Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0793A3FC82BB11EE9E2970324AD9E6FC.roa
File: 0793A3FC82BB11EE9E2970324AD9E6FC.roa (raw, json)
Hash identifier: xSsD65UWC75/K4EGTBfNrVYbgefVt4Cl/hxyzch3SHA=
Subject key identifier: BC:52:62:46:7E:BF:35:00:ED:C2:6C:A0:B8:D4:78:0F:1B:8F:92:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0793A3FC82BB11EE9E2970324AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:57:09 +0000
ROA not before: Tue 14 Nov 2023 06:57:06 +0000
ROA not after: Tue 12 Nov 2024 06:57:06 +0000
asID: 397630
IP address blocks: 154.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20452 (0x4fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:57:06 2023 GMT
Not After : Nov 12 06:57:06 2024 GMT
Subject: CN=65531a45-4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e0:d1:d6:16:a9:2f:40:c0:c9:9b:8e:2e:e4:
7a:84:9f:ce:26:63:92:3d:61:78:23:c6:cf:4f:bf:
74:ae:72:ef:9e:3d:e5:55:3a:fd:f9:dc:e5:25:63:
78:d0:5d:db:0f:14:86:f7:d8:b4:5c:c3:0c:ac:d2:
cb:1b:f4:93:b3:7b:c4:cb:97:52:6a:cb:aa:8e:af:
0d:08:a3:ce:5b:17:52:24:b2:e8:2d:ac:86:93:75:
19:1d:88:93:d9:29:db:42:5b:af:c3:fb:84:91:b3:
01:df:78:b7:40:05:70:1f:35:53:ef:f6:b5:84:b7:
f7:ea:1f:3c:63:55:d5:cc:4a:12:c2:a7:ba:1c:fa:
bb:ef:ea:c7:f6:5d:ba:27:83:d6:94:c8:34:c1:ff:
a1:bc:35:50:f8:e3:cf:98:4a:56:7f:d7:8f:1c:83:
83:8b:4c:85:84:b6:3b:82:e2:83:ea:f9:ca:cf:e5:
6e:91:3d:47:a4:cc:0e:87:bb:91:7a:24:49:54:75:
72:58:48:bf:2e:a8:fe:b5:ee:4b:15:15:ac:9b:06:
55:4d:9c:c5:3e:db:b3:a2:94:10:1c:fc:90:4e:96:
b6:35:fe:f2:a8:3c:e4:6c:f1:c3:d1:6c:7c:97:3b:
24:e8:60:67:a9:bf:9e:0d:9c:89:af:ef:bf:d2:01:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:62:46:7E:BF:35:00:ED:C2:6C:A0:B8:D4:78:0F:1B:8F:92:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0793A3FC82BB11EE9E2970324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1c:8f:04:e4:28:d9:d9:26:b9:97:00:fa:eb:5d:92:a1:81:
b6:b7:3b:bf:41:51:3d:bb:f6:d8:c7:ad:71:5d:8d:5d:ef:a7:
09:3b:fd:0f:1e:01:6a:2d:86:b1:d7:65:8b:49:5d:55:0b:c6:
dd:f0:b2:36:02:b5:8b:27:e7:45:7f:7e:1f:ca:2d:9e:4b:b6:
ab:c2:25:f6:60:eb:22:41:f7:6f:75:2e:53:15:fb:9f:b3:a9:
17:b4:75:3b:82:2e:af:fb:45:91:54:80:d1:b9:9d:33:11:7a:
d1:30:fa:dc:54:21:6d:ca:aa:55:18:69:bc:88:3e:da:9a:e8:
ef:c7:09:12:36:bf:ff:ff:47:08:5d:42:33:e1:a8:4e:95:f8:
d2:dc:4b:37:f3:ee:84:f3:02:42:b6:40:66:4b:78:2c:5d:dc:
74:ab:aa:d7:07:f6:11:15:b2:9d:13:aa:4a:4b:de:a2:31:39:
aa:4b:90:02:7b:fa:3d:1c:de:1b:08:45:e5:37:a1:28:02:3c:
10:af:47:71:72:8c:c9:bb:36:a3:9d:78:f5:aa:c3:65:a5:e7:
1e:8b:dc:47:31:e7:f0:8f:08:ef:38:39:cd:c2:44:b9:66:4c:
99:e8:6d:81:02:d6:bd:2a:be:27:a6:35:7e:f5:13:75:2c:ad:
33:51:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org