Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA60BD87EB711EEA912F2534AD9E6FC.roa
File: 0EA60BD87EB711EEA912F2534AD9E6FC.roa (raw, json)
Hash identifier: v3bZTPTXMWMAFLdaVMgzOm2632otWZ4K+43u3vA6yGc=
Subject key identifier: 33:4E:D7:0B:C6:19:23:23:9E:78:7D:B0:4E:98:BD:DB:89:8B:0D:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA60BD87EB711EEA912F2534AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:18:38 +0000
ROA not before: Thu 09 Nov 2023 04:18:35 +0000
ROA not after: Thu 08 Aug 2024 04:18:35 +0000
asID: 133861
IP address blocks: 154.204.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19875 (0x4da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:18:35 2023 GMT
Not After : Aug 8 04:18:35 2024 GMT
Subject: CN=654c5d9e-bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:f4:6e:62:98:bb:51:71:14:e4:41:80:8b:
c6:9f:0a:da:79:a2:86:94:0b:e4:c1:82:68:ac:e4:
b5:f7:7c:61:f4:11:07:33:3e:9a:2f:45:3b:e2:b9:
ab:bb:e7:81:85:37:eb:63:c1:af:a4:b1:28:45:6d:
22:cb:81:26:73:99:e8:43:e5:10:49:cd:0e:e9:e5:
a0:63:14:95:0d:21:9c:7e:86:47:9f:7a:37:71:df:
47:da:1b:58:1d:c4:71:65:a5:29:13:a9:34:c9:67:
ec:c4:f9:bf:03:3d:a7:64:3a:e7:eb:d0:de:56:4f:
08:ae:b6:f7:1f:79:42:81:5c:fb:cb:5f:64:75:53:
82:60:2d:22:d4:68:b2:3f:a9:5e:77:ab:43:b3:85:
f7:1c:72:30:c4:be:dc:c1:0b:5f:20:71:18:4c:bb:
b4:52:95:07:cc:31:cd:01:ce:3f:6c:c2:06:a4:f8:
bd:df:ad:4a:1d:ff:85:40:39:9a:0e:7f:d4:aa:a6:
3e:3f:08:f3:7c:ef:31:a8:20:41:1e:cf:b1:0c:18:
81:44:28:3c:fa:24:47:7b:ed:a7:7f:5c:ba:ca:42:
61:b1:d5:7d:5e:cf:b6:b7:37:96:07:6d:1d:2d:1c:
c1:ca:cb:ac:22:b5:35:80:fd:c9:ea:8e:e2:e9:d4:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:D7:0B:C6:19:23:23:9E:78:7D:B0:4E:98:BD:DB:89:8B:0D:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EA60BD87EB711EEA912F2534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.59.0/24
Signature Algorithm: sha256WithRSAEncryption
88:14:c3:6d:78:12:2e:14:2d:2d:5e:cf:81:0e:9e:3a:a7:63:
24:3c:68:c5:7e:43:74:72:1f:02:a1:c2:02:c7:65:1b:52:7d:
b3:6a:82:dd:57:2f:ed:a6:8a:bc:d1:6c:f7:08:7b:09:0e:4c:
52:08:56:7f:4b:66:d7:fd:3d:1b:90:56:c6:46:c4:3d:1b:f2:
2a:bf:14:9b:72:d2:a1:e3:2e:cd:3e:9f:4e:34:fc:24:00:b1:
87:68:6e:2f:9c:13:00:98:05:49:39:8b:8c:49:ed:1b:17:ad:
81:ae:f6:21:e7:24:64:89:0d:87:a3:aa:f3:ab:ba:8b:74:79:
7d:66:b7:2c:64:2b:c4:2b:0a:dd:ab:b2:97:c8:ce:df:a2:c7:
26:82:0a:2b:e5:35:71:70:28:b7:90:1f:04:94:8c:1b:d2:51:
f6:eb:9e:22:29:66:b5:94:9f:26:48:12:d3:98:ef:45:4a:d3:
2b:0f:5f:d4:f9:3b:50:85:d5:b0:96:0b:a7:9e:ca:11:6f:0c:
77:46:d8:a3:13:70:da:c7:08:a8:2e:dc:52:59:38:0a:bf:3e:
e1:5b:c3:96:01:e7:e0:7b:6f:5f:29:60:03:ea:7e:55:9d:36:
5f:98:98:32:1e:ad:ba:34:fe:46:1b:5a:95:f3:5a:bd:20:5f:
38:b4:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org