Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881C9432062A11EF802A8C29017001B1.roa
File: 881C9432062A11EF802A8C29017001B1.roa (raw, json)
Hash identifier: 1UJqP380LU5k/fdNicp/3y/2g+nymfwqroopJfZ080w=
Subject key identifier: 61:30:70:2B:43:5A:45:6B:1D:1F:EB:A3:C9:66:40:33:33:50:85:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B25A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881C9432062A11EF802A8C29017001B1.roa
Signing time: Mon 29 Apr 2024 13:15:22 +0000
ROA not before: Mon 29 Apr 2024 13:15:18 +0000
ROA not after: Fri 07 Jun 2024 13:15:18 +0000
asID: 138915
IP address blocks: 154.223.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45658 (0xb25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:15:18 2024 GMT
Not After : Jun 7 13:15:18 2024 GMT
Subject: CN=662f9d69-6ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:67:b8:f5:50:a5:52:67:d1:37:8b:76:28:
1b:22:f3:58:62:82:85:ca:09:9c:88:71:82:5c:46:
84:11:58:ad:73:04:e2:a4:76:0c:97:66:db:86:78:
f9:e6:eb:91:0b:0a:14:13:69:b7:a0:0b:a4:61:83:
6b:08:38:df:69:55:db:40:69:54:a1:9f:0e:a5:6c:
28:4b:9b:39:0a:3e:7e:8b:82:26:bb:50:f5:e9:33:
1e:b0:be:c0:e0:c6:16:42:59:c9:7e:fe:f4:93:64:
5c:98:9a:a2:02:01:58:e9:08:2c:83:49:66:2a:e4:
ff:ed:bb:d3:a7:af:6b:13:b4:1c:95:a1:26:46:7c:
eb:fa:f4:02:ec:eb:ef:e4:d1:3d:6f:0f:87:b5:f6:
76:92:3c:63:83:be:b9:a5:10:97:80:d3:c1:69:26:
7a:9d:28:7d:77:9c:22:bd:74:cd:14:7f:fc:ca:ef:
47:99:6a:ac:e8:f3:e4:e5:47:7d:5a:d8:e7:46:79:
29:d1:d8:86:67:95:59:4d:31:13:ef:1a:9f:39:2a:
e5:e5:99:a7:03:0a:51:9b:55:64:3e:76:6d:7a:ba:
91:e0:62:3e:a4:b4:36:d0:a2:2f:10:f3:94:b7:1d:
87:5e:4f:34:47:75:06:3a:00:f9:bd:ca:c4:8b:bd:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:70:2B:43:5A:45:6B:1D:1F:EB:A3:C9:66:40:33:33:50:85:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/881C9432062A11EF802A8C29017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.66.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:98:64:74:a2:a6:34:ed:4d:89:69:88:7a:c3:ef:74:93:21:
67:e6:38:0d:19:ba:aa:76:d0:cd:cb:9b:0e:96:8d:98:ed:eb:
f8:14:0c:8e:23:08:86:13:16:32:47:01:fa:d6:f2:d4:a2:3e:
e6:11:ee:ef:b5:ee:66:9a:15:5b:61:74:99:ec:bf:69:7b:04:
74:c4:55:84:ab:d2:93:6e:b5:4d:12:2f:54:60:cf:a2:c7:f8:
5d:ad:e2:51:80:0e:f9:02:8e:0f:1c:d0:8d:72:43:58:91:2a:
4d:cd:79:21:f7:ea:c2:a8:f8:55:66:90:b1:74:06:da:47:a8:
3c:7e:29:37:01:ee:41:3c:8a:34:22:48:79:08:d4:6b:fb:2a:
6a:18:41:d4:01:4a:58:fa:f9:1f:f1:30:bf:f1:08:c1:34:4b:
a9:79:a6:3b:bd:1e:f7:57:78:ad:5c:1f:de:00:18:4f:42:81:
9b:30:a9:ec:37:09:65:e6:04:8c:1c:72:9d:53:83:f1:e1:e0:
d6:a9:4a:17:ea:0b:5a:5d:c4:c3:a1:09:ec:10:64:c1:65:23:
9a:90:be:e8:ab:67:fb:f2:c8:e2:fa:16:62:40:7d:0d:d9:ac:
68:7d:73:f7:44:82:95:e8:4e:dc:46:03:26:0b:7c:ba:ce:f5:
99:6d:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:26 2024 by rpki-client on console-ams.rpki-client.org