Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EC0956417911EE91745D884AD9E6FC.roa
File: 13EC0956417911EE91745D884AD9E6FC.roa (raw, json)
Hash identifier: sg+kg1qb9dyP3iIH6JnrgbCaJf6d/IunMsfIuD4uAqE=
Subject key identifier: 0A:A0:CD:7D:48:CB:63:3D:BC:5F:4B:2B:1A:4E:19:93:D4:7F:A8:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3795
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EC0956417911EE91745D884AD9E6FC.roa
Signing time: Wed 23 Aug 2023 05:51:18 +0000
ROA not before: Wed 23 Aug 2023 05:51:14 +0000
ROA not after: Sat 24 Aug 2024 05:51:14 +0000
asID: 5065
IP address blocks: 154.86.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14229 (0x3795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 05:51:14 2023 GMT
Not After : Aug 24 05:51:14 2024 GMT
Subject: CN=64e59e56-86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:84:c8:ef:21:2e:ca:0e:20:19:87:5e:5f:
c7:b6:1c:2e:e2:9a:7d:db:7a:fa:d4:3b:98:57:d0:
ff:88:0e:48:8a:28:57:28:66:19:f3:90:d1:37:55:
e5:16:f8:a7:8c:74:57:5d:c8:7b:48:2f:51:3c:b8:
b0:38:a5:90:83:d1:91:38:28:d5:23:e9:5e:29:37:
18:1f:28:03:c8:e0:ba:79:16:6f:b4:ba:25:cc:14:
12:97:ae:0e:1b:69:ec:67:d3:4b:b1:52:a1:d9:62:
41:ee:01:fd:5c:db:3d:ef:18:f6:cb:03:c2:c5:22:
05:da:0b:d2:08:51:e6:c8:fe:3d:31:82:db:88:1f:
5b:0d:6d:44:2a:a6:f9:a8:84:d9:67:8b:68:aa:a0:
d1:f5:57:82:a6:b2:6c:b3:1f:b3:c1:31:9b:75:45:
02:f7:e1:be:22:d7:87:c3:be:ab:69:e5:f1:f0:85:
6e:65:d8:7f:ae:aa:13:01:70:11:1d:da:6b:80:c5:
63:ab:bf:a7:89:88:ee:53:df:ba:50:52:fb:92:d5:
1a:f5:b9:e9:f9:0e:09:bc:b3:aa:f5:d9:fb:af:44:
6f:28:59:09:5e:81:2f:07:13:67:bd:b1:bd:66:87:
27:45:14:82:e4:16:fb:a0:d0:29:6c:7c:8c:ef:7e:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:CD:7D:48:CB:63:3D:BC:5F:4B:2B:1A:4E:19:93:D4:7F:A8:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13EC0956417911EE91745D884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f4:59:aa:74:8d:6b:82:20:4d:ba:44:05:e7:72:e1:fc:a3:
6c:36:2b:79:c6:c8:67:fb:2c:cd:b2:ed:44:72:e1:6e:f6:1b:
98:33:4d:01:7d:c8:78:cf:35:c3:c5:b9:8b:77:f6:32:1e:13:
e9:fc:c0:cd:90:aa:8f:99:3f:a6:d4:96:59:6a:30:10:1e:10:
6a:0c:4e:25:09:a1:1b:e0:26:77:b5:aa:81:fb:96:fb:46:42:
67:88:1c:e7:26:0b:fb:86:d2:a3:33:bb:71:b7:11:24:46:8a:
51:fa:3e:9c:63:d5:e9:4a:92:d0:86:6f:b0:29:c8:a3:81:70:
b2:48:70:51:63:66:d7:7e:bd:bb:ec:cd:00:be:91:c5:2a:6d:
5e:64:5a:01:0b:e2:26:28:66:da:c1:a4:73:d8:dd:60:f1:fd:
86:c1:5e:e2:bf:df:07:c9:c1:b6:86:80:da:03:bf:a6:44:a3:
79:00:61:56:53:3a:32:c9:fe:f3:bf:cf:74:a8:5a:46:bc:6d:
5f:56:c3:d8:60:c5:95:29:61:47:3f:e2:90:4e:38:c0:2a:49:
aa:01:d0:c0:f1:bb:15:15:e5:b3:7b:b4:7e:e9:ad:be:ea:0b:
cd:72:74:8f:d3:84:4d:9b:d2:68:cc:c6:d0:ed:24:21:28:c2:
e3:d7:46:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org