Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F7CAFA0CCBC11EEB59EAC82775412E6.roa
File: 5F7CAFA0CCBC11EEB59EAC82775412E6.roa (raw, json)
Hash identifier: hnWNUdSIHCNjHgrii40dxdye7JXlMbtBBGKMhcqqq0Y=
Subject key identifier: B4:1F:CA:DC:DD:A8:74:18:3F:58:C7:D9:99:1B:AF:00:E9:B0:51:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F7CAFA0CCBC11EEB59EAC82775412E6.roa
Signing time: Fri 16 Feb 2024 11:13:12 +0000
ROA not before: Fri 16 Feb 2024 11:13:09 +0000
ROA not after: Fri 26 Apr 2024 11:13:09 +0000
asID: 9009
IP address blocks: 154.216.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35559 (0x8ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:13:09 2024 GMT
Not After : Apr 26 11:13:09 2024 GMT
Subject: CN=65cf4348-4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:9c:e4:b8:37:05:d5:82:37:b8:f5:ea:50:
66:37:56:d6:0d:e4:85:26:64:34:c2:b1:57:c5:ed:
35:b8:1f:03:69:6f:5b:a5:ea:16:86:75:2c:67:38:
ff:57:c3:97:df:d9:76:54:e7:4c:0b:fa:64:d1:10:
24:b8:cd:55:b7:4d:d8:62:58:63:48:53:e8:98:91:
31:26:6d:c0:d4:2e:5d:06:52:a1:2b:fe:32:f9:49:
b8:bc:d1:d4:60:f0:a9:03:5b:24:af:a0:2e:6b:65:
45:fd:52:63:c2:3a:f1:09:2e:5f:85:91:64:28:2b:
e1:dd:dc:ff:41:0d:c0:21:8e:28:b1:d6:6f:aa:50:
d5:06:52:52:51:8d:b6:2f:89:a7:3b:3a:58:01:17:
2e:7b:f1:6b:f2:d0:24:7d:d6:56:08:c1:c9:90:0e:
8d:ea:79:09:b4:50:1a:fe:87:f4:50:5d:19:76:58:
3b:e8:3e:00:dc:1e:e2:a5:32:53:fd:8c:33:8a:d3:
47:93:7c:a0:e0:a6:1f:73:e3:17:ee:9d:5f:fb:a2:
52:77:ad:66:9e:07:77:7c:63:c7:7e:dd:8c:cc:97:
e6:29:cd:1c:6d:04:4f:e0:90:07:9d:b0:18:1c:80:
bc:25:af:ce:e4:16:c8:df:f9:2b:f9:00:77:31:24:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:CA:DC:DD:A8:74:18:3F:58:C7:D9:99:1B:AF:00:E9:B0:51:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F7CAFA0CCBC11EEB59EAC82775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.227.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7c:9e:d9:5d:a5:1d:3f:ca:02:ee:51:c9:42:a7:9e:0a:56:
15:3a:40:3c:e7:80:fc:62:ac:32:a9:1f:90:00:f6:e2:b1:ae:
ef:10:46:32:f6:51:a4:61:ca:7f:e6:35:4c:16:18:ba:ec:8c:
32:37:f1:ed:5a:ad:a9:e0:d8:a2:88:7f:99:6d:da:46:e5:c7:
0f:90:8b:73:31:9b:3e:41:b7:cf:3a:cf:e8:18:90:e5:75:91:
4f:95:d6:e4:4b:53:da:63:81:b2:ad:fa:a4:be:7b:aa:f1:a2:
2c:36:a3:4a:5e:a9:63:ef:20:0f:53:c3:f2:48:27:e0:67:2d:
f2:4f:a7:a0:c0:72:9a:81:7c:4d:3e:d3:0b:e0:9a:c0:0d:98:
a8:85:3c:2a:e6:6a:80:a2:19:57:06:1e:a0:72:ee:34:71:fb:
41:f0:99:6a:63:6d:44:a8:e6:d5:92:b7:8e:e4:0e:ad:b7:38:
e0:d5:ea:b6:e5:6d:67:0d:70:0a:f5:ce:80:20:6c:07:79:bd:
0c:f6:10:05:79:38:e1:9a:4a:fd:16:de:44:6b:a0:04:0c:89:
d4:7c:f0:78:4a:1b:6f:63:cc:e5:62:de:21:cd:ad:f3:a1:49:
43:8e:10:e6:77:4d:be:ff:d3:af:83:4f:70:7f:2f:c9:52:de:
ab:e2:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:37 2024 by rpki-client on console-ams.rpki-client.org