Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21A75C5082BD11EEACD90E394AD9E6FC.roa
File: 21A75C5082BD11EEACD90E394AD9E6FC.roa (raw, json)
Hash identifier: NUgjESMuvanCELTWe6wgfQWrOuCR3H7L3l/OkhuYqr8=
Subject key identifier: 85:8D:84:13:86:60:00:3D:A9:8E:F1:90:A1:7E:83:6F:A6:43:95:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21A75C5082BD11EEACD90E394AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:12:12 +0000
ROA not before: Tue 14 Nov 2023 07:12:09 +0000
ROA not after: Tue 12 Nov 2024 07:12:09 +0000
asID: 397630
IP address blocks: 154.202.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20468 (0x4ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:12:09 2023 GMT
Not After : Nov 12 07:12:09 2024 GMT
Subject: CN=65531dcc-57f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:be:6c:d7:21:e0:0e:bf:9c:c8:73:a9:7a:
77:9b:6e:a6:2a:c1:e4:17:ef:35:91:ba:d9:60:57:
ed:aa:a7:85:1b:af:4d:bd:8a:9f:f8:8f:54:63:e7:
23:56:35:cb:ad:cb:b1:c5:75:2e:42:c1:25:a5:26:
71:23:cb:1b:a9:2e:08:9f:ba:2c:ff:f4:f0:57:6e:
96:ed:63:a4:96:04:3b:19:c5:d9:9e:77:82:a5:9d:
1f:85:2c:79:b2:a4:f0:c5:bb:c5:20:66:49:c8:a6:
5c:63:8c:2e:c2:e7:59:e6:7a:f2:4a:cb:2e:d3:b7:
32:1c:df:0f:68:65:b4:b2:b7:4c:92:52:b7:71:a3:
a0:dd:8f:f9:ef:71:9d:d4:e2:cb:09:7c:d8:f7:47:
06:fa:15:d1:fd:57:37:41:9d:eb:49:4f:25:86:bd:
68:df:94:d7:c8:85:65:b9:fd:3c:c1:ac:f9:c1:ae:
ea:12:0b:4c:88:c0:b7:65:46:8a:11:c8:d8:62:66:
0e:ff:c5:95:39:65:2d:4e:58:70:0d:3c:b7:dd:a4:
58:ce:8f:a9:15:c3:b1:14:bf:56:e9:4e:23:eb:47:
32:cd:70:47:c9:01:80:3b:5d:f3:06:3a:a4:fb:e0:
98:f0:97:fa:05:96:6e:2f:29:6f:57:ce:aa:f8:de:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:84:13:86:60:00:3D:A9:8E:F1:90:A1:7E:83:6F:A6:43:95:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21A75C5082BD11EEACD90E394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ff:34:52:db:5a:18:a2:fe:b7:a1:57:ee:4e:f8:de:e7:50:
a8:07:28:3c:9f:c2:39:ff:f0:f3:c9:3a:7e:a0:8c:22:d1:0b:
e7:da:8f:f3:93:2f:fa:29:eb:eb:d4:b1:15:82:e7:58:16:3b:
fb:b0:ef:03:3b:ae:e2:96:0b:31:8f:4b:e4:2b:0d:33:ee:33:
ad:24:42:e5:de:ab:c5:32:f8:d4:c0:01:69:76:9d:86:e7:05:
ae:10:67:90:19:4b:10:8d:c9:08:02:2c:02:25:fb:53:16:09:
8d:86:62:3e:d5:a2:b1:4a:1f:84:8e:7e:3f:75:1d:ba:47:39:
65:05:ce:b8:63:6d:55:73:fc:4e:a7:8e:04:96:d1:21:9c:80:
f2:fe:6c:ca:bb:57:23:ee:7e:d9:b4:26:70:33:d8:e5:47:64:
9e:4b:db:ae:7e:83:a7:62:6a:9a:e2:2c:b3:1e:db:04:cb:5f:
bf:33:1d:f0:f0:cf:75:af:79:59:3a:cc:f0:61:89:dc:c3:09:
29:52:8a:e1:d9:41:46:4a:f1:39:27:c3:cf:38:c0:65:18:ac:
67:3f:b8:3f:59:ea:c0:ce:06:84:1b:7f:f0:ed:d5:f5:35:6f:
d5:82:f4:5c:6b:6c:5a:71:ca:a5:15:87:ad:89:81:3e:fb:f0:
96:8e:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org