Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3586777C417911EEB0C3AC884AD9E6FC.roa
File: 3586777C417911EEB0C3AC884AD9E6FC.roa (raw, json)
Hash identifier: vqRsbEheNNsYplapXpCbi1ld95r1hLO4aX6L+/Vf7Wk=
Subject key identifier: 0D:B9:7C:5D:DB:68:A4:BD:99:62:99:4A:AB:F6:61:22:9E:E2:E5:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3797
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3586777C417911EEB0C3AC884AD9E6FC.roa
Signing time: Wed 23 Aug 2023 05:52:14 +0000
ROA not before: Wed 23 Aug 2023 05:52:11 +0000
ROA not after: Sat 24 Aug 2024 05:52:11 +0000
asID: 5065
IP address blocks: 154.86.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14231 (0x3797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 05:52:11 2023 GMT
Not After : Aug 24 05:52:11 2024 GMT
Subject: CN=64e59e8e-d3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:70:59:12:bc:f4:aa:10:ed:17:b9:2a:2e:
be:4a:e5:66:6d:38:fe:b4:ed:13:5d:6d:ed:7e:83:
ec:9f:df:7a:93:76:b5:79:f7:19:93:d9:40:28:cc:
f3:b9:76:6a:3a:06:12:d4:41:46:4a:33:ca:9c:57:
50:4b:4d:42:e1:4d:53:72:10:39:23:47:6f:cb:bb:
49:d0:d6:49:3f:51:fb:d6:b0:bc:6b:2f:1b:29:c3:
37:bd:e8:ac:0a:8c:e2:dc:2d:a5:00:67:48:14:85:
f0:e4:69:1b:bb:d9:33:b2:28:7e:c5:4f:8f:fe:42:
65:18:0b:0e:25:7f:02:66:d0:20:19:b7:a4:83:a4:
30:d4:44:25:79:86:fe:3e:e2:c1:6b:c1:0e:3c:41:
ac:8f:a5:c1:73:d9:a2:7f:5f:08:38:72:4b:48:9e:
81:f3:39:4f:5d:ff:1c:7f:4a:f1:bd:f8:9b:d3:c9:
05:7b:30:4a:7d:6f:4d:8a:10:ea:79:00:5d:c5:07:
8b:02:e4:8b:6c:09:4b:ac:c2:94:d3:c2:12:30:02:
3b:7e:32:39:ed:4e:c2:ac:1d:4e:fe:7b:45:0c:28:
59:94:c8:17:cd:c6:99:bc:9e:bf:48:d0:93:69:0c:
3c:19:d1:b9:38:aa:53:a8:0a:df:d0:38:52:c7:92:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:7C:5D:DB:68:A4:BD:99:62:99:4A:AB:F6:61:22:9E:E2:E5:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3586777C417911EEB0C3AC884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:7d:a3:49:6f:e4:8d:cd:30:e9:f1:86:38:c6:64:8e:bf:
9f:e3:70:56:d1:7c:49:96:23:44:00:54:38:3e:66:6d:ea:cb:
2c:2a:29:5b:f2:42:1c:d8:ef:5f:24:95:eb:94:01:8b:ac:4e:
d0:bb:de:9f:7d:20:8d:26:01:41:5c:ff:91:12:2c:a6:e5:cc:
9e:5b:0b:56:00:d1:3b:81:34:9f:36:75:8f:dd:e7:30:26:8f:
bd:23:25:bf:c5:ad:c6:11:2c:37:85:b5:11:e9:b9:00:69:dd:
5f:1f:5a:ea:b4:30:25:87:d6:fe:83:65:07:4a:88:ac:fd:71:
53:05:47:22:56:b1:aa:ac:c7:e5:3d:30:d2:a1:9e:45:5a:86:
c1:95:09:de:73:0e:40:42:9b:65:90:74:0d:99:65:29:06:3d:
dc:8a:3f:34:20:f0:da:0d:bb:41:7a:10:66:97:c1:17:40:3e:
c5:14:08:f4:5a:7c:e0:91:59:b1:ad:95:36:40:21:8a:f7:1a:
ac:62:76:a1:9a:a1:0f:77:33:13:43:a3:8f:63:d0:50:9c:52:
05:99:2b:f0:c8:2f:02:fe:02:33:a7:ac:b2:e5:31:0a:3f:c4:
8c:00:3b:97:ce:ed:cc:b0:e8:e0:fa:89:d4:d6:36:ee:5a:a0:
65:fe:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:20 2024 by rpki-client on console-fra.rpki-client.org