Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FFC8748CCBE11EE984F0786775412E6.roa
File: 8FFC8748CCBE11EE984F0786775412E6.roa (raw, json)
Hash identifier: 30mdMsLV292wMKTbHRFZwkiAmSuessmxjt3LjbQvlQ0=
Subject key identifier: 0E:A1:60:25:59:B2:29:1F:0F:8B:4E:81:01:83:4A:87:1C:B4:AC:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FFC8748CCBE11EE984F0786775412E6.roa
Signing time: Fri 16 Feb 2024 11:28:53 +0000
ROA not before: Fri 16 Feb 2024 11:28:49 +0000
ROA not after: Fri 26 Apr 2024 11:28:49 +0000
asID: 9009
IP address blocks: 154.216.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35571 (0x8af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:28:49 2024 GMT
Not After : Apr 26 11:28:49 2024 GMT
Subject: CN=65cf46f5-e069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:d3:43:a1:a8:35:ca:06:6d:a6:35:66:82:
d2:e3:d3:cd:33:7a:cb:29:10:19:ce:7c:07:10:f2:
00:6f:6c:7f:e4:6d:d4:79:08:89:f6:12:15:64:89:
d3:bb:96:e4:fe:02:88:63:b7:8b:01:0e:fd:95:8f:
ca:eb:9e:c1:52:ec:76:a2:34:dc:a0:30:fd:18:52:
35:56:ff:6b:1e:d4:b3:c8:a4:5e:dc:0b:c7:59:50:
eb:0d:3d:fb:0b:39:88:31:ce:26:95:0a:b8:be:a2:
69:97:12:69:00:8e:61:ed:8c:c6:51:b6:e8:dc:22:
4f:dc:fb:95:11:e5:31:5e:f5:c1:fc:d7:2a:05:6b:
45:00:a5:0a:70:f5:60:18:f3:ec:0f:6e:02:61:88:
b2:9b:ac:40:df:a1:63:2f:4b:dd:25:e4:6d:b5:51:
25:94:9e:22:74:1a:23:22:27:c2:b4:a8:9e:b9:d0:
14:af:0b:75:37:3e:2f:d9:4b:9b:8b:83:4a:80:1a:
d1:21:b4:57:b0:1d:59:cd:3e:34:a5:3a:f5:0b:52:
d2:bc:b1:e9:f1:ef:dd:55:da:fa:59:a3:a2:3b:91:
f9:26:1f:97:40:3a:4b:87:4b:57:6b:34:d8:e7:67:
32:aa:fd:77:3f:63:5d:f4:a6:fd:1e:11:05:22:59:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:60:25:59:B2:29:1F:0F:8B:4E:81:01:83:4A:87:1C:B4:AC:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FFC8748CCBE11EE984F0786775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:33:65:a0:b1:91:5d:ac:99:ad:4b:a7:05:1b:11:80:1e:
7c:26:8c:bc:bf:5d:78:01:30:62:3b:ff:dc:08:50:84:87:5f:
c5:21:bf:95:ca:7d:08:34:2a:cb:f8:33:95:b5:c3:c5:54:81:
a3:9b:23:51:2e:3c:bf:72:51:4c:11:b0:38:a1:ce:f7:03:24:
4a:ed:f6:66:4d:68:80:03:62:c9:ab:0d:1d:58:e5:02:83:6b:
f6:8f:e0:99:95:ab:1c:d9:00:bf:18:15:27:4a:22:8a:a7:dd:
c5:ab:57:48:e5:95:23:74:ad:bc:73:b6:05:50:8f:3d:27:42:
b0:34:3d:a3:09:4d:5f:34:d6:84:b0:62:c5:27:7a:ff:82:81:
a4:83:9a:a0:3d:ec:8d:7a:cd:a7:e4:37:18:d8:5a:ed:c7:44:
25:ee:de:af:6e:cd:44:2f:92:06:18:c2:fe:ac:eb:77:70:c3:
22:c6:cf:66:07:2b:ce:ba:cd:a2:3a:6a:81:99:af:7f:1f:8e:
43:3f:a5:ad:54:21:0d:39:ba:58:e3:bf:d5:6b:db:b4:6b:33:
c8:4a:6c:6d:05:12:b9:33:f5:3d:56:a2:25:f2:6c:c0:1c:fa:
82:67:bd:6a:01:f8:23:f3:f4:84:26:27:07:cf:d5:5b:d7:d1:
81:b1:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:42 2024 by rpki-client on console-ams.rpki-client.org