Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8511544CCB311EE9C734175775412E6.roa
File: F8511544CCB311EE9C734175775412E6.roa (raw, json)
Hash identifier: mE3PT5RR3zpY2Vv9w4IeD6F16sjwxLktDSnY4dYF5B0=
Subject key identifier: D0:1D:58:E7:4E:DA:7C:2A:90:6E:DE:07:13:25:59:7A:B3:2C:E0:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8511544CCB311EE9C734175775412E6.roa
Signing time: Fri 16 Feb 2024 10:13:03 +0000
ROA not before: Fri 16 Feb 2024 10:13:00 +0000
ROA not after: Fri 26 Apr 2024 10:13:00 +0000
asID: 9009
IP address blocks: 154.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 10:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35511 (0x8ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:13:00 2024 GMT
Not After : Apr 26 10:13:00 2024 GMT
Subject: CN=65cf352f-d599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:48:68:69:c3:00:08:db:b7:d1:e9:9a:6e:
49:fa:a8:10:7c:ec:a9:d2:0d:d6:b6:b8:8e:80:8e:
1d:54:ba:4b:25:3f:ad:d3:d7:20:27:74:0f:74:a7:
06:7a:ed:d1:b2:b1:69:55:9b:65:32:2f:7f:47:7d:
36:2a:0a:e8:e5:10:ad:f5:37:e7:5a:f0:46:d4:97:
5c:f4:a2:11:40:bd:a2:5b:70:74:d1:25:d7:3e:5a:
ef:06:f3:32:96:a4:27:55:5f:3d:ea:b1:77:71:52:
b9:ed:8d:35:02:3b:72:6b:b6:75:08:ce:62:6e:58:
66:ea:06:bd:3b:f3:20:7e:33:d0:36:b4:30:a5:3b:
28:a8:73:d5:8b:f4:5a:f3:a3:73:14:3c:80:a0:b1:
8f:80:55:02:4b:77:bc:e4:bc:7c:6f:96:bd:ab:4e:
2e:f0:ea:de:48:a1:43:ab:1a:6b:6b:72:91:2b:46:
b2:25:07:21:45:d4:90:61:47:a3:04:ad:8f:9f:9d:
ac:d3:a6:20:54:a7:1d:42:d6:92:a3:64:1a:f0:04:
7a:2f:44:92:52:6a:aa:14:30:98:02:b1:a5:15:68:
46:1e:82:aa:11:33:55:f0:46:8f:8b:90:77:e4:6f:
52:f4:d8:3f:39:a9:c0:68:d6:ed:df:95:41:c4:ac:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1D:58:E7:4E:DA:7C:2A:90:6E:DE:07:13:25:59:7A:B3:2C:E0:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8511544CCB311EE9C734175775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:a2:b7:04:28:c8:a1:df:9a:66:bc:e4:43:a2:e0:02:10:
08:c9:af:e0:e8:da:12:13:24:7d:37:c5:c1:aa:5d:8a:49:8a:
f7:c0:1b:3b:c4:c8:5a:fa:c5:a4:a9:45:3d:7c:11:ca:de:aa:
69:9b:ed:a3:bc:b0:b9:98:4c:58:f1:1a:b2:d1:04:93:19:01:
2d:47:f4:7d:1b:1c:c2:14:7f:02:fc:94:36:d4:fc:f6:2e:d2:
0c:47:fa:d1:14:18:57:53:80:3a:f1:a2:0c:fa:7f:9d:65:c3:
25:8a:f4:85:7e:46:28:b5:68:28:20:9f:55:e0:aa:0e:5d:62:
ef:5b:d8:91:9e:4e:66:c5:16:5e:e8:81:ff:5e:58:46:55:4b:
ad:de:52:86:46:0a:1c:e6:0a:cc:63:0f:66:7b:c7:5f:7e:79:
1d:53:2e:60:08:54:5d:ca:46:e6:45:22:b8:c3:e5:ac:6d:36:
1c:a6:df:94:73:ed:07:f5:f6:b6:68:7f:9f:2e:80:da:d5:58:
fd:96:d5:04:ed:0d:a5:c2:c8:91:10:c7:58:c2:23:87:5c:05:
b4:d2:a1:68:0d:e7:97:6c:a7:c2:2b:bf:33:0e:23:db:55:62:
57:88:a1:d4:eb:68:eb:f5:98:c9:5b:8b:82:5f:50:7d:73:89:
6c:0d:ce:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:41 2024 by rpki-client on console-fra.rpki-client.org