Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D2A014F91811EDA4F2AD1A4AD9E6FC.roa
File: 04D2A014F91811EDA4F2AD1A4AD9E6FC.roa (raw, json)
Hash identifier: yeSWUHKqQqwpCwJAWx3MMvXEHZ4UDQ7ngOuJ3RN/6Lg=
Subject key identifier: 43:85:2E:B9:08:C3:14:3B:1C:66:B2:AF:39:DF:73:79:95:4C:60:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 264C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D2A014F91811EDA4F2AD1A4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:15:07 +0000
ROA not before: Tue 23 May 2023 03:15:03 +0000
ROA not after: Tue 20 Aug 2024 03:15:03 +0000
asID: 399674
IP address blocks: 154.205.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9804 (0x264c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 03:15:03 2023 GMT
Not After : Aug 20 03:15:03 2024 GMT
Subject: CN=646c2fbb-589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:be:52:b1:51:c4:a2:f0:9c:2c:53:3f:ef:4a:
91:63:da:36:cb:cd:69:54:cd:8c:3f:05:4b:25:ae:
7d:50:d0:a3:60:32:e8:3d:0a:90:b9:c3:b6:87:5c:
12:47:45:b0:b6:19:ae:9f:b9:3e:cf:fb:96:93:d9:
3a:7c:45:25:3d:07:e0:bc:a5:6d:dc:fd:cb:ad:9d:
96:6c:31:14:bb:bf:a7:bd:18:d6:f4:47:30:78:90:
a8:25:28:02:6e:b0:b1:60:64:2c:a5:e8:75:45:88:
5d:72:15:70:ee:b1:6a:7d:b7:de:9d:0d:0f:4b:08:
aa:30:84:00:60:83:e0:4d:52:2b:fd:d2:7d:cf:04:
0a:1b:28:fd:b3:d7:6c:a5:0e:61:dd:56:13:ee:45:
ac:4a:7e:53:8b:d2:43:63:2b:47:b5:8d:83:d7:76:
90:e4:4d:2b:b7:b2:d4:2e:4d:54:df:d3:5e:77:21:
79:e3:e1:ca:1d:77:81:5a:0b:d0:12:83:e5:bd:d8:
7e:8b:58:bd:e4:9d:ff:13:ef:9b:ec:bf:05:5b:71:
8e:26:05:c0:b5:5b:e9:68:95:19:7b:19:a0:6c:b2:
e5:e4:92:5e:68:a5:06:4c:78:95:22:2c:e0:91:41:
fa:84:61:b9:89:4f:d6:03:90:b8:ae:13:fd:c5:0b:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:2E:B9:08:C3:14:3B:1C:66:B2:AF:39:DF:73:79:95:4C:60:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04D2A014F91811EDA4F2AD1A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.208.0/21
Signature Algorithm: sha256WithRSAEncryption
90:c4:53:44:ea:0d:52:7a:19:8b:09:c6:6f:5c:d4:2f:17:c5:
9b:d5:36:e0:04:b3:30:2f:20:2a:8c:b0:06:98:fc:06:25:24:
6c:30:2d:ea:b8:c0:df:20:53:97:e4:97:07:4d:99:8f:25:7d:
e0:6a:6e:6c:19:b5:7e:db:3c:fb:67:5d:00:52:c2:fc:0d:33:
9a:5e:47:0b:3a:87:31:ef:8a:3e:48:e2:c6:e2:97:3b:a9:32:
14:7a:98:53:e8:3a:d9:39:1e:53:d8:78:b7:56:be:b0:c7:64:
79:0a:af:c4:f9:e3:a8:39:f0:24:70:2e:ea:82:50:c1:d6:79:
b9:78:1d:a1:0a:d0:c9:f1:ae:a5:a7:89:5f:90:08:27:0b:2f:
55:39:25:9f:61:67:81:fc:26:dc:fa:57:39:6e:ba:1b:a4:8f:
ad:f3:51:b9:e9:b2:c3:8c:b2:e2:95:a2:92:88:c1:2a:58:df:
e1:4c:9f:27:47:a8:e5:3a:08:52:1a:40:bf:7e:04:30:0b:ec:
42:d6:08:d1:9c:d6:99:9a:7d:8c:4d:f9:c1:3a:24:7d:60:f4:
e4:c3:20:51:7d:31:c0:eb:1b:22:25:6d:3f:0d:f6:6d:3c:1a:
8f:f0:0c:cb:c2:4a:e7:6d:23:99:7f:49:ad:ce:ab:10:dd:84:
ec:e0:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org