Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F43ACACFB8711EDABAA1C814AD9E6FC.roa
File: 0F43ACACFB8711EDABAA1C814AD9E6FC.roa (raw, json)
Hash identifier: NM/yI+/9oTFgy2uVeTlsL0YpK6s2nKZM5Z3MboaSizE=
Subject key identifier: 3A:CC:E9:24:A0:5D:83:85:B6:19:D1:CA:D3:51:17:78:35:6B:42:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 27F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F43ACACFB8711EDABAA1C814AD9E6FC.roa
Signing time: Fri 26 May 2023 05:35:01 +0000
ROA not before: Fri 26 May 2023 05:34:58 +0000
ROA not after: Sun 30 Jun 2024 05:34:58 +0000
asID: 984
IP address blocks: 154.90.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10230 (0x27f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 05:34:58 2023 GMT
Not After : Jun 30 05:34:58 2024 GMT
Subject: CN=64704505-cfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:84:9d:e6:c8:5a:c5:fd:c0:91:95:fd:4c:
4d:b2:7a:b7:e2:58:82:a0:c5:4b:32:2d:f3:db:96:
c4:b7:28:a0:b7:8b:07:5d:09:c4:e0:f9:44:8c:1e:
79:57:e1:2c:2e:ae:20:ef:5d:6d:35:df:49:7a:45:
e1:70:31:71:04:79:f4:8a:b8:b2:53:ab:d0:95:d1:
ea:e5:b9:12:65:05:ac:cd:f0:47:7e:e5:6a:56:db:
20:08:f5:19:61:59:f9:d9:9f:6d:16:35:a6:35:47:
9b:be:3b:ff:4f:0d:43:75:45:2c:6d:ac:a8:9d:a2:
54:69:da:90:92:bf:26:80:28:ee:eb:31:21:4a:5d:
cf:6d:1c:1e:22:ee:34:85:c4:67:56:99:76:27:c9:
53:43:53:c2:64:b7:77:ab:79:f0:e3:11:ef:42:5e:
61:a0:6f:e0:50:7d:69:1e:92:81:02:32:40:8f:3f:
68:39:61:c6:72:05:e3:84:d6:90:dc:d0:0e:64:b7:
79:4a:0e:68:24:37:56:23:5b:1a:a0:d5:59:f1:d2:
86:12:5e:de:01:a6:75:aa:89:3f:a9:3a:df:ab:0c:
29:ce:ed:89:97:04:d3:9b:db:b6:bf:ef:35:29:e9:
3a:0a:14:ee:4a:35:ec:ca:d7:5e:78:00:b4:5a:f6:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:E9:24:A0:5D:83:85:B6:19:D1:CA:D3:51:17:78:35:6B:42:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F43ACACFB8711EDABAA1C814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:eb:6d:37:65:c8:6b:25:b3:76:bb:28:14:48:fa:c4:4c:e5:
31:be:49:b4:7f:a2:fb:a1:2f:a4:f2:5e:3e:1d:20:58:bf:20:
3a:2a:08:84:67:9f:a6:ed:1f:e9:64:35:af:a3:a6:37:21:b0:
a9:2f:2e:da:d7:5f:cf:24:cc:83:e0:f2:e3:51:26:11:ad:7b:
77:97:31:93:9d:e7:26:fa:36:11:56:54:e0:e8:58:e8:4d:c9:
a8:1a:01:aa:4f:5e:d4:7e:88:18:70:d9:07:4e:e0:75:a3:70:
c1:ee:3c:12:59:83:02:7f:17:75:74:7e:d4:50:3e:95:1a:df:
eb:6c:19:d5:84:d0:9a:e1:f9:7b:c6:aa:69:3e:0a:fe:e7:af:
bf:28:f3:fa:dd:85:80:cc:9a:32:d4:43:a1:8a:c1:70:2d:0a:
b6:d4:9f:f5:4e:9a:db:db:5c:8a:5e:53:02:9e:e0:b0:97:be:
26:61:51:82:2b:e2:dd:13:40:fd:68:8d:f1:c6:62:83:33:14:
2c:fe:de:9a:45:4e:e5:a6:d9:67:58:ba:eb:29:d7:24:c5:06:
0f:88:cf:f0:b7:2d:dc:d0:c4:8a:34:78:b1:db:28:7c:e7:41:
bc:35:ad:4b:c8:7e:07:76:26:4e:18:c9:ad:a7:cc:33:4c:04:
c4:3a:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org