Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE170B64CCC211EE90ECF08C775412E6.roa
File: FE170B64CCC211EE90ECF08C775412E6.roa (raw, json)
Hash identifier: jLWhssmWFztWvNl6+MkAyIyqMqnAgKByX8TR2qNev+A=
Subject key identifier: C0:F0:1F:9F:F4:0D:66:83:47:52:0D:76:97:0E:9B:74:55:40:71:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE170B64CCC211EE90ECF08C775412E6.roa
Signing time: Fri 16 Feb 2024 12:00:35 +0000
ROA not before: Fri 16 Feb 2024 12:00:32 +0000
ROA not after: Fri 26 Apr 2024 12:00:32 +0000
asID: 9009
IP address blocks: 154.216.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35613 (0x8b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 12:00:32 2024 GMT
Not After : Apr 26 12:00:32 2024 GMT
Subject: CN=65cf4e63-dfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:ff:c1:72:02:f6:33:40:e0:48:e7:cf:3e:
03:7b:d0:a6:0c:2c:e4:61:e2:ba:5c:e5:50:e9:d9:
2e:e3:c1:dc:bd:14:fb:9f:7b:1f:7f:03:b9:4d:76:
3c:b7:ac:d2:8a:51:82:1d:7b:00:ed:3e:8b:00:23:
4a:26:d1:6d:ee:4e:47:fc:69:3f:aa:17:00:1e:b8:
48:82:aa:87:a2:cb:6c:bf:19:63:79:ce:2c:64:87:
c8:5c:49:47:71:d5:80:d6:d3:6f:c5:11:44:fc:3f:
22:58:93:69:22:75:2c:e4:59:05:b4:e4:19:bd:a6:
92:06:bc:0c:8c:4f:16:1c:05:75:93:6a:75:3a:8c:
1b:dd:73:7e:be:11:b2:dc:34:8f:bf:9c:a9:5a:f9:
3e:d8:9a:a5:86:c8:ef:22:8c:78:e8:3f:aa:4b:ee:
5b:42:a8:da:68:1c:d6:83:1b:d6:3a:e7:0a:6c:06:
a2:de:66:c3:d0:6f:45:5d:c0:7a:51:bf:d3:f0:a9:
11:c1:63:b3:f9:9a:1e:65:23:82:57:2d:df:44:8a:
f7:ba:f3:7a:0a:65:bc:18:26:09:90:ad:84:5a:80:
6e:17:44:bc:ee:3e:8d:67:06:40:92:f6:d5:29:b5:
5f:c1:23:0f:3a:6a:80:be:77:4d:88:63:5c:6a:fd:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F0:1F:9F:F4:0D:66:83:47:52:0D:76:97:0E:9B:74:55:40:71:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE170B64CCC211EE90ECF08C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.254.0/24
Signature Algorithm: sha256WithRSAEncryption
51:02:be:f5:78:90:f3:8f:cc:d4:49:42:eb:60:c9:e5:f4:47:
35:6f:c3:41:2d:b2:d1:76:9f:a3:2d:87:49:16:82:1a:65:bc:
51:c7:d8:a1:15:3e:19:ce:81:ee:7a:b9:7e:ea:3f:cf:ba:ea:
58:24:4d:df:5e:ad:eb:0b:02:c4:fc:94:06:45:10:61:a0:ea:
48:82:95:c6:a3:fc:43:9a:99:13:0d:18:ad:47:bd:4f:b7:c8:
f3:c4:8b:c5:6c:a4:8b:6b:a5:ae:26:0f:5c:0a:6a:e3:d2:ef:
8f:8c:6c:ef:04:b7:e9:1e:c5:af:0f:7a:fc:be:ee:36:25:4b:
06:33:96:cb:4d:ca:9f:01:52:ff:43:58:cd:2e:28:57:09:70:
71:8a:f7:da:86:11:6c:18:c2:39:71:59:b8:2e:b1:cb:7a:d6:
db:d7:c6:71:d8:d0:c1:d8:02:04:11:e0:70:85:ed:83:cb:d1:
ba:c4:36:c1:cb:02:05:b7:90:23:da:2b:12:93:53:b0:d4:ad:
5a:e7:5c:c2:c0:72:6b:23:b6:ad:aa:fa:06:2a:08:cb:35:e9:
03:c7:ae:25:8d:35:cc:69:c6:a4:ab:6d:5b:2e:fe:b5:e0:23:
26:5d:09:fe:15:ff:c5:bb:0c:49:14:97:da:37:17:4e:47:96:
8a:e4:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:50 2024 by rpki-client on console-ams.rpki-client.org