Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B67D010061011EF8D48A057017001B1.roa
File: 5B67D010061011EF8D48A057017001B1.roa (raw, json)
Hash identifier: 45XiNSa/NbE2ahsDSpx9JaO9TZocGP1CxWwChQ7Iotc=
Subject key identifier: 30:21:D7:04:54:0C:7C:51:B3:85:7F:8C:A7:F3:36:3A:B0:00:EE:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B228
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B67D010061011EF8D48A057017001B1.roa
Signing time: Mon 29 Apr 2024 10:08:00 +0000
ROA not before: Mon 29 Apr 2024 10:07:56 +0000
ROA not after: Fri 07 Jun 2024 10:07:56 +0000
asID: 63139
IP address blocks: 154.223.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45608 (0xb228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:07:56 2024 GMT
Not After : Jun 7 10:07:56 2024 GMT
Subject: CN=662f717f-0d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:0b:e0:ed:cd:fb:eb:e7:e2:17:7c:1c:a8:
a8:3d:54:89:60:7e:4f:89:76:cf:75:ec:6f:03:e8:
c0:29:6d:52:d0:6f:9e:f3:4d:b6:11:f3:64:07:8d:
8f:a2:ae:ba:72:1a:95:97:c9:79:34:fd:57:e2:a9:
48:a6:ca:68:16:67:52:f1:65:53:5c:49:ba:ea:47:
0c:6d:d9:ac:b8:8d:fc:b2:b3:d8:83:6c:60:71:9a:
97:57:e3:1e:cb:3b:83:bc:fb:22:96:3d:4d:a1:82:
09:15:5b:41:f5:9d:2e:d4:fa:d1:81:8b:6e:ce:03:
97:da:72:7a:32:c0:09:f6:97:16:cf:89:6c:d4:7b:
6f:5b:ff:f5:6f:6d:e9:50:5b:12:bf:06:1e:e0:34:
3a:09:39:f9:0b:56:f3:2f:68:30:99:34:86:f2:30:
79:ae:ea:16:78:c9:fb:76:32:6b:ba:60:8c:ee:59:
73:1e:b7:44:fc:3d:c2:a8:eb:4e:c0:f4:d7:c1:19:
38:19:2f:58:e2:1a:6a:10:0d:51:98:dc:33:ef:e5:
10:ea:f9:c2:1d:2e:4f:11:b9:6c:3a:f0:32:14:10:
32:5d:10:17:fd:69:0f:c2:97:5c:f7:36:53:50:f5:
f6:6e:6b:48:d4:9c:7e:85:a4:cc:f6:4f:e9:88:aa:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:21:D7:04:54:0C:7C:51:B3:85:7F:8C:A7:F3:36:3A:B0:00:EE:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B67D010061011EF8D48A057017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0e:76:87:5b:1a:36:67:7a:76:02:10:e6:0a:5b:1a:dc:96:
1a:94:ee:fd:3d:c7:de:de:74:e1:dd:4c:0c:39:18:37:63:a9:
f1:26:47:a0:a6:87:f4:89:7c:37:fb:8e:c3:a4:32:3d:9e:81:
fe:b8:d8:d9:12:4c:64:35:38:df:8a:a2:5d:a9:f2:33:bf:f7:
0f:a2:ad:ad:b2:83:98:fb:68:aa:65:ec:a8:1e:da:5d:da:18:
34:a2:4d:57:04:a2:8d:04:02:6e:64:58:11:c3:33:bb:4e:2a:
29:d5:78:47:c8:2c:9f:9a:18:61:43:8f:cf:0b:63:0e:9e:f9:
02:23:65:d1:6b:96:b9:0f:29:b6:f6:6a:2d:a2:cd:1a:8d:1a:
f4:6d:55:ca:63:85:57:21:f2:e5:58:f6:df:d1:74:4a:41:9b:
a9:1c:c9:a1:84:06:37:1d:85:99:ed:cf:41:0a:9d:21:e3:18:
97:5a:5c:40:37:b4:10:f6:39:f1:bc:d3:46:30:88:29:f4:78:
a8:0e:e7:1a:f1:15:4c:d2:b6:76:03:6e:8a:fc:bd:a1:0d:bc:
81:ee:a4:30:e5:22:f0:c0:68:77:3d:5e:b7:03:f1:21:2e:4e:
98:06:ea:d0:8b:d7:41:d2:cd:84:de:2e:bc:70:27:6f:fc:23:
30:cd:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org