Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229519527FD611EE9FDD516B4AD9E6FC.roa
File: 229519527FD611EE9FDD516B4AD9E6FC.roa (raw, json)
Hash identifier: qFSqFmMafmpxKGFa0t2o0xCDP9jwkNqTihRzgfq2Oak=
Subject key identifier: D5:16:37:20:F5:AA:AF:F2:55:AD:E5:7E:63:D6:42:CB:DF:99:BF:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4E54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229519527FD611EE9FDD516B4AD9E6FC.roa
Signing time: Fri 10 Nov 2023 14:33:37 +0000
ROA not before: Fri 10 Nov 2023 14:33:34 +0000
ROA not after: Tue 12 Nov 2024 14:33:34 +0000
asID: 397630
IP address blocks: 154.84.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20052 (0x4e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 14:33:34 2023 GMT
Not After : Nov 12 14:33:34 2024 GMT
Subject: CN=654e3f41-73e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:e6:48:78:db:23:7a:8d:ff:50:34:16:10:
d9:44:2d:8d:df:14:83:d2:21:da:4c:51:a8:ac:3f:
38:cf:fc:f7:8c:be:20:98:73:a2:a6:a5:90:b2:7b:
d0:ed:ae:bd:8f:c7:ea:f6:8d:61:a4:db:a2:4d:7b:
73:ca:e0:63:4b:74:a6:58:4f:f9:e4:83:9e:ed:be:
38:92:45:63:b3:fc:e5:1d:86:5c:a1:7b:4d:23:de:
3c:78:7f:84:89:e1:82:a7:0f:6c:bf:23:52:5e:fb:
c0:a1:59:15:08:2a:6c:86:8a:e2:31:6a:c5:2b:1a:
55:50:bd:82:5e:4d:12:0a:04:3a:a8:63:30:ca:a6:
65:fd:e2:b4:a8:96:08:36:06:d8:66:e0:33:bf:13:
c9:99:fc:ee:60:96:3f:24:0f:cf:7e:58:2c:e9:3b:
c9:f2:a3:11:da:aa:52:c1:81:3c:c4:4a:5d:51:46:
04:98:51:0e:5a:3b:25:78:77:ca:2a:05:40:34:4e:
b8:7d:8a:79:64:0e:a9:17:7a:66:2d:a7:cb:c8:f8:
ce:20:1b:a1:3e:5c:48:53:0c:cb:34:86:15:d9:29:
95:63:6b:43:77:bf:a5:d2:c8:23:d4:f1:5a:fb:42:
3e:62:63:73:d0:16:eb:4d:1a:20:d9:2b:00:96:c3:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:37:20:F5:AA:AF:F2:55:AD:E5:7E:63:D6:42:CB:DF:99:BF:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/229519527FD611EE9FDD516B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:30:87:8a:ce:88:61:01:b1:89:e2:a5:ab:0e:aa:7d:63:af:
b6:30:8b:f7:ae:18:1e:10:70:80:a7:3e:5e:63:bb:56:fd:ae:
f0:a0:c2:bf:0c:bc:b8:33:77:3d:b1:52:97:08:a0:09:8d:c6:
75:42:66:ca:f3:c1:99:59:f2:9a:2d:4b:46:a0:89:61:b2:80:
6c:6e:c8:f5:22:7c:72:02:6e:74:11:c1:de:cb:5c:48:c3:fb:
59:a8:14:a1:f5:68:16:6b:a4:40:2f:0d:19:0c:1c:34:73:17:
59:eb:6b:44:14:ea:e3:00:9a:38:a0:cf:2b:8a:c4:4d:78:43:
5b:d5:f3:68:dc:4b:80:9d:f8:1b:e3:68:08:a0:8b:8f:49:29:
8b:de:73:35:42:51:18:5b:29:2b:26:5e:b8:f5:86:39:97:69:
f3:5d:23:2d:a4:63:b9:12:c1:d7:58:b9:dd:d3:e9:18:f2:8c:
7b:f1:ef:ae:6b:a5:81:c7:f2:3c:5d:24:03:3e:ca:db:bd:99:
03:f5:c0:a7:d3:df:84:e8:9f:62:58:ed:c5:d1:27:c9:da:d4:
f6:02:77:b3:7c:0f:35:da:af:f9:68:ad:0e:fe:06:93:91:10:
0d:4a:10:6e:7f:7f:16:58:d6:fd:9b:4b:65:9f:e0:4a:53:eb:
66:f9:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org