Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17314EF65111EE81157E82775412E6.roa
File: 3B17314EF65111EE81157E82775412E6.roa (raw, json)
Hash identifier: l1gDSxSv/fCslMBvphzZ6Wz+hklbeTLhZ+5nWMJBHbE=
Subject key identifier: CD:F1:1B:7B:B9:F8:FF:EF:2C:66:5C:23:C2:10:5E:CE:D0:90:42:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AA5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17314EF65111EE81157E82775412E6.roa
Signing time: Tue 09 Apr 2024 09:12:04 +0000
ROA not before: Tue 09 Apr 2024 09:12:01 +0000
ROA not after: Wed 08 May 2024 09:12:01 +0000
asID: 209242
IP address blocks: 154.197.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43613 (0xaa5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 09:12:01 2024 GMT
Not After : May 8 09:12:01 2024 GMT
Subject: CN=66150664-4bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:5e:e3:67:70:29:9c:d5:08:be:79:d5:28:
68:2a:d4:42:74:ef:55:66:df:ff:89:6d:f9:77:a2:
7a:25:6a:ad:ae:5c:6e:f6:f3:0d:da:97:47:01:74:
b8:68:7d:f5:13:77:00:b4:2f:de:94:a2:89:63:56:
97:b9:bf:ad:64:28:f9:9f:db:8f:0c:c1:a3:7a:94:
c9:48:b1:ab:d1:76:16:66:c7:5c:8d:94:fe:18:ec:
84:3d:49:c3:02:34:34:f2:e9:0e:25:f0:0e:20:cd:
8a:ee:af:54:73:ab:db:4a:74:af:42:4c:5c:56:b5:
64:43:30:68:41:87:1f:11:1c:2f:65:3d:1d:e0:1e:
83:0a:c5:69:d3:3f:2b:d1:96:d9:4c:5b:25:68:76:
0b:22:e7:f5:34:e8:c2:de:5f:ac:ed:21:a9:9d:d2:
ce:ef:03:2f:a2:9e:7e:e2:d9:e8:4b:6d:8a:86:66:
ab:e0:90:2b:1b:31:b7:9e:67:df:fd:94:d8:5b:84:
f2:d8:71:91:21:79:3c:bb:84:71:2d:83:20:cd:8a:
1f:cd:5b:01:4b:42:8d:4a:d4:23:11:1f:b4:b4:2e:
6d:92:fb:c0:44:a2:d8:a0:7b:47:cf:26:d4:1b:b6:
76:9a:4d:0b:73:f4:60:05:1f:80:53:cd:cf:d6:61:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:1B:7B:B9:F8:FF:EF:2C:66:5C:23:C2:10:5E:CE:D0:90:42:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17314EF65111EE81157E82775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ec:bc:24:ad:74:8a:b0:16:ff:2c:2a:a4:7c:38:b2:c0:15:
6d:fa:7e:b7:c8:cd:7a:ee:fe:57:13:19:e7:0d:3c:12:12:da:
2d:05:cf:38:9b:9d:30:75:53:6c:b0:dc:bf:fe:2c:84:b2:87:
bb:9c:f8:e7:c7:f1:10:d1:59:e3:71:48:a6:65:48:1b:61:4b:
e0:c5:2d:d3:76:9d:89:2b:0e:a9:8e:5b:28:fc:51:cd:ee:a0:
20:7a:44:82:63:24:78:7b:a4:12:2b:c5:db:5d:bc:a4:84:57:
3a:88:67:17:29:75:5a:58:6a:aa:db:0b:db:ec:05:dc:0e:67:
2d:be:a6:60:98:16:6a:e9:f9:77:46:72:df:17:ad:be:e9:d8:
6b:c1:76:1c:27:bc:05:eb:0e:66:c4:ec:6f:d0:91:cd:5e:26:
f6:64:cd:4d:7a:52:65:7d:9f:28:62:e2:ed:41:0a:c7:3a:91:
62:4c:4e:a9:56:dc:f8:79:64:8a:c2:57:37:ff:a0:f9:e5:99:
98:d7:f4:38:1b:b9:52:ed:80:20:d2:dc:92:35:32:c0:e4:52:
a4:bd:81:81:0e:ec:46:37:6b:75:51:9b:da:16:cd:5c:cd:83:
ea:c8:1b:c7:c4:32:7f:e4:b3:14:e0:25:48:a1:fd:2a:63:35:
bb:b2:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org