Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D6B9CFE3311EE8D69AD38017001B1.roa
File: 429D6B9CFE3311EE8D69AD38017001B1.roa (raw, json)
Hash identifier: mZRyWlmkupqUMycXwSQ1JU3ZDcnxCywDhcsm7Ypc/Xc=
Subject key identifier: FC:69:FD:8F:82:C8:0A:D3:D3:FA:B5:E4:CF:F3:EB:85:B4:8D:6A:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D6B9CFE3311EE8D69AD38017001B1.roa
Signing time: Fri 19 Apr 2024 09:57:41 +0000
ROA not before: Fri 19 Apr 2024 09:57:38 +0000
ROA not after: Fri 31 Jan 2025 09:57:38 +0000
asID: 58460
IP address blocks: 154.197.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44660 (0xae74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 09:57:38 2024 GMT
Not After : Jan 31 09:57:38 2025 GMT
Subject: CN=66224015-89f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:ab:4d:eb:49:dd:03:99:63:b2:d0:77:9f:
01:c3:0c:f3:1d:92:aa:5a:9a:17:6e:66:4b:84:ea:
63:9d:29:97:bc:1b:d6:81:4e:fb:00:20:0f:0e:0f:
bd:e1:02:5d:0c:55:c3:ae:89:40:29:26:41:4f:b2:
7e:ca:f6:ea:1f:5d:ee:d5:59:cf:16:fd:61:64:04:
8c:70:4a:94:5b:15:72:b9:50:a6:7f:a0:08:21:a9:
3d:5a:61:03:9b:98:d7:ca:2b:21:61:6d:29:38:6c:
42:ad:29:84:b9:a5:86:e8:69:7d:8f:cb:fa:47:ee:
fb:7f:5b:89:2a:51:e1:f1:7a:5e:49:cc:66:32:dc:
78:5f:0e:91:c3:59:05:d5:d0:0c:c6:f4:ab:49:39:
aa:7e:b6:24:e7:62:15:e8:26:ee:6e:70:25:15:ba:
12:cc:56:df:10:6f:41:3f:7d:cc:7c:b7:4b:b2:ba:
53:1b:9c:ac:d7:12:4e:13:97:bd:ee:fc:04:9d:b1:
c9:9c:24:23:b8:32:26:d6:b7:06:0c:bd:37:44:14:
48:50:e2:66:7c:c9:5e:2d:3e:bb:d4:aa:1f:62:fd:
ca:64:0c:6e:29:2f:bc:42:d4:8a:24:c1:29:e7:49:
48:b6:88:cb:f3:18:e8:94:88:e0:da:b5:2e:a0:c3:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:FD:8F:82:C8:0A:D3:D3:FA:B5:E4:CF:F3:EB:85:B4:8D:6A:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/429D6B9CFE3311EE8D69AD38017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.40.0/22
Signature Algorithm: sha256WithRSAEncryption
41:57:c9:7b:85:f4:bf:07:e8:76:8b:ae:ae:76:80:39:62:64:
9a:06:ba:7c:5a:6b:87:3f:7d:f2:e3:ff:b3:d9:4c:8b:04:50:
8a:80:4d:7d:2e:e7:8a:5c:cd:3b:48:4d:28:44:b2:0d:a3:9c:
d9:6e:11:9a:ba:cd:37:aa:12:8d:a9:a5:0d:8f:15:da:91:8a:
cc:7d:11:d6:ba:e6:3a:42:b6:70:00:a4:97:b9:99:04:30:cf:
46:e7:29:28:00:fc:dd:aa:3c:4f:67:d3:8c:f4:12:34:dd:db:
08:8f:3b:b6:b0:d9:73:9d:d4:66:ce:31:b5:4d:21:fd:03:35:
fb:2c:5d:b1:f4:3a:b6:7a:26:c5:35:0d:ef:31:23:19:c0:83:
22:27:33:f8:5d:5a:03:dd:b1:41:fa:7c:3a:14:47:0e:14:52:
7a:40:39:46:07:d1:2d:55:86:96:31:6e:d2:ed:29:f3:e6:e4:
34:a5:3a:fa:d2:45:aa:62:a9:a8:dc:9d:a5:b9:33:b6:90:ae:
56:14:5d:bf:21:65:c2:fc:6d:a8:fa:46:70:7c:5f:5d:ed:4a:
5b:31:ff:32:76:db:d7:01:44:b6:00:4a:2e:4f:cc:58:1d:72:
08:68:71:32:36:f8:7a:94:7b:d5:53:70:08:42:43:92:26:b3:
c5:ee:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org