Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D54B886FE9711ED86D3AD494AD9E6FC.roa
File: 2D54B886FE9711ED86D3AD494AD9E6FC.roa (raw, json)
Hash identifier: 01yKjzb+5dJpyG9YHuW8E6BDOaE0ZE8j5LhYUV7wyuw=
Subject key identifier: 68:4B:E4:5A:13:B2:81:4A:15:90:F3:E9:33:79:79:15:AE:F3:7A:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 283C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D54B886FE9711ED86D3AD494AD9E6FC.roa
Signing time: Tue 30 May 2023 03:07:57 +0000
ROA not before: Tue 30 May 2023 03:07:53 +0000
ROA not after: Wed 15 May 2024 03:07:53 +0000
asID: 63888
IP address blocks: 154.207.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10300 (0x283c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 03:07:53 2023 GMT
Not After : May 15 03:07:53 2024 GMT
Subject: CN=6475688d-ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:14:3e:bb:65:13:2b:a0:01:0f:c6:4a:b8:
75:44:3f:f3:34:1b:fb:90:c1:d9:fe:16:37:2d:de:
df:da:b8:a4:75:59:52:8a:87:51:65:4e:56:70:33:
22:ce:08:8d:0b:cd:47:b7:c4:11:07:26:d9:a8:03:
59:03:74:5f:10:f9:00:b0:d5:c2:6d:10:07:c4:7f:
91:b7:e1:cb:31:af:68:e0:4f:38:22:a7:cb:b1:70:
d7:cb:8e:03:09:47:85:9b:60:d9:9d:96:7b:92:65:
2b:30:33:41:b5:63:44:86:22:80:4e:42:86:57:ca:
d4:41:65:58:7b:94:27:e7:c2:bb:c5:6f:00:6f:a9:
82:1c:68:4e:a4:cb:28:ce:07:e5:45:eb:8e:ae:57:
67:c9:6d:d7:63:4e:c3:56:d4:ce:87:a8:ad:a8:52:
19:ec:fe:e8:29:c7:5d:cf:d8:8c:d4:38:85:2b:b0:
5b:48:18:1a:87:94:44:9b:00:de:c1:9e:e5:f5:c1:
5a:54:30:71:09:3d:26:5a:ea:fb:13:b9:23:7d:43:
74:b0:c4:78:eb:94:fe:ae:1c:27:a5:89:e0:b5:bd:
b5:3b:3f:a4:71:4e:bc:89:ef:ba:65:7b:45:b7:d5:
b1:ba:84:db:12:1a:c2:96:b3:2a:40:2d:08:20:5f:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:E4:5A:13:B2:81:4A:15:90:F3:E9:33:79:79:15:AE:F3:7A:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D54B886FE9711ED86D3AD494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:40:01:da:f4:98:20:6f:dc:e3:e1:1c:cf:a4:aa:f0:59:ec:
c1:61:f2:0b:8c:df:41:de:29:f6:0e:f5:48:51:b4:89:cf:ca:
95:e6:48:af:7e:cd:09:94:ee:1d:89:00:4c:ab:e8:c7:db:bd:
ce:7d:fb:95:0c:79:c6:b2:50:07:23:ac:cc:c7:a7:8a:1c:28:
99:21:4d:ef:d7:0a:77:46:60:10:8d:0a:ef:e9:9a:17:d3:8d:
bf:fa:c5:dd:20:b3:c4:61:4a:73:8c:aa:cc:41:54:16:f0:38:
8b:2c:47:ef:5e:5a:0d:a7:36:aa:30:11:79:e2:f7:1c:19:3d:
a6:df:21:7f:7a:9e:ff:bf:94:aa:11:2f:6b:7a:79:1f:9e:d7:
ab:0e:45:e5:89:e7:4a:51:9e:76:dc:5b:90:e3:c4:c0:70:c0:
e3:fc:1c:57:17:f8:33:b6:3b:3b:3e:4d:0c:c0:0c:d1:fe:03:
3f:af:94:b4:61:3b:f5:f2:d0:0f:19:29:19:56:28:c0:51:6c:
6b:47:1f:6e:61:dc:2b:ac:27:e1:a9:3f:55:82:f7:02:03:c5:
bf:87:62:2e:85:9d:15:02:6b:ec:f9:c3:fe:b8:c7:0c:eb:77:
55:ac:7f:a1:bd:d5:10:9e:6e:f3:e1:f2:95:a2:23:71:35:e3:
bf:f5:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org