Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029E32BE29C311EE9DAF16274AD9E6FC.roa
File: 029E32BE29C311EE9DAF16274AD9E6FC.roa (raw, json)
Hash identifier: wAjgHWVlZVOKlairoQjVnafQvtz9O5QjmObq/Mw1ld0=
Subject key identifier: 0E:B8:C9:2B:D8:37:FB:BF:77:5B:61:2F:27:90:EE:20:8F:31:0F:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 33D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029E32BE29C311EE9DAF16274AD9E6FC.roa
Signing time: Mon 24 Jul 2023 01:40:03 +0000
ROA not before: Mon 24 Jul 2023 01:40:00 +0000
ROA not after: Wed 24 Jul 2024 01:40:00 +0000
asID: 151196
IP address blocks: 154.204.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13266 (0x33d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 01:40:00 2023 GMT
Not After : Jul 24 01:40:00 2024 GMT
Subject: CN=64bdd673-738c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:07:26:5a:7c:77:7e:4e:46:bd:3c:47:59:
57:cd:51:95:52:82:51:8e:16:aa:f3:d9:ca:a4:ef:
d4:06:0a:f4:57:ad:21:63:64:75:6e:1e:e4:3b:c8:
dd:4c:c9:05:5a:89:93:6d:be:c5:98:4b:ff:b2:71:
1e:cb:f9:64:34:70:3f:98:1c:fa:a9:4f:cc:33:08:
1d:be:45:18:2f:c2:c2:cc:d8:d9:69:91:42:9c:43:
91:63:d2:95:bf:e9:c8:f0:d4:41:67:98:08:84:84:
05:b5:40:6b:5d:7d:b8:60:1a:5f:df:84:75:1b:28:
ca:ef:81:78:2f:b8:80:d9:e7:a5:38:19:46:07:2b:
1c:00:15:31:f4:1f:d2:44:6f:ad:62:68:3c:e9:c4:
76:f3:f8:3c:ff:cd:4f:93:0e:c9:d8:ac:a6:fe:3d:
8e:df:2f:67:5f:23:cc:4c:78:42:30:e8:42:cf:5d:
68:9c:4d:23:29:e0:4d:0a:87:37:04:30:77:8f:f7:
01:81:7e:c1:d4:d6:73:5a:5c:8b:15:1e:ac:97:90:
8c:c1:ad:9f:72:72:19:00:d6:99:63:fc:37:41:5e:
8e:6b:19:1f:ad:a9:30:3e:84:37:93:41:e5:d5:bf:
99:e4:0a:9c:fa:26:18:5f:eb:fb:0a:8c:90:7a:38:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:C9:2B:D8:37:FB:BF:77:5B:61:2F:27:90:EE:20:8F:31:0F:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/029E32BE29C311EE9DAF16274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a2:ba:cb:65:78:c5:34:b1:6b:1e:2e:ac:57:84:8d:c7:ab:
18:8d:fa:8d:df:52:07:49:b4:9a:1a:35:b9:82:75:1a:d8:13:
d2:a9:b0:0c:4c:71:27:68:14:ed:ee:d7:5a:2a:10:7e:e1:05:
b5:46:32:ae:ff:39:95:11:89:b8:c4:06:ce:31:bb:03:ac:84:
90:4b:6e:cc:b9:d3:4e:40:54:ff:17:aa:ba:ae:ab:5e:a1:a4:
2b:84:69:0d:7e:63:7a:77:83:70:eb:9e:5e:14:e7:7e:23:7f:
fa:f6:04:11:77:06:b0:ae:c7:50:3d:6f:b4:96:0d:c8:df:c2:
9f:fb:06:5b:27:03:6f:56:42:42:3d:a3:32:c0:55:85:31:48:
01:84:67:70:f7:41:89:7a:54:3b:a0:64:10:49:bd:b1:97:cd:
19:e3:69:6e:df:13:37:86:b8:e3:14:04:a4:a0:10:50:9d:7b:
d0:f6:7e:d4:ac:69:f0:c7:56:03:9d:78:94:83:d7:ea:95:ae:
eb:b9:24:8a:86:5c:eb:07:ef:21:94:8e:e9:79:14:33:51:21:
74:29:f5:03:04:96:1f:e0:e2:7b:4a:1c:9d:f2:c0:e6:53:7e:
bb:70:a4:7a:de:05:f3:18:c9:2f:7a:e1:cf:a5:6a:46:e3:b8:
4c:30:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org