Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28751C0082BA11EEBE08C02F4AD9E6FC.roa
File: 28751C0082BA11EEBE08C02F4AD9E6FC.roa (raw, json)
Hash identifier: kRBs/WDyAVDe63tuwTWptwskNDVl4Xliq7QzPIOrasA=
Subject key identifier: 3B:5C:53:05:FA:0B:A4:D5:85:87:BB:0A:FF:DA:D0:E1:CE:7B:5A:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28751C0082BA11EEBE08C02F4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:50:55 +0000
ROA not before: Tue 14 Nov 2023 06:50:52 +0000
ROA not after: Tue 12 Nov 2024 06:50:52 +0000
asID: 397630
IP address blocks: 154.202.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20442 (0x4fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:50:52 2023 GMT
Not After : Nov 12 06:50:52 2024 GMT
Subject: CN=655318cf-8bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:4f:ae:d6:cb:c7:3b:14:07:28:18:34:7a:
61:90:a1:45:da:71:92:01:e6:8e:a6:d3:60:94:fd:
d4:d8:fa:23:e1:c8:6c:0d:e8:59:4b:d8:ca:a2:8c:
1b:11:f1:f1:b3:ea:e2:09:a4:a7:42:ec:20:2c:e4:
d3:33:8c:b8:b6:ca:b4:98:99:ae:81:4c:f7:f0:43:
fa:95:45:43:aa:98:8c:91:17:8b:c3:9f:0e:8d:d6:
e6:bd:d6:7b:e7:72:23:c8:78:52:dc:86:91:a4:c8:
c0:0e:a8:68:df:79:4f:aa:8c:2a:b0:b2:89:58:14:
e9:b9:10:19:fb:28:80:f8:02:0d:0f:37:30:db:00:
13:77:0f:2a:7b:51:13:62:39:3e:f4:7a:28:87:6f:
aa:db:de:98:af:30:3f:4e:3e:1c:ca:b9:7a:db:19:
22:7e:80:d2:64:e5:ac:7a:fb:e3:e6:c6:ea:3d:a0:
c2:0f:6c:a9:03:22:4a:d4:c5:7a:2b:97:e4:98:f1:
48:59:d9:49:20:78:74:98:a9:e4:01:b7:dd:05:05:
22:04:86:69:6a:2f:8b:3e:e1:76:6c:6e:d0:ff:e3:
f0:a3:14:64:f2:09:38:cd:30:10:6e:73:11:38:52:
a2:07:76:cd:18:00:8d:e4:a1:bd:26:7b:93:f5:27:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:53:05:FA:0B:A4:D5:85:87:BB:0A:FF:DA:D0:E1:CE:7B:5A:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28751C0082BA11EEBE08C02F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.103.0/24
Signature Algorithm: sha256WithRSAEncryption
41:37:5b:a3:33:d2:df:bf:86:2d:3c:db:98:d0:7a:30:3b:6b:
57:ba:5c:6e:61:b8:91:39:ec:b9:1c:c3:44:90:46:75:75:b1:
50:00:72:cd:50:f3:f3:c2:0a:8b:1c:48:af:14:a0:23:55:15:
2b:96:e9:77:46:7d:e1:43:6e:a8:7d:16:a8:5f:a4:25:cb:97:
a3:2e:ac:b2:c0:bf:d1:63:5d:d9:be:42:f5:52:65:d2:a9:4a:
65:bb:eb:38:25:2a:26:92:68:2f:c7:64:a5:cc:6c:59:c9:f7:
83:b8:e0:53:3a:9e:85:61:42:f0:1d:62:4f:f0:c4:d0:1c:27:
d8:44:69:c9:53:e8:42:5c:11:3b:31:b6:53:2d:25:c0:9b:ee:
47:20:b1:1f:98:75:e7:67:6b:ba:bc:6e:79:f7:a2:20:91:dc:
24:73:cf:0f:b1:8c:68:5a:41:b9:2d:da:54:af:af:38:1a:27:
d0:48:6a:aa:bf:7c:3c:af:c0:f5:1c:f4:3b:5d:21:4d:07:2e:
ce:19:21:1f:b3:37:87:9c:15:f0:12:a6:6c:8e:70:09:6e:23:
36:2c:e1:46:dd:82:17:3c:e9:eb:45:18:36:29:da:79:22:13:
b2:af:70:a1:1a:a8:2b:74:36:64:a4:cc:22:28:ef:f4:39:38:
09:6f:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org