63:2e:2b:cc:3b:50:7a:c8:2a:9a:3f:
06:6b:1f:3a:17:9b:e3:f2:3d:a3:17:67:44:91:4e:82:1a:bd:
e7:e2:68:e8:f0:32:8e:af:5b:d6:20:ee:d5:e7:9c:7b:79:67:
8a:49:f6:ac:ee:6f:e5:63:69:25:c2:3d:68:e5:04:e8:9f:68:
f4:40:57:a4:31:c6:34:aa:4e:56:79:90:7c:22:6b:34:91:a0:
2b:55:c2:e4:2c:7e:25:43:41:b7:8f:1d:c2:6e:3a:6a:45:a0:
37:1e:83:18:4e:b1:d5:88:b5:23:da:23:9b:f7:d9:c3:1d:8e:
a3:37:59:b8:c5:d5:b0:59:aa:75:61:ad:e1:dd:e2:2c:75:b6:
78:70:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org