Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A262D89C1FE311EF90C8B3347DDC24C2.roa
File: A262D89C1FE311EF90C8B3347DDC24C2.roa (raw, json)
Hash identifier: J529kFA0nj7OiiWYcJz7114Znu9J1ku9cPrRWnsN3q8=
Subject key identifier: 6D:9D:38:AC:04:D1:B8:A1:E6:83:A1:A6:68:B8:C6:79:87:44:60:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A262D89C1FE311EF90C8B3347DDC24C2.roa
Signing time: Sat 01 Jun 2024 06:53:21 +0000
ROA not before: Sat 01 Jun 2024 06:53:18 +0000
ROA not after: Thu 04 Jul 2024 06:53:18 +0000
asID: 136950
IP address blocks: 154.213.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48265 (0xbc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 06:53:18 2024 GMT
Not After : Jul 4 06:53:18 2024 GMT
Subject: CN=665ac561-6938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:0b:66:e3:0b:f1:90:6c:e3:41:e6:16:b9:
de:4d:36:3a:7e:c1:12:74:c5:96:81:32:f2:05:e8:
e1:25:c8:11:40:bb:6e:a1:9e:4b:74:45:bb:dc:f0:
4e:f8:c6:d1:d5:3b:0b:5a:36:49:10:1d:ac:70:41:
f0:68:a1:04:66:52:d1:c2:9e:2a:a3:57:d5:bc:8f:
50:2a:78:e5:fa:c7:b9:2b:19:b2:c1:32:6f:fa:a5:
02:68:10:b3:0c:55:1d:12:9e:10:5f:c6:51:be:b0:
a5:13:9e:98:1a:06:6b:7a:89:1f:0b:30:2c:2a:99:
33:6a:6b:75:98:f4:04:a1:81:ec:11:69:84:48:e6:
0d:ed:93:12:99:81:32:c2:fa:d9:6e:7e:5b:5e:69:
5e:40:50:28:e9:52:90:c1:0d:ac:27:a5:a9:a1:2d:
52:4b:b4:22:0b:d3:5d:56:e7:fb:bb:17:e3:b7:41:
73:95:b6:36:bd:13:5d:f6:76:a0:51:4e:40:79:88:
06:d4:7a:21:f9:98:d2:7d:c4:7b:77:45:26:d5:c4:
6b:42:ce:8a:98:a2:39:1b:99:25:1f:10:43:aa:ca:
41:55:24:41:26:b8:31:59:c3:dc:ed:ce:9d:94:8a:
8c:fe:de:e4:f7:0a:fd:41:84:18:67:b7:38:60:b4:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9D:38:AC:04:D1:B8:A1:E6:83:A1:A6:68:B8:C6:79:87:44:60:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A262D89C1FE311EF90C8B3347DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1d:80:ec:f2:d4:69:df:04:da:fb:4e:b6:e4:cd:bc:59:1b:
3a:37:50:ae:8c:ee:6e:26:d1:10:be:42:2f:ac:21:9b:2d:4e:
9c:25:ca:ae:14:68:b4:96:6c:99:9a:7d:78:fc:a5:0b:55:3e:
c4:41:0a:da:de:4f:2d:d9:e8:67:19:53:8e:b7:97:89:ed:0d:
e6:2f:6e:28:01:b0:33:69:8a:b7:17:3e:d0:8c:cb:5d:bc:03:
21:47:af:df:17:8d:01:ec:3f:0b:4e:f6:8d:cf:af:54:ab:be:
b1:f0:09:e2:40:d4:2e:d2:1a:48:60:00:f2:ff:34:49:f8:fa:
6d:93:b3:b7:0a:a4:80:8a:7b:57:2d:b3:17:c9:cd:7e:4c:98:
62:30:2b:29:fc:bc:2c:2a:63:0a:9c:03:bc:29:0f:5a:79:55:
da:38:4a:41:e0:82:52:cd:5d:7d:c0:ac:e9:f0:cd:2b:d0:00:
52:85:a7:91:52:b2:98:48:e8:4b:8e:67:51:11:2a:80:96:ce:
25:e7:a1:c3:36:22:60:51:ed:2b:92:80:45:e7:56:15:46:e6:
7b:37:ce:7e:63:da:4c:f6:e8:f4:74:66:f5:26:1a:91:55:46:
18:18:51:00:30:c8:ff:6c:42:03:4d:28:52:32:d1:23:c4:3a:
d3:a5:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:32 2024 by rpki-client on console-ams.rpki-client.org