Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80608DFE1E5111EF82AAC5227DDC24C2.roa
File: 80608DFE1E5111EF82AAC5227DDC24C2.roa (raw, json)
Hash identifier: qZQllASkVieDf7FO+Xc/VHK8QhIhWb84VoX/dvPeoOU=
Subject key identifier: 2C:63:84:C3:0A:DB:03:C6:CA:6C:28:2D:33:9B:61:E5:8B:F7:10:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BBEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80608DFE1E5111EF82AAC5227DDC24C2.roa
Signing time: Thu 30 May 2024 06:54:47 +0000
ROA not before: Thu 30 May 2024 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 06:54:43 +0000
asID: 49505
IP address blocks: 154.211.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48108 (0xbbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 06:54:43 2024 GMT
Not After : Jul 1 06:54:43 2024 GMT
Subject: CN=665822b7-0ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:01:6d:22:02:64:8e:60:07:df:98:e3:44:
81:9a:8a:dd:50:3d:87:82:7d:d4:02:ec:aa:fb:20:
55:8b:53:4b:e6:2c:af:7f:c7:62:33:e4:cf:80:d8:
d1:32:39:31:b6:f7:6c:a9:08:fc:1a:ac:58:c5:2b:
95:37:9a:48:97:74:97:9d:1a:d3:02:78:6a:da:48:
d7:be:7b:02:6b:65:f4:e0:43:04:1f:0a:3c:2a:ee:
6e:f0:66:3e:c8:a6:fc:6f:c8:c8:19:10:4d:2a:0d:
08:85:02:cd:c0:d3:22:7f:58:e6:00:c5:0a:b1:2c:
66:29:f4:76:c7:6f:09:57:8c:39:c7:2c:1a:c2:1d:
ee:7f:41:a3:95:04:e6:e8:06:74:54:d3:ee:5b:7b:
c4:0c:c0:88:de:0c:c8:c8:65:f4:5b:e5:c9:7e:39:
51:c3:73:72:f6:cd:ad:59:6b:f3:a6:f1:5f:34:21:
bc:6f:6a:04:b7:af:18:f2:cc:ed:70:41:23:51:56:
ed:4e:b9:b2:4a:66:df:bc:ec:fb:47:02:9e:9d:4b:
44:02:7e:f6:36:55:c1:ad:68:0d:ac:ba:b0:49:14:
33:71:0b:ac:68:5e:ba:e5:bb:46:e6:0d:9c:0c:e9:
e3:c3:dd:0f:cb:e5:82:d8:bd:12:b8:e7:21:c3:00:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:63:84:C3:0A:DB:03:C6:CA:6C:28:2D:33:9B:61:E5:8B:F7:10:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80608DFE1E5111EF82AAC5227DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:0f:6e:0b:da:28:9f:2f:27:08:7c:5f:78:b1:7f:6e:82:c8:
e5:62:cf:86:22:55:aa:08:4d:a4:82:09:e9:38:fd:6b:0f:64:
1d:3e:b2:a0:83:8e:b9:11:61:9f:ac:56:be:7b:ec:6a:f3:c9:
8c:16:fa:ee:6d:63:3d:42:7b:b8:82:9f:ca:c5:98:7e:1b:8a:
91:7b:90:7b:8f:f0:bf:12:b9:06:7a:7a:1d:dc:cd:1a:3d:4d:
c4:31:a6:40:93:fa:b0:a7:8b:e2:0d:60:f0:5e:fd:31:28:6f:
51:2d:3d:79:ba:34:ce:2a:84:45:d7:e0:46:f4:e4:71:0d:51:
39:b2:ed:1c:d3:3b:ba:2b:ab:83:5f:7a:a7:e5:7d:8e:29:b8:
b3:e3:96:8c:7b:ab:c8:68:7f:6b:b8:58:75:1a:f7:df:47:88:
70:f3:0d:8a:b5:46:21:e8:d3:35:cb:5e:8c:70:b3:c4:d7:1c:
b6:85:0f:c6:b2:11:6f:ae:bb:66:f3:3a:7a:50:db:12:1b:af:
5c:55:03:15:76:43:16:3c:18:e5:c9:9b:7c:5e:35:e4:2f:76:
80:7e:32:b3:cf:92:39:b4:32:9c:c0:72:86:b2:40:19:2b:98:
56:18:5a:de:8e:9f:05:dd:53:13:1a:2b:03:3a:37:03:2b:5e:
3c:05:5c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:43:41 2024 by rpki-client on console-ams.rpki-client.org