Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F35FB7886AF11EE92519B4D4AD9E6FC.roa
File: 3F35FB7886AF11EE92519B4D4AD9E6FC.roa (raw, json)
Hash identifier: Fv7vdXZAf/BoprVXv2b/GHYbhozwkH1orxScXTiTB5c=
Subject key identifier: 36:5D:57:58:51:D3:C4:C7:92:75:6A:2D:BE:C1:F7:88:DE:00:4F:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5113
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F35FB7886AF11EE92519B4D4AD9E6FC.roa
Signing time: Sun 19 Nov 2023 07:42:53 +0000
ROA not before: Sun 19 Nov 2023 07:42:50 +0000
ROA not after: Sun 19 May 2024 07:42:50 +0000
asID: 132825
IP address blocks: 154.93.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20755 (0x5113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:42:50 2023 GMT
Not After : May 19 07:42:50 2024 GMT
Subject: CN=6559bc7d-f74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:e2:54:d9:c9:63:8e:04:e1:81:13:07:ba:
16:91:f0:ed:e6:04:eb:d6:9f:31:5d:b7:07:89:d2:
85:d2:e8:58:67:8a:16:d7:ac:e0:a1:14:02:46:e2:
37:49:bb:c1:0f:fe:9d:5e:ee:07:38:b8:cf:5f:da:
59:ca:4b:10:6d:2d:b2:bb:73:02:3b:58:ba:7b:fe:
00:45:e7:d2:26:f2:c8:d1:e4:db:69:d7:23:b3:82:
68:74:12:84:26:34:d2:f6:89:3f:f7:4b:31:bb:23:
16:b3:a9:88:00:9a:66:21:12:a5:12:ee:cb:a5:88:
16:c2:2e:63:95:11:94:26:5b:b1:49:b8:ff:ef:aa:
ab:49:9b:da:e2:49:91:77:cb:95:56:f9:36:b7:cc:
27:a5:70:c8:3d:bb:03:25:6e:51:5c:70:14:cc:f1:
3d:9b:81:3a:a6:4f:93:66:ff:74:bb:f9:a5:54:ef:
7e:40:7d:95:88:fc:4b:ea:c9:f7:dd:27:21:7d:7a:
53:ef:9d:25:2a:b0:86:ec:14:8e:b6:c4:33:92:69:
39:b7:97:f0:65:58:16:d8:20:67:80:65:01:89:42:
60:6d:22:5a:96:6f:16:59:45:e3:95:15:96:7b:da:
7c:b7:9f:b9:74:34:5b:2f:ff:81:73:5f:cc:f5:20:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:57:58:51:D3:C4:C7:92:75:6A:2D:BE:C1:F7:88:DE:00:4F:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F35FB7886AF11EE92519B4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.24.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:42:79:ba:ac:5a:0d:ee:67:e9:c4:cb:a6:54:74:1e:11:af:
86:2b:db:08:d2:d9:59:15:39:17:da:87:4f:1b:e5:2d:68:87:
4a:21:4e:11:86:3b:09:48:3c:d0:7a:73:da:a1:73:53:b1:cb:
40:9c:00:0e:d4:87:52:79:3e:13:a9:a6:2d:57:56:0e:b3:b5:
d2:5f:4f:c3:f8:c8:d5:ea:4c:04:93:37:3d:ee:1b:c8:57:05:
08:5c:34:0c:af:ee:6f:e4:6d:75:7f:ed:d0:b0:8c:57:c6:72:
0c:68:ee:e9:af:90:b7:b5:10:44:1c:ce:7c:cd:b8:76:5f:fc:
1b:2e:60:79:3d:98:e3:69:fb:73:2f:12:62:7c:5f:c8:fa:ca:
05:51:6d:89:8e:fa:d3:83:ab:fa:b0:3d:ed:9b:1f:2c:1b:27:
d8:f2:d1:09:a6:7d:f8:b7:db:c6:c8:24:e7:e5:57:2f:48:7d:
9d:bb:31:42:04:33:d4:a4:42:2a:9a:ed:23:22:c9:6a:ad:05:
be:30:c4:94:1e:23:4a:9a:d7:88:8e:ba:2e:2e:09:d6:dc:d3:
d8:c9:1e:64:d7:0c:9a:8d:91:f6:73:d7:ec:73:cb:04:60:0d:
16:17:ae:bc:72:9b:dd:63:57:85:a3:44:b5:d5:32:70:e6:cf:
93:80:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org