Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF362CCA062B11EFA88D3434017001B1.roa
File: BF362CCA062B11EFA88D3434017001B1.roa (raw, json)
Hash identifier: G2L/gEjBbrK1PhJUDQvPxINBDhl2Vd1VciKPTAQXcgM=
Subject key identifier: 88:4F:5E:04:5F:0E:E2:FE:0E:C3:07:81:9D:48:D1:69:30:C5:28:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B26A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF362CCA062B11EFA88D3434017001B1.roa
Signing time: Mon 29 Apr 2024 13:24:03 +0000
ROA not before: Mon 29 Apr 2024 13:24:00 +0000
ROA not after: Fri 07 Jun 2024 13:24:00 +0000
asID: 138915
IP address blocks: 154.223.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45674 (0xb26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:24:00 2024 GMT
Not After : Jun 7 13:24:00 2024 GMT
Subject: CN=662f9f73-b7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:f9:74:b2:3f:0b:e5:3e:1a:ed:f0:3f:d4:
6a:52:9e:71:4a:19:5a:aa:5e:cc:7c:3b:7b:49:d8:
c5:79:e6:71:0c:9a:f9:73:95:81:76:52:1d:26:10:
7f:f1:38:8f:0d:14:99:68:4c:72:ed:5a:5d:8a:78:
82:41:f7:4d:37:1a:47:17:ad:de:d2:4c:1b:15:27:
cd:64:b1:df:17:52:cc:49:74:21:1a:e5:10:7a:13:
6e:26:1e:4b:0e:79:7a:fd:d4:db:6a:ec:6e:ac:f8:
7b:3b:9d:ab:5b:13:3e:e6:e1:29:98:10:18:4a:b4:
22:e7:fe:7b:77:e8:31:f7:2f:35:c1:1e:9f:7d:a1:
2f:8d:17:60:bd:dd:93:3e:7b:46:43:7a:06:99:92:
61:3f:b5:92:a1:3a:11:5a:7c:dd:ad:57:dc:0e:8d:
be:25:55:2b:f4:45:87:b2:e2:1a:d6:8b:a9:ba:7c:
4a:7f:04:e7:54:2a:8a:f8:48:1e:de:2e:35:40:f5:
b4:6e:37:05:84:ad:ea:3d:6a:c8:0c:fa:d2:8f:92:
e9:c6:2c:5e:b3:41:c2:84:18:52:a2:e5:5d:01:2f:
1c:90:53:43:76:ca:de:1f:40:79:e8:15:2f:3c:f8:
74:b6:25:39:ee:b3:91:80:3e:64:9e:97:98:3c:b4:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:5E:04:5F:0E:E2:FE:0E:C3:07:81:9D:48:D1:69:30:C5:28:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF362CCA062B11EFA88D3434017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dc:84:74:2a:a1:2a:a8:af:81:b5:9a:15:ff:71:a0:02:c5:
1f:a9:ab:5f:45:07:81:00:4a:bf:69:f9:0a:6f:75:df:5e:97:
03:25:53:ab:82:77:2b:16:74:97:55:bc:a9:62:e6:c5:ae:ef:
fe:b0:a2:84:86:0a:7e:eb:9b:77:37:f7:d5:ef:4d:82:c7:75:
3c:b6:51:00:0e:08:da:79:d6:c1:ae:32:cf:c1:bf:cb:07:15:
e4:fe:77:f0:35:79:e3:31:6b:5a:e5:c4:2e:f1:79:4e:64:57:
e8:8b:c1:5e:f9:e8:bc:86:1a:b9:e2:2a:5e:62:d1:c7:63:5e:
8a:32:42:38:f4:cd:74:61:3c:b5:de:dc:2e:d6:43:bb:8c:26:
2c:c8:32:f1:76:26:28:1f:c3:d6:b7:8c:1f:70:db:89:22:61:
61:41:7a:57:8b:01:2b:86:57:2e:8c:d9:51:6f:4a:a7:08:73:
8a:52:9b:5b:e4:1f:94:ab:64:db:ea:55:fd:38:73:13:78:da:
62:4a:c9:0a:8e:ca:4f:80:2f:0c:90:b3:61:62:e3:74:fe:8b:
f1:01:9f:1c:db:7c:86:e4:ca:bb:81:96:90:e1:b0:48:a7:1e:
dc:08:e1:49:0e:1f:88:4b:d9:bf:86:d9:7a:81:99:f1:bb:78:
18:30:62:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:00:52 2024 by rpki-client on console-ams.rpki-client.org