Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1753DE2E150111EEB6A5A82B4AD9E6FC.roa
File: 1753DE2E150111EEB6A5A82B4AD9E6FC.roa (raw, json)
Hash identifier: sb08ypUuKRC0sbmKCcRNT1QFfXZKkzRN+dKeJ32/7uE=
Subject key identifier: 70:26:7D:4C:5E:CD:71:EE:92:67:0A:D0:E9:CF:08:8F:B1:80:35:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1753DE2E150111EEB6A5A82B4AD9E6FC.roa
Signing time: Tue 27 Jun 2023 15:41:33 +0000
ROA not before: Tue 27 Jun 2023 15:41:29 +0000
ROA not after: Fri 07 Mar 2025 15:41:29 +0000
asID: 22411
IP address blocks: 154.212.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11798 (0x2e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 15:41:29 2023 GMT
Not After : Mar 7 15:41:29 2025 GMT
Subject: CN=649b032c-aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:b8:eb:c1:2f:fc:df:19:ce:3f:49:e7:b3:
c6:96:2a:e3:de:81:33:0a:03:e5:ae:5f:60:ed:53:
33:0d:41:41:8a:46:2a:13:47:89:ec:4f:25:48:f5:
59:50:11:1f:68:12:8d:74:53:11:a8:8c:70:e9:6c:
c8:42:a8:cf:73:e4:5b:88:fa:a9:32:0b:e6:43:d9:
31:13:66:99:86:17:39:5b:12:61:2c:24:59:c2:d8:
11:e2:25:2e:78:96:e9:e6:45:3f:11:b5:7b:00:47:
1f:57:01:f3:33:81:fa:ac:53:a6:0a:10:86:8a:87:
a9:c2:3b:ed:17:8c:57:7e:84:d5:d2:ed:f3:44:b7:
0f:39:5f:6e:e8:6f:0f:bf:f1:64:f0:4d:c5:93:9d:
ce:b2:b9:8c:15:01:f4:3b:49:d8:0c:87:49:35:3b:
16:de:1a:ed:77:c7:8a:84:58:8d:1d:91:f5:b4:65:
52:5a:49:05:54:d1:e9:c8:ab:17:1a:08:47:06:36:
fb:4b:37:53:27:d0:a9:2a:3f:2a:a5:59:4f:47:6b:
f5:fe:5e:51:2a:8c:3c:11:57:38:04:6c:06:16:1e:
81:bd:f3:42:90:b5:87:0e:64:30:21:92:cf:0f:a5:
f6:4d:d3:ca:b3:3e:4f:d4:70:35:4f:1b:b0:88:97:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:7D:4C:5E:CD:71:EE:92:67:0A:D0:E9:CF:08:8F:B1:80:35:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1753DE2E150111EEB6A5A82B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7f:d2:3d:4f:a0:5d:ec:6e:4e:39:c8:30:a3:d6:70:75:9c:
9a:bb:5a:d4:2b:25:cf:bf:f8:ce:8c:d9:8b:25:38:39:fd:70:
69:9a:b6:4f:42:e4:20:aa:b1:38:4f:23:19:7c:a1:23:6e:18:
88:50:8a:5f:00:11:d8:da:fb:50:50:d4:62:34:cb:36:ad:e4:
2b:20:1e:c7:34:9d:7a:cf:20:83:e2:5f:9c:1e:fb:be:13:87:
8d:66:fa:64:04:23:19:f2:22:ff:4c:61:fb:fb:6d:75:8d:eb:
25:37:1e:28:d1:7c:76:e8:6b:2f:12:e8:ad:58:e2:97:c9:a2:
9a:22:39:5a:81:b0:88:c8:7f:c7:0c:ab:cb:34:95:05:6c:1a:
e0:df:73:e1:38:18:12:70:df:0b:3d:03:bc:e5:0f:be:68:d0:
6f:f6:62:66:f4:38:62:11:04:64:b8:ea:ca:79:3e:8f:52:af:
24:24:77:94:9c:d8:20:e6:ae:69:72:09:8f:d8:c1:4c:e1:5f:
60:ed:8d:17:be:e7:eb:59:02:14:df:3a:16:b1:3b:9f:9b:1a:
81:98:8b:0b:39:74:9b:73:17:1b:f0:49:05:c9:29:6c:99:1f:
f6:f2:53:ed:0a:b2:2c:bd:90:f3:79:f2:0d:68:32:38:75:20:
34:5d:f2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org