Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25D4AEBCFEA211EDAE315E6C4AD9E6FC.roa
File: 25D4AEBCFEA211EDAE315E6C4AD9E6FC.roa (raw, json)
Hash identifier: mUqRTcSBxPLBH2Ww3e76gW1aVtdG0gY4uDz5Dm3s9Kw=
Subject key identifier: 15:80:96:3F:E1:A4:24:EA:90:C0:9A:2D:7E:D4:9F:3D:0D:80:2D:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 286A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25D4AEBCFEA211EDAE315E6C4AD9E6FC.roa
Signing time: Tue 30 May 2023 04:26:29 +0000
ROA not before: Tue 30 May 2023 04:26:25 +0000
ROA not after: Wed 15 May 2024 04:26:25 +0000
asID: 63888
IP address blocks: 154.207.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10346 (0x286a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 04:26:25 2023 GMT
Not After : May 15 04:26:25 2024 GMT
Subject: CN=64757af5-0650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:e8:de:36:d3:c5:ad:c2:13:ce:7c:57:1e:
86:0d:fb:97:d0:01:5e:03:5c:35:78:97:cb:1c:10:
e9:4b:9f:1e:a9:8c:c0:0c:cc:ea:97:f1:8a:37:c6:
ff:53:91:d2:1f:fd:52:a1:39:2a:56:bc:fa:c0:3b:
90:5d:b5:09:fa:7d:85:df:44:ca:8f:c8:37:52:f5:
7e:c2:ae:42:d2:a0:ef:d6:ea:ea:ad:4a:b8:98:bf:
74:17:57:e0:7d:3e:0b:f5:d1:4c:59:bb:47:62:bc:
65:ea:5d:3e:3a:b1:7d:01:f9:23:53:7a:5e:70:6d:
10:14:fb:46:92:7a:5b:a1:d6:ef:04:4b:06:5f:f3:
35:71:4d:a6:a6:93:a7:ba:0a:e6:12:e2:65:2a:c1:
86:10:47:c4:8e:65:6a:f0:10:a4:22:99:76:9f:41:
d4:e7:4a:7d:1b:bf:90:47:eb:07:52:d3:8b:ed:32:
71:c2:10:3c:5b:70:1e:5c:96:68:67:4a:90:0d:52:
37:96:5b:d2:9d:f4:9d:8d:a0:c4:52:03:b7:4f:e3:
10:b4:96:ec:8e:d1:ff:4c:92:42:e3:ad:53:e0:f5:
ac:ea:71:58:e0:0b:22:c5:6e:2a:be:c8:10:b9:5d:
b3:65:a8:33:f3:d6:3a:34:3a:9b:95:1f:fe:6d:31:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:96:3F:E1:A4:24:EA:90:C0:9A:2D:7E:D4:9F:3D:0D:80:2D:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25D4AEBCFEA211EDAE315E6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.142.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b2:4a:d2:65:c2:e4:93:49:40:6f:cb:c0:c2:b8:f6:16:42:
53:1d:f9:92:dc:da:e2:6f:df:d0:0f:f9:8f:cc:3a:4a:31:9d:
66:6e:1b:1f:96:aa:8e:2f:f9:e5:c5:49:21:ca:d3:39:07:c6:
b6:56:74:15:fe:62:dc:37:da:ac:88:e4:29:14:ec:82:6b:8d:
45:b5:49:69:14:7a:73:e1:14:6e:35:e6:8f:43:10:e6:98:e4:
2c:f8:b4:99:df:f5:e6:b1:08:f5:6d:60:09:15:27:57:45:56:
48:06:f9:a5:7e:39:3d:87:45:f2:26:a3:1d:5b:f7:85:99:c0:
79:1f:91:b0:89:93:8a:fe:ab:e5:96:ec:a7:72:08:99:77:ea:
34:cf:98:95:ff:72:77:18:1b:e8:ae:b7:95:fe:af:65:16:d9:
ac:cb:e9:92:fe:19:fc:09:b2:e2:75:12:3f:4a:b9:ab:e5:f0:
0f:29:0a:a8:8b:01:66:0f:48:b6:36:70:5c:23:56:6f:ea:ab:
6c:42:46:ca:e1:af:af:d9:24:cf:32:79:51:2c:c9:f6:7b:f5:
fa:5d:5b:90:6d:d9:27:d2:52:9f:bb:3b:e2:fa:ec:20:d8:a5:
3f:cc:e9:9f:62:8a:aa:28:e1:f5:ac:a0:da:8f:91:a1:ec:ab:
7d:b6:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org