Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D87575884F611EE882B314F4AD9E6FC.roa
File: 0D87575884F611EE882B314F4AD9E6FC.roa (raw, json)
Hash identifier: R3i0f/ZrMZOjPIjPWyavSJy4duqFbu13IVnCsjYlAus=
Subject key identifier: C7:9F:02:6D:B4:62:0B:5E:E0:0E:61:24:5C:31:7C:AB:23:0E:20:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 505F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D87575884F611EE882B314F4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:04:42 +0000
ROA not before: Fri 17 Nov 2023 03:04:39 +0000
ROA not after: Tue 12 Nov 2024 03:04:39 +0000
asID: 54252
IP address blocks: 154.202.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20575 (0x505f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:04:39 2023 GMT
Not After : Nov 12 03:04:39 2024 GMT
Subject: CN=6556d84a-03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:ff:e8:3a:54:f0:9c:74:cc:53:cb:20:a4:
87:86:31:16:13:77:9c:8c:d1:5e:fa:8c:dc:64:20:
42:9e:3a:37:b9:cf:33:9f:4d:5d:40:7c:e6:df:fd:
dc:ab:32:dd:50:97:67:63:6f:7f:7d:8e:00:03:9c:
c6:99:08:d8:c3:d3:06:a4:73:f4:75:bc:ca:99:9e:
f1:eb:08:85:01:7e:12:80:a1:a0:c2:3e:66:00:19:
14:1e:a4:ec:9f:eb:6c:27:60:56:46:0d:31:74:2a:
67:a5:1b:a5:56:23:de:65:d9:a4:98:7a:01:9b:c1:
1b:9e:5d:b0:bb:a9:13:fd:12:ff:08:15:f6:c2:48:
91:b7:c6:10:da:b8:ce:f1:c6:d5:ba:ec:33:e3:79:
8e:f7:26:32:9e:38:6d:96:95:02:be:42:1e:00:10:
07:29:01:5c:ec:7d:99:39:34:eb:66:37:e1:05:84:
0a:6e:08:e3:bf:6b:c8:b7:89:00:7d:b3:72:e4:6e:
e5:1b:58:f4:2e:43:8c:7e:df:09:b4:eb:e0:93:b3:
86:53:02:45:8a:dc:71:cd:c4:d8:be:af:28:78:fe:
d6:f8:cb:03:25:97:77:83:a1:9b:82:05:23:c3:86:
54:53:75:0a:40:25:7c:3f:45:92:98:ee:8b:2f:6a:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:02:6D:B4:62:0B:5E:E0:0E:61:24:5C:31:7C:AB:23:0E:20:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D87575884F611EE882B314F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.88.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:20:9c:21:78:3b:2d:c7:35:2c:e7:16:d5:48:80:f7:11:18:
ba:f9:c8:34:d4:a5:56:77:01:a6:ae:50:3e:4d:67:f8:d1:d4:
e1:b2:c1:c8:77:d0:6b:29:e4:75:e7:63:0f:9b:1c:d1:6d:91:
36:92:20:1f:17:49:25:e6:9d:53:01:6b:65:6b:73:9b:98:19:
15:55:29:0d:eb:55:b8:f6:3e:67:a3:a5:59:ec:a7:66:69:a2:
96:d9:91:dc:c1:c6:ed:b3:88:ca:bf:1f:fc:ff:8a:80:c7:09:
45:87:38:8d:46:dd:be:43:d5:69:f4:a8:f4:3b:59:ce:fd:2d:
1c:67:cb:f2:01:7e:47:53:6c:a0:15:17:fb:38:b1:2b:c6:2e:
61:5a:15:88:e3:9b:d2:10:fa:c6:ec:de:96:58:a2:dd:7e:49:
f7:09:c7:72:3d:e1:76:80:f9:f4:83:79:d4:e1:dc:e5:06:90:
d0:d2:4b:d0:a3:62:1a:2d:a5:e8:e1:d9:be:9d:fe:05:56:72:
d5:69:e0:de:48:a9:db:43:a9:e4:32:46:36:df:47:b4:c3:cb:
ea:ec:ea:fd:87:70:55:54:49:eb:01:de:0f:0b:75:1e:26:0b:
b6:ec:46:da:a8:d9:33:0f:70:6e:2a:45:24:10:8f:f7:8a:62:
c4:8b:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org