Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCA4916FD2911EE98763235017001B1.roa
File: 0FCA4916FD2911EE98763235017001B1.roa (raw, json)
Hash identifier: o/2ooevClBxcFxUuaxc3A248CNqeB+mrU0coAAZCD8I=
Subject key identifier: B7:5A:CE:C2:A9:C0:2A:93:27:21:A6:A6:E5:52:D0:5D:29:2E:CE:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCA4916FD2911EE98763235017001B1.roa
Signing time: Thu 18 Apr 2024 02:12:10 +0000
ROA not before: Thu 18 Apr 2024 02:12:06 +0000
ROA not after: Fri 21 Mar 2025 02:12:06 +0000
asID: 211392
IP address blocks: 154.83.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44517 (0xade5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 02:12:06 2024 GMT
Not After : Mar 21 02:12:06 2025 GMT
Subject: CN=6620817a-c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:f3:4a:b0:a5:53:1c:89:5d:3c:b4:9a:1d:
c4:ff:43:89:ec:23:c4:15:ee:89:1f:16:28:59:09:
9b:4d:36:9f:e8:30:01:db:f5:32:cb:9f:f1:68:b9:
f7:fc:71:79:ed:0b:8d:55:9a:ec:73:d2:58:a3:ee:
c1:90:e8:8a:e6:17:49:49:a1:f7:2d:d7:1b:be:0a:
f5:2b:b8:36:fd:5f:29:66:f3:9e:03:ce:49:25:de:
94:be:17:e1:8d:d8:4f:5f:a8:62:64:1c:e8:99:7a:
f1:f6:b1:00:82:99:ed:77:88:6d:45:04:50:a4:e7:
8f:77:f5:cc:0b:e9:58:1b:d9:3d:27:5d:a3:c1:ce:
d7:2a:be:aa:90:6b:55:bd:6b:08:2f:e6:04:04:0a:
6e:a7:fd:64:14:95:a3:8a:de:9f:f7:7a:c0:b1:1f:
05:af:03:d4:90:6d:94:b0:21:a3:71:da:b4:17:ec:
63:57:27:3b:54:24:ee:a8:81:8c:d4:8e:bb:f8:cf:
c2:ec:6f:7a:d0:d2:aa:9d:8a:ad:b6:d5:2a:4f:af:
21:88:f6:db:c4:c0:c4:8e:88:6a:ab:91:62:6e:cc:
c5:ea:4a:8d:8b:e3:6a:9d:c0:22:29:53:da:cb:97:
37:7e:c2:bc:00:90:66:1e:b9:24:67:98:28:f8:12:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:CE:C2:A9:C0:2A:93:27:21:A6:A6:E5:52:D0:5D:29:2E:CE:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FCA4916FD2911EE98763235017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d3:7d:ab:fc:f4:74:d0:9b:9c:b0:2b:e0:eb:51:02:4b:e4:
cd:84:ba:bd:35:9b:bd:17:95:9c:9d:69:b8:d6:16:9f:fb:1a:
ee:a8:7d:3b:cb:6b:d4:60:01:27:6f:fe:b6:d5:77:2f:3e:97:
f1:65:47:73:9a:4c:e3:70:94:1d:20:3e:e0:25:00:7c:92:01:
f8:28:dd:7b:d2:99:90:70:8d:6c:80:85:fb:df:97:aa:eb:21:
f2:02:70:d8:56:e5:3d:c4:e2:7b:33:d0:bb:ba:1d:3e:13:e3:
19:f5:60:67:12:21:db:41:28:c9:5e:81:19:1b:39:97:db:68:
0e:3a:4d:b0:e0:c7:73:7a:99:ff:f2:c8:3a:97:83:56:80:ba:
8a:7b:30:68:81:34:a7:8d:81:83:43:9d:ec:c7:9a:70:f8:5f:
26:ee:90:d0:fc:22:7e:30:17:a7:08:62:3b:28:24:34:11:42:
ec:65:56:c1:4e:65:78:6c:93:55:36:8b:4f:3e:91:19:93:56:
71:e0:73:d0:ad:3a:8b:8c:a4:b5:fc:38:b3:9b:b5:f6:67:68:
67:1e:e6:2b:80:e2:0c:6d:e4:04:22:a0:bc:de:1c:3b:e6:8a:
6f:9f:08:4a:c0:1c:1c:ef:81:e2:52:94:cd:3a:d3:e8:d0:56:
89:47:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org