Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16FFC066689C11EEB9B2B6344AD9E6FC.roa
File: 16FFC066689C11EEB9B2B6344AD9E6FC.roa (raw, json)
Hash identifier: LB63N4aMciwbIdWxaN+bWNZoVyaKjSzjEx87kU5bmr0=
Subject key identifier: 5D:78:7C:0D:16:EB:EE:23:F1:0E:E5:A0:7F:51:5D:05:8D:1F:ED:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 458E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16FFC066689C11EEB9B2B6344AD9E6FC.roa
Signing time: Thu 12 Oct 2023 01:10:11 +0000
ROA not before: Thu 12 Oct 2023 01:10:07 +0000
ROA not after: Sat 05 Oct 2024 01:10:07 +0000
asID: 132839
IP address blocks: 154.201.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17806 (0x458e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 12 01:10:07 2023 GMT
Not After : Oct 5 01:10:07 2024 GMT
Subject: CN=65274772-0124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:32:d6:6d:fe:3f:ed:0a:45:2b:b3:5b:b6:
e1:05:dd:80:db:2c:de:54:c6:53:ad:08:fd:44:2f:
64:24:49:97:b1:b9:a1:c3:ef:6b:73:5b:38:7d:84:
2c:8b:10:57:23:32:7d:f9:68:fa:9e:de:25:4e:93:
a5:f5:2b:10:2b:49:89:d9:63:82:9f:ef:9f:28:84:
db:91:6c:77:08:ff:71:2c:3d:42:76:ea:7d:29:2b:
05:c6:e7:75:ce:9a:d3:8d:2b:f7:70:2e:84:55:bb:
96:7b:36:0c:ba:cf:e6:e6:de:14:78:11:bf:11:c1:
b2:5d:fd:f9:aa:a6:41:8c:01:39:e8:a1:f9:e0:81:
85:3d:b8:9d:2b:12:9e:7f:92:80:88:8c:3d:1a:b3:
5e:29:ff:9f:19:67:ac:35:1a:82:50:ac:a9:a7:b8:
ea:e9:51:12:5a:fe:f5:07:64:50:98:f3:e4:24:d7:
3d:59:ed:79:ce:9d:fa:a9:b3:f4:23:60:ee:86:b8:
ad:56:b0:4e:00:16:24:b9:a6:cb:ab:57:ff:41:87:
a0:46:5d:8a:0c:15:2c:b6:6b:4e:92:17:74:bc:c4:
23:d9:14:95:47:6d:67:10:cb:67:fc:72:ba:4e:6e:
22:bf:01:71:c6:c7:4d:1a:7a:62:cf:ff:ca:c9:d3:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:7C:0D:16:EB:EE:23:F1:0E:E5:A0:7F:51:5D:05:8D:1F:ED:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16FFC066689C11EEB9B2B6344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.191.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ed:5b:47:9e:29:f2:2d:30:ee:9a:51:b5:49:15:26:b9:cb:
aa:4b:30:13:5b:37:dc:dd:94:ca:08:4c:e0:b3:5d:a4:5e:39:
85:ba:98:1a:b2:1a:30:dc:b2:29:bd:6b:40:d0:d9:5e:1f:5e:
1a:c8:e6:9f:bc:ed:6f:8e:32:e8:c5:10:56:23:2b:97:33:46:
d2:39:5f:c4:be:1d:51:5f:ef:e8:4e:12:93:0d:da:a5:45:35:
a1:b1:7d:bf:78:97:f2:a2:70:e3:eb:f8:3a:c2:cd:8e:d3:ac:
de:73:be:13:fd:f8:a3:18:dc:23:fc:76:ec:93:3b:06:95:20:
c3:d9:5e:bf:cb:7e:8b:48:c3:c2:68:06:16:31:3b:78:e4:43:
03:f3:68:13:17:71:0d:26:1c:15:40:29:64:9d:56:27:0f:91:
0b:65:b5:6d:42:4a:c6:86:e8:9c:04:df:16:a2:cc:77:37:c3:
33:aa:26:79:74:1a:6b:27:43:31:44:45:5a:7a:3f:f7:a1:a2:
bb:32:41:59:18:5f:78:c3:a6:43:e8:49:ba:3b:3e:c9:73:f3:
63:1a:40:f5:60:86:8e:c6:e5:e1:c4:bf:cc:7f:73:81:8c:7a:
6e:4c:c1:74:ae:3f:b2:c8:e1:b4:5a:03:15:ab:cf:1d:97:ea:
13:6a:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:20 2024 by rpki-client on console-ams.rpki-client.org