Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFEF70CAA1B11EE86DA2052775412E6.roa
File: 1FFEF70CAA1B11EE86DA2052775412E6.roa (raw, json)
Hash identifier: mFgSRQnHPYql4Sr/BBXMFo4Nu2XiBa5/wDfsGy6EpVU=
Subject key identifier: 12:C4:4D:FE:94:BD:E0:6B:96:9C:BA:C2:50:65:20:B4:0E:4A:A2:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6DA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFEF70CAA1B11EE86DA2052775412E6.roa
Signing time: Wed 03 Jan 2024 09:33:17 +0000
ROA not before: Wed 03 Jan 2024 09:33:14 +0000
ROA not after: Thu 02 Jan 2025 09:33:14 +0000
asID: 18233
IP address blocks: 154.197.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28068 (0x6da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 09:33:14 2024 GMT
Not After : Jan 2 09:33:14 2025 GMT
Subject: CN=659529dd-365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:63:ef:60:b4:4a:ba:74:03:62:72:c6:09:
19:b2:46:fb:77:cf:84:13:31:01:e9:b6:50:60:59:
23:b8:f3:0c:1f:60:b7:82:dd:1d:53:61:85:03:15:
7e:04:1b:2c:d6:83:69:e0:05:d5:39:60:80:df:08:
89:82:7f:51:21:87:cf:b1:e9:82:e3:bd:32:33:29:
01:7d:e6:a0:d7:77:cb:d5:39:05:04:e9:0b:ef:6a:
02:a2:9a:15:1b:99:8e:27:f1:8b:16:e1:71:66:cd:
57:c8:22:7a:a4:b6:56:bb:0a:83:be:fa:50:4d:2a:
fa:96:be:14:cc:53:dd:4c:64:7c:4e:ef:15:6b:07:
1c:10:5f:fe:82:5c:c9:75:07:be:f9:8d:3f:19:9f:
38:e3:a6:7c:73:e1:07:40:08:b2:30:64:ad:65:20:
0e:a1:75:d6:80:7b:6f:6a:b3:e9:84:12:13:0e:30:
ce:b5:f9:9d:0b:ee:a1:4f:1f:b1:09:9e:9e:58:13:
b8:56:3d:ce:aa:e6:15:09:89:86:4b:36:c0:6e:cc:
b5:f2:1d:3d:9a:1e:58:33:7b:5a:99:24:c6:58:5c:
25:07:a8:c4:ca:29:77:f9:66:c3:d4:37:50:24:1b:
bf:2e:e5:a5:00:f1:8b:68:d5:7a:b4:25:fd:d1:de:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:4D:FE:94:BD:E0:6B:96:9C:BA:C2:50:65:20:B4:0E:4A:A2:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFEF70CAA1B11EE86DA2052775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0f:af:ee:fc:1b:8e:f6:a5:80:46:11:ea:fd:16:89:54:23:
c1:e1:7f:65:1a:fc:15:0c:04:bd:41:da:a1:63:0b:da:28:3d:
fd:73:a6:4f:80:27:ce:f4:c5:17:c7:7c:a8:5a:cc:46:96:c6:
c9:24:f5:09:c6:3b:fc:5c:26:c5:47:96:ad:ed:1f:43:51:69:
80:48:38:98:d0:5b:2f:93:2a:71:c6:28:d3:4c:59:90:71:f7:
32:6e:57:7d:a6:cd:d4:9e:dd:22:76:8e:7c:60:e9:9a:4b:37:
78:61:ac:c7:3d:82:d1:6d:22:02:89:fa:e8:d1:a3:39:34:f9:
6e:af:04:1e:f3:86:e7:6d:a6:7b:e7:59:02:df:44:01:0e:75:
d6:26:25:60:f1:3f:c6:42:cb:b8:61:81:6f:44:c1:69:fd:bf:
8e:f5:87:46:b1:81:29:65:f9:50:86:2b:47:5c:2b:55:03:74:
05:0a:1a:2d:8d:83:1a:c8:43:76:aa:4d:16:56:66:5b:d5:f2:
c0:b5:47:dd:1c:ad:9d:a8:74:82:7a:18:d0:15:13:aa:1b:62:
bf:db:e3:3d:72:d5:3f:6c:c7:fb:d9:fe:42:bd:f4:cd:98:a8:
3e:98:d1:9a:f5:0b:46:ed:33:27:a6:f1:c2:b1:e4:31:7d:75:
1f:e2:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org