Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F009E3C061111EFB2F5FC5E017001B1.roa
File: 9F009E3C061111EFB2F5FC5E017001B1.roa (raw, json)
Hash identifier: 7Yo3hkWjEp2jge948bZ+W5h30NdrPU3gYMbRK43rSn8=
Subject key identifier: E0:A3:C8:80:8B:C7:93:56:E8:E6:C9:C7:75:02:BF:60:D5:FE:A0:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B23A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F009E3C061111EFB2F5FC5E017001B1.roa
Signing time: Mon 29 Apr 2024 10:17:02 +0000
ROA not before: Mon 29 Apr 2024 10:16:59 +0000
ROA not after: Fri 07 Jun 2024 10:16:59 +0000
asID: 138915
IP address blocks: 154.223.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45626 (0xb23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:16:59 2024 GMT
Not After : Jun 7 10:16:59 2024 GMT
Subject: CN=662f739e-562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:8c:e0:fd:19:ac:94:df:70:0d:33:c5:16:
73:de:26:8e:ff:f2:dd:2a:f4:ec:a3:05:80:20:72:
56:3e:d5:6e:b0:29:b6:1a:5f:8f:24:b0:b2:8d:a8:
4b:48:b0:f5:39:84:79:38:48:e2:f3:b2:db:50:c6:
2f:cc:3b:59:64:ab:07:a1:c8:8f:0c:71:e8:12:0c:
9a:8b:c7:ba:5e:7d:df:d0:64:8b:83:c2:a7:ce:38:
63:72:4d:fc:89:2f:77:60:cd:d5:bc:88:17:7e:b4:
39:12:1c:f2:b7:3d:74:b3:82:34:a8:9c:7d:f2:bc:
b1:08:2f:1d:06:c0:d2:22:fd:81:f1:74:9d:be:1c:
9d:be:3e:b2:3e:e7:97:c1:58:c7:82:fe:f9:f9:3f:
bc:bd:6a:6a:14:df:b8:a0:1f:3e:f2:24:49:dd:e1:
a8:bf:49:9a:ed:ca:6b:b0:b0:dd:9b:13:5e:06:ac:
0b:ed:50:6c:bc:5f:bf:c9:01:a9:08:f2:3f:c2:c3:
9f:be:25:5a:0c:c9:32:31:68:7f:c9:e0:35:e4:30:
9c:2c:f9:10:6a:3e:46:bf:23:1b:d0:79:c7:67:de:
7a:fd:74:24:a6:6b:55:b7:60:92:76:10:0c:10:47:
b4:90:e6:be:a0:ce:33:12:3a:f1:a6:46:1c:26:3b:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:C8:80:8B:C7:93:56:E8:E6:C9:C7:75:02:BF:60:D5:FE:A0:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F009E3C061111EFB2F5FC5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.64.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e8:ed:88:ba:92:ae:97:36:62:41:38:2a:8d:02:e7:47:90:
3f:a5:18:9b:73:58:87:9b:26:f5:6c:61:41:11:73:14:7a:cb:
5a:fe:c3:1d:03:53:d4:58:aa:b5:6f:7c:20:7a:34:2e:74:96:
d9:85:48:3c:27:aa:f9:7e:bb:d3:8c:7e:6a:37:94:eb:92:f0:
5b:c3:bc:3a:a7:60:e4:67:9e:e9:30:0d:0c:1f:f0:49:e6:78:
c0:71:33:88:69:0a:d3:63:ca:88:0c:c6:7c:88:93:b1:5b:9e:
01:9b:fd:05:61:e7:03:cc:29:cc:6e:07:f6:67:12:3e:ed:19:
7e:dc:07:4e:af:40:61:14:15:e0:a7:66:dd:f8:d1:c1:94:88:
2d:2a:54:da:e6:6d:b4:01:70:ef:2f:dc:23:4c:e1:35:15:e3:
58:3d:f0:66:82:81:47:d5:b0:1b:98:5b:22:de:a6:3a:bd:10:
0a:01:5c:b5:f1:22:de:8d:19:95:c3:d0:3c:bf:86:ed:39:5d:
ca:10:f6:67:52:25:de:67:a0:d2:cf:18:af:82:fe:12:49:6e:
89:b0:12:a3:ea:4e:07:9c:02:4b:b6:72:fd:1c:ae:ae:ac:1b:
d6:80:32:3f:ba:37:87:a1:ae:b8:cd:36:b9:d9:a6:a1:13:26:
51:0f:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:27 2024 by rpki-client on console-ams.rpki-client.org