Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18EA8B7C37FA11EE881E01304AD9E6FC.roa
File: 18EA8B7C37FA11EE881E01304AD9E6FC.roa (raw, json)
Hash identifier: aO4lbjb2yzVeIfvMaduvRRfDJOs6qarf3K5aaRGTZ8c=
Subject key identifier: ED:87:58:25:04:72:8B:AB:11:9A:68:32:00:FA:D2:61:A8:6D:CA:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 35B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18EA8B7C37FA11EE881E01304AD9E6FC.roa
Signing time: Fri 11 Aug 2023 03:49:39 +0000
ROA not before: Fri 11 Aug 2023 03:49:35 +0000
ROA not after: Wed 24 Jul 2024 03:49:35 +0000
asID: 58073
IP address blocks: 154.84.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13749 (0x35b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 03:49:35 2023 GMT
Not After : Jul 24 03:49:35 2024 GMT
Subject: CN=64d5afd3-85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:52:0d:01:00:d2:68:10:b6:b6:32:ac:f8:
d3:cb:b5:d6:89:74:af:aa:2f:2a:ee:a8:80:18:89:
a3:c8:50:19:9a:33:37:5b:20:c8:9b:0b:70:83:48:
76:52:f6:e4:77:c9:94:26:32:ec:ac:93:82:91:89:
fc:73:1f:a5:fd:de:40:cb:08:be:5b:a8:58:01:4d:
03:58:19:d1:88:75:da:70:57:1d:fa:cd:c5:f5:94:
63:27:99:a4:ca:58:d1:4b:d3:3c:e5:04:52:0f:b3:
02:d1:29:95:06:d7:b8:b6:72:b0:7c:80:cc:e6:08:
a9:94:b5:10:67:4e:17:0c:46:2d:c4:e2:74:67:3d:
0e:85:2b:bf:74:a0:73:fa:6f:d8:aa:f8:c1:73:76:
05:c3:9f:25:6d:b5:1f:a7:1e:76:2c:bc:12:53:6d:
4b:f7:0d:0c:43:c7:7c:3d:80:c5:cf:ea:70:27:c7:
a8:a4:9e:48:8f:a7:54:ec:f5:f8:2d:9c:8a:7e:35:
75:aa:25:25:8f:9c:4d:b8:8d:0e:65:76:4f:69:7f:
5f:f4:d0:a0:25:65:45:78:22:96:ee:0e:a5:6a:a9:
1e:78:59:28:57:28:70:3f:c2:ca:b2:4c:38:42:7b:
24:35:c9:54:88:9e:78:4a:41:2c:7c:9e:2c:3f:4a:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:87:58:25:04:72:8B:AB:11:9A:68:32:00:FA:D2:61:A8:6D:CA:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18EA8B7C37FA11EE881E01304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.1.0/24
Signature Algorithm: sha256WithRSAEncryption
44:19:bf:e0:87:b0:9f:c0:b4:c1:4f:74:c7:55:ef:c9:db:90:
b3:25:e3:b0:e6:38:d8:85:dc:36:3b:f6:77:0f:33:37:5b:e1:
0b:32:0f:7d:96:6e:a3:7b:d2:37:3e:b3:49:ef:74:63:6f:0b:
52:17:9a:65:d0:db:b9:cc:59:ae:db:21:ba:ae:fb:1a:b5:ee:
4c:75:0f:66:fa:11:44:4c:68:ca:3a:72:ec:65:eb:fa:23:61:
68:ef:d7:77:f3:62:18:3d:05:fa:b8:04:b5:6e:cf:e5:4d:a1:
ce:72:5f:6d:b9:f2:b7:25:17:c6:02:ff:35:7e:e9:bb:d8:aa:
89:1a:12:31:13:ea:2f:46:1d:7c:47:50:38:50:3a:2d:d3:58:
7e:82:e6:1c:3a:9f:e9:df:1e:9e:73:1c:6d:aa:d1:2c:1d:59:
15:77:f2:11:01:0e:a4:4a:56:3c:34:4a:a4:85:22:7a:3c:00:
80:d2:1f:7b:11:0b:e1:a2:54:f7:e7:39:c1:82:94:68:bb:ba:
04:b3:af:78:6e:d6:5e:7d:ff:62:34:34:f5:90:78:a3:d4:8f:
4f:d9:5c:ae:eb:29:e5:51:dc:e7:60:95:64:fa:22:48:ef:18:
4e:e5:46:be:c4:a8:4a:ad:83:ea:f1:f7:3e:c7:cc:ee:1c:c8:
2a:12:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org