Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34685E2A278211EE9B186C1E4AD9E6FC.roa
File: 34685E2A278211EE9B186C1E4AD9E6FC.roa (raw, json)
Hash identifier: CI/NLH/8x3wCukmoGZMDDyIc7vkAgsMfn99dgHo3U7w=
Subject key identifier: CF:A7:6F:E8:0F:DB:E4:AE:1D:A9:4D:E4:BF:3D:81:D2:18:F4:20:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 339D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34685E2A278211EE9B186C1E4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:51:07 +0000
ROA not before: Fri 21 Jul 2023 04:51:04 +0000
ROA not after: Thu 13 Jun 2024 04:51:04 +0000
asID: 5065
IP address blocks: 154.212.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13213 (0x339d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:51:04 2023 GMT
Not After : Jun 13 04:51:04 2024 GMT
Subject: CN=64ba0ebb-2d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:a5:9e:21:47:e6:a0:cb:82:e9:b0:78:1b:
e9:a0:4e:8c:3c:54:c8:ca:b3:cd:04:9b:a9:8f:3e:
ae:b5:52:0b:49:13:0c:ef:81:84:73:51:2c:30:89:
79:72:5b:c5:d1:9d:66:5b:17:35:c1:8e:a2:fd:30:
f4:bd:fd:43:8a:d0:ab:82:6a:1a:2a:3f:3f:76:f0:
4a:2b:57:85:f6:24:43:25:f3:9b:21:fb:4b:3b:25:
f0:fb:cd:08:e2:4f:2a:ae:30:d3:74:5a:03:88:49:
56:4a:4a:d5:80:04:0d:a8:46:9b:05:e5:44:94:d9:
30:8a:2b:f4:b2:ba:8c:9e:d5:0b:9c:65:78:e1:1e:
90:ce:52:02:2d:10:c2:02:6c:5d:9d:fe:47:a1:d8:
1c:d3:ef:03:ef:7b:17:6c:c0:4e:f9:f4:af:07:5e:
ac:a4:c9:e9:11:01:a8:83:25:ea:9e:da:cb:16:9e:
a3:c8:21:86:06:f6:77:07:e4:e8:b3:e8:43:f0:b3:
c2:2f:3a:7c:83:7c:ec:65:bd:1b:d2:6a:72:45:10:
55:fb:4f:35:f5:ff:a0:df:32:74:82:bd:63:0c:57:
9a:ca:a6:9d:54:dc:e5:1a:b0:07:b7:18:19:f8:58:
97:20:c6:29:8c:24:86:5f:18:f4:10:ad:f9:58:af:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:6F:E8:0F:DB:E4:AE:1D:A9:4D:E4:BF:3D:81:D2:18:F4:20:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34685E2A278211EE9B186C1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.23.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:42:e6:aa:2f:77:6f:36:fe:eb:74:3d:cf:9d:70:cd:eb:
f1:87:4a:97:39:17:b3:2b:a2:85:fb:88:30:16:af:62:9a:6d:
d8:46:ab:49:31:4d:fa:89:1c:27:69:fa:2c:de:1f:0b:47:66:
a6:8c:d1:19:78:0d:70:a4:51:b8:b6:4d:31:f9:2b:6f:91:a2:
bb:c9:65:31:39:a3:42:19:7e:ad:ea:a6:2f:fa:ac:8b:0b:a3:
d4:95:0b:22:36:3d:de:83:2b:c7:11:14:71:b3:22:9e:2f:97:
09:b5:af:a6:f7:ff:76:cd:67:15:19:4e:eb:1c:73:ef:e5:bd:
cc:62:8b:27:ab:6c:ea:aa:17:c6:a0:39:fd:f9:c4:75:7d:dd:
b5:ac:da:f2:89:a7:8a:6d:30:82:55:43:7d:5d:06:3e:02:20:
69:57:e8:a0:f4:d5:01:95:33:c3:f9:40:b2:24:bd:c8:34:19:
27:f7:db:11:62:77:73:b5:5a:b4:a3:21:aa:cc:44:00:68:71:
a1:4b:8b:73:13:c3:9b:7f:1c:3d:78:50:01:3a:69:c2:f1:ec:
f4:6d:58:a6:c0:83:ac:dc:24:19:95:c8:94:7a:32:59:e2:e1:
99:ef:da:56:51:26:af:0f:36:99:a7:e8:11:42:83:59:ea:df:
66:e1:ee:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org