Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A4D3546D5E11EEBFDA10674AD9E6FC.roa
File: 18A4D3546D5E11EEBFDA10674AD9E6FC.roa (raw, json)
Hash identifier: EXw1u7aeq6hEKoQTto8L2hWObs6lgWYnZdIShJp5W1g=
Subject key identifier: F0:42:6A:AD:E2:2C:3D:7F:86:FC:C4:E3:C6:84:1F:04:F2:CD:66:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4671
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A4D3546D5E11EEBFDA10674AD9E6FC.roa
Signing time: Wed 18 Oct 2023 02:29:00 +0000
ROA not before: Wed 18 Oct 2023 02:28:57 +0000
ROA not after: Wed 18 Sep 2024 02:28:57 +0000
asID: 132513
IP address blocks: 154.222.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18033 (0x4671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 02:28:57 2023 GMT
Not After : Sep 18 02:28:57 2024 GMT
Subject: CN=652f42ec-9bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:e2:13:d4:1a:b6:7f:a6:5a:3c:ba:ba:4b:
08:6a:86:5e:b0:d9:0f:89:8e:08:d5:d0:57:05:43:
78:f5:f5:1b:4d:93:ab:64:17:dc:a0:6c:f0:ea:61:
93:d8:84:a4:fb:8e:ee:f1:1b:ca:23:d9:84:20:e1:
4e:33:cb:68:10:ac:e4:7d:c7:8f:d2:c5:52:49:a5:
9a:0f:78:c3:eb:9e:8c:f1:06:aa:92:db:9d:84:43:
55:bc:d0:fd:8d:4e:e9:81:5f:84:20:e1:83:75:41:
d2:21:01:45:88:bb:fe:16:d7:e8:58:96:a3:49:62:
da:74:ef:61:28:55:c2:07:f9:28:b7:61:e2:69:74:
80:73:7a:7c:eb:15:d9:aa:12:d5:6f:61:4b:d5:a1:
f1:34:8f:e3:76:57:d2:cc:dd:e5:9f:53:3f:99:cd:
02:bf:24:9a:d0:4a:13:13:24:5a:02:6a:84:6f:97:
6d:fc:a1:b9:fc:b4:75:76:3c:8e:1c:65:84:38:6c:
7d:67:d0:a5:28:90:f6:40:50:2f:2c:31:a0:99:62:
7c:0d:4c:5e:de:3b:0c:7e:5f:b0:c3:55:c1:4a:bb:
4e:1c:dd:bf:67:84:2c:8b:0e:df:72:39:2d:a9:1f:
c8:ea:c6:31:9b:db:31:16:9d:4c:0e:f4:a4:b6:94:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:6A:AD:E2:2C:3D:7F:86:FC:C4:E3:C6:84:1F:04:F2:CD:66:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A4D3546D5E11EEBFDA10674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.37.0/24
Signature Algorithm: sha256WithRSAEncryption
61:64:8d:a5:9e:ff:c6:8a:63:ce:c0:f9:80:68:74:33:6e:2b:
59:f6:e3:db:28:bd:32:11:ee:b7:71:f1:1e:14:c8:8f:b8:79:
3f:27:0c:8b:3c:98:91:20:24:81:32:81:1c:dc:c0:94:b0:9f:
59:99:5d:a5:88:c5:27:e1:9f:0f:de:ac:50:96:10:47:b5:e2:
9a:93:dc:32:e6:02:8c:a7:17:be:5a:45:8a:a4:d7:21:87:fe:
19:7c:09:35:d8:d5:30:c0:b4:cc:b0:dc:3b:ca:a7:f1:57:a8:
68:59:93:f0:b5:cd:ab:56:b6:ec:e4:a4:fd:8b:76:e6:93:41:
9b:d6:f4:23:14:73:30:3d:bb:fe:84:bd:78:3c:5c:25:90:cb:
f9:8f:c3:74:7f:62:6d:e8:c6:7a:14:e1:a7:05:1c:cd:46:b1:
9e:3f:28:c3:7f:6f:18:48:56:f0:3b:e4:2d:f6:b0:ac:86:41:
8d:99:9d:f3:41:23:8e:76:8c:e2:e1:10:cf:9d:03:7e:a2:64:
fe:dd:1c:ac:f2:3b:f6:0d:ad:9b:0a:df:ea:08:6c:92:1b:b6:
4c:5c:a6:4e:5b:d2:13:cf:8e:83:b6:df:f2:e9:27:ea:33:41:
b3:f2:b1:a0:d6:3f:9a:36:50:64:c0:b2:8d:c1:f6:8f:c7:60:
23:f0:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org