Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959CC7E2CCC011EEACBD5989775412E6.roa
File: 959CC7E2CCC011EEACBD5989775412E6.roa (raw, json)
Hash identifier: +yc/2Qi+xBxZqRaUMdBS33g7/GFmpW06RezgcKhaX+w=
Subject key identifier: 1E:D5:F0:6C:95:13:8D:8C:32:F9:D9:12:FA:DC:95:D6:9E:4E:D9:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959CC7E2CCC011EEACBD5989775412E6.roa
Signing time: Fri 16 Feb 2024 11:43:21 +0000
ROA not before: Fri 16 Feb 2024 11:43:17 +0000
ROA not after: Fri 26 Apr 2024 11:43:17 +0000
asID: 9009
IP address blocks: 154.216.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35589 (0x8b05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:43:17 2024 GMT
Not After : Apr 26 11:43:17 2024 GMT
Subject: CN=65cf4a59-2294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:fc:b0:51:4b:13:3e:ef:9a:31:cc:c6:a2:
79:53:45:57:ed:89:96:ec:3f:15:2d:1a:3b:63:67:
5c:fa:2b:96:91:84:4a:a7:57:8e:29:53:95:42:5e:
82:bc:a6:01:15:97:e1:ee:3f:ee:52:ca:23:36:40:
82:5f:01:b7:65:84:36:cb:4a:17:fb:6f:f7:5e:f3:
c5:1e:cc:d9:36:f9:d8:3f:be:19:25:4d:aa:26:e5:
c0:c0:fa:07:91:ce:91:5a:ca:cd:01:21:2d:06:cb:
bd:15:72:ce:19:02:e1:0e:3b:01:60:6a:77:ac:42:
3c:70:14:ea:35:b9:ce:e6:0d:9a:b2:db:2b:81:8b:
af:b1:4a:5a:50:e2:18:66:87:d3:56:b3:a7:f7:cf:
ce:0b:c8:87:2a:48:4b:6f:d3:29:50:d1:4e:14:80:
d2:2c:0a:d8:d2:e1:6b:9e:c0:58:80:f7:29:13:27:
2a:cf:b0:f9:36:ca:6c:4a:d8:74:69:49:b2:b5:69:
90:a5:36:15:b1:1a:61:b1:c2:1e:27:04:e3:5a:1f:
fb:db:6e:6d:f9:71:72:3f:26:ec:2c:6e:ed:0a:18:
30:51:1d:38:61:0c:98:51:4e:8e:61:1e:a7:e6:54:
46:a5:e1:d1:f4:3c:96:69:0c:41:17:b3:bc:d2:9c:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:F0:6C:95:13:8D:8C:32:F9:D9:12:FA:DC:95:D6:9E:4E:D9:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959CC7E2CCC011EEACBD5989775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.242.0/24
Signature Algorithm: sha256WithRSAEncryption
54:82:6c:aa:1f:b8:61:31:ed:a2:3f:c4:15:ea:b5:5e:48:af:
47:94:e7:2a:a3:f6:61:ca:cd:05:ca:a4:3b:53:a6:95:32:71:
6d:0d:29:eb:80:08:6b:05:0e:8a:48:d8:9a:52:4f:4a:b9:a3:
98:5c:62:6b:4e:ce:11:f9:61:17:88:fb:4d:b6:df:b6:f2:ee:
67:66:41:a8:df:2b:4c:ec:77:78:8e:bd:bd:bc:07:3d:cf:57:
a8:1f:d3:d4:73:1b:5d:1b:7e:5d:84:0d:a5:c3:9e:9f:44:08:
46:72:14:fb:4e:9f:b2:97:bb:87:12:5f:a5:64:72:a6:12:72:
94:6b:9a:93:4a:a4:44:b5:6f:1e:99:7c:83:d5:a0:e9:3f:3f:
12:db:52:0c:10:ce:44:22:a9:16:1e:3a:35:85:d8:9f:de:6e:
ce:c4:96:88:f2:5d:95:c5:62:80:98:b9:5b:4a:0d:7b:32:4e:
98:c0:a6:8b:80:6a:dc:02:46:66:f6:6a:25:7c:2b:2f:8d:8f:
6b:4b:1e:dc:2b:6c:5d:1a:b3:ed:59:15:cc:1f:10:4b:f0:98:
2a:29:23:4c:1f:d1:69:35:11:ff:81:21:d0:8f:83:ad:22:48:
7c:03:79:67:db:b0:ec:c3:56:79:de:e8:1f:d4:3d:26:c4:94:
22:5f:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:43 2024 by rpki-client on console-ams.rpki-client.org