Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4DCEDE1FE611EF8D4FFA477DDC24C2.roa
File: 8B4DCEDE1FE611EF8D4FFA477DDC24C2.roa (raw, json)
Hash identifier: XErNm0ALIdFedZGVCBwbjckNekV1xPVaQhJrd66ywUo=
Subject key identifier: 3F:E2:06:48:C0:B0:57:F7:AC:51:AA:D7:A3:BD:D4:43:CD:FF:2E:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BCB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4DCEDE1FE611EF8D4FFA477DDC24C2.roa
Signing time: Sat 01 Jun 2024 07:14:11 +0000
ROA not before: Sat 01 Jun 2024 07:14:08 +0000
ROA not after: Sat 06 Jul 2024 07:14:08 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Jun 2024 00:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48313 (0xbcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 07:14:08 2024 GMT
Not After : Jul 6 07:14:08 2024 GMT
Subject: CN=665aca43-a21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:e4:dc:1b:96:2c:72:32:ee:fb:7b:85:8a:
a0:8d:87:99:24:b0:6d:d8:7a:22:03:68:03:40:20:
12:ba:2f:54:99:12:b1:3a:05:5b:10:51:23:bb:04:
59:2d:54:37:88:28:8c:1e:06:a7:f4:46:a6:ad:42:
70:74:0c:67:2e:29:b1:45:f0:92:57:dc:59:0c:81:
36:f8:ae:fb:f4:c3:c9:dc:e4:69:2f:b8:48:90:8e:
78:2d:20:b0:c1:a6:63:dd:78:1b:3c:b0:5c:0b:98:
b0:59:62:d2:4b:41:2c:46:68:10:db:b5:74:03:61:
3f:6f:88:04:44:f3:12:55:83:8b:47:3e:59:d4:4e:
a2:06:26:a0:af:c7:c9:51:01:2e:0f:2c:3f:ab:d9:
0f:6d:77:1b:08:fd:e1:6a:1b:b7:fa:88:42:ce:57:
a2:27:bf:97:40:a1:c7:46:29:58:9a:3c:2f:c8:27:
b6:4a:a8:59:a3:26:e4:d9:11:ae:f2:45:82:b3:5c:
fe:18:39:55:c8:f4:a0:eb:60:e0:d8:59:c6:18:43:
ca:0a:82:3d:39:52:d2:12:3d:af:1d:8e:10:91:1d:
35:7c:6b:91:2f:b5:d6:50:3d:2e:4c:77:a6:6b:39:
58:34:bc:9b:6c:10:92:b0:8c:9a:b8:03:47:ca:1a:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:06:48:C0:B0:57:F7:AC:51:AA:D7:A3:BD:D4:43:CD:FF:2E:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4DCEDE1FE611EF8D4FFA477DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fc:56:cb:29:a8:d7:73:85:f0:76:8e:3f:f1:ea:83:f9:c3:
f2:54:20:86:4b:52:8a:99:91:0e:90:aa:63:34:b4:b3:1d:78:
80:90:bf:45:82:0e:21:a9:cb:a7:cd:d9:26:98:ed:0e:33:73:
2b:6a:d8:04:7f:5e:61:49:eb:b3:b6:9f:1f:e1:b3:5f:69:e4:
57:ed:9e:e5:b5:24:62:ce:de:f1:0f:ec:4a:12:78:93:4f:19:
3f:0c:d0:82:5f:47:99:87:75:a6:ba:9d:29:fc:db:4a:2e:8b:
2f:b5:98:eb:8e:e6:5d:a6:08:84:76:ed:74:f3:a9:43:62:54:
71:6e:5f:10:de:16:1e:d6:f6:f3:71:d0:7b:aa:d1:10:3f:07:
10:92:67:84:89:ff:54:ce:cf:67:9e:0d:9a:f8:10:b4:e9:62:
45:4f:97:40:c0:5a:80:2c:92:68:43:47:0c:98:6d:52:e8:e5:
b5:be:d7:e4:dd:b0:2d:38:0e:f4:c3:23:a9:d2:7d:09:32:ff:
84:79:f0:59:a2:88:ee:c2:9e:2d:86:08:9d:c2:b9:2c:ea:02:
29:de:d8:31:3a:c6:6d:ca:cd:32:38:96:b0:3d:a3:54:14:37:
33:69:c7:db:11:31:15:af:37:33:f9:4f:d3:15:2c:53:44:b8:
4b:72:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:50:19 2024 by rpki-client on console-fra.rpki-client.org