Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028A27E4585111EE89FD1A5A4AD9E6FC.roa
File: 028A27E4585111EE89FD1A5A4AD9E6FC.roa (raw, json)
Hash identifier: 22lLPYaFg6PpmsktciJa5z7u/hgUOW+p5lOAqtOisDM=
Subject key identifier: 2F:5D:86:B8:5B:04:2D:C5:29:04:FB:D7:B8:4E:AC:38:29:BE:93:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3FEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028A27E4585111EE89FD1A5A4AD9E6FC.roa
Signing time: Thu 21 Sep 2023 07:32:25 +0000
ROA not before: Thu 21 Sep 2023 07:32:22 +0000
ROA not after: Fri 20 Sep 2024 07:32:22 +0000
asID: 16437
IP address blocks: 154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16364 (0x3fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 21 07:32:22 2023 GMT
Not After : Sep 20 07:32:22 2024 GMT
Subject: CN=650bf189-bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:69:ff:7a:5c:f7:8a:da:59:ec:a4:ae:93:
6e:ff:5b:70:f8:ec:28:5f:05:35:24:80:fc:c7:69:
52:d1:00:b3:85:f4:0b:1d:32:03:fa:1b:b8:7f:32:
5e:77:3e:c0:8e:bc:05:0c:86:0a:30:7a:bb:79:eb:
a9:56:a7:13:3f:34:58:dc:18:10:de:c5:75:a9:f6:
d1:af:36:32:63:95:6c:2d:21:8a:4c:f7:65:87:be:
a4:e9:17:ab:0a:a1:12:a0:e2:f6:bd:96:49:15:82:
c7:d7:2d:11:88:f8:3b:88:a7:7d:02:b7:ef:50:3e:
f3:d5:a3:84:83:89:50:ba:20:3a:d4:32:0c:cb:00:
e3:96:d3:b0:e8:3e:30:c4:2c:23:7f:4c:ec:8b:13:
93:34:49:21:ff:b6:82:f5:3f:0c:7b:d3:47:90:df:
da:5b:b6:8c:46:25:81:3e:da:43:63:f2:6f:80:25:
17:19:03:2f:a1:eb:76:28:2e:7b:99:39:9e:c1:79:
08:0b:17:e5:dd:19:4e:45:81:a6:10:b4:f0:38:d8:
cd:1d:66:d6:82:c5:c9:e9:38:ed:29:d6:ce:2c:bc:
83:c5:a9:d5:5e:f5:eb:44:4a:d6:0d:f0:22:3a:ea:
d8:75:c2:60:fe:98:ef:dc:43:26:2a:01:5b:02:d0:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:86:B8:5B:04:2D:C5:29:04:FB:D7:B8:4E:AC:38:29:BE:93:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028A27E4585111EE89FD1A5A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
46:88:2d:11:8d:02:4e:f8:94:d4:8a:40:79:af:6c:78:ff:eb:
0e:f1:ec:f9:bf:cd:69:99:05:18:e1:06:46:8b:ba:64:34:b9:
ac:06:3a:fd:92:e9:b4:02:63:ba:59:84:5d:ea:dd:9e:c8:b1:
9c:e3:43:f4:70:ae:ec:a5:bc:b2:3e:c1:9c:68:d5:04:c3:0f:
7f:e8:f6:8a:0b:ff:c4:04:59:43:c0:87:1b:58:0f:27:3e:3e:
cf:8d:08:6d:cf:ac:06:c9:73:94:55:6c:9f:21:f6:af:de:18:
db:05:c7:73:41:c3:c9:32:1c:e0:06:ca:e5:ad:0d:bc:b8:a7:
6a:8f:ab:0b:68:5b:3c:77:02:78:71:a2:ea:a1:02:a2:29:37:
0b:d7:c4:92:db:a5:ae:39:aa:0f:86:0b:8b:d2:1a:50:b8:d8:
89:3f:de:dc:3c:fa:58:b9:04:a8:93:57:d8:28:c7:78:d3:98:
37:7f:7a:30:28:bf:39:26:0a:6f:3e:66:ce:4e:b3:29:fc:aa:
3f:6b:27:04:fe:cd:ff:21:72:53:77:e4:b8:d5:1e:62:99:ec:
62:6f:c9:13:97:af:57:ea:2b:1f:4a:56:a0:b2:25:21:7b:1c:
07:f7:29:bd:d4:40:59:9d:29:a7:ec:da:2b:86:2b:cd:65:89:
d0:c3:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:14 2024 by rpki-client on console-fra.rpki-client.org