Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B80574689C11EEB79A45354AD9E6FC.roa
File: 42B80574689C11EEB79A45354AD9E6FC.roa (raw, json)
Hash identifier: BiokdLoL17jk76xxe04xnz0qJzyjLoL7yzrDKPgJMqQ=
Subject key identifier: 43:60:8C:FA:B2:3B:8B:6C:3D:E6:70:A9:0A:DC:0C:76:FA:EA:E9:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B80574689C11EEB79A45354AD9E6FC.roa
Signing time: Thu 12 Oct 2023 01:11:24 +0000
ROA not before: Thu 12 Oct 2023 01:11:20 +0000
ROA not after: Sat 05 Oct 2024 01:11:20 +0000
asID: 132839
IP address blocks: 154.201.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17808 (0x4590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 12 01:11:20 2023 GMT
Not After : Oct 5 01:11:20 2024 GMT
Subject: CN=652747bc-e867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:30:02:c7:8e:6f:dd:55:3a:02:42:8d:cf:
0c:fe:3d:1d:e2:45:39:45:6c:38:22:44:51:d1:a9:
0b:d3:d4:73:b3:4f:e9:85:86:c9:85:d5:d8:82:e9:
e1:60:34:65:e7:4b:83:cd:7a:e2:b9:d3:78:5f:f6:
10:15:8d:9c:a7:0d:f2:9a:f3:14:0d:d0:09:6d:3c:
c5:b6:02:89:76:7b:00:3b:a9:ad:ad:13:27:bb:32:
d8:43:2c:ba:55:f5:9a:a9:ef:b2:79:a4:da:d0:ca:
20:35:42:dd:4e:97:38:ea:f2:5b:29:b9:51:1a:22:
83:01:7b:14:28:89:7a:61:c5:38:63:9c:d8:8a:02:
52:45:64:79:ab:59:a6:44:5d:3d:86:b0:82:fe:cb:
f7:5e:d2:97:aa:a8:d4:7d:83:17:f1:2a:d3:a7:b8:
5d:f8:a8:42:ca:a8:a5:46:38:c8:4e:3e:21:a0:b3:
78:38:8c:0b:d3:17:40:df:e8:40:38:ee:04:6d:ac:
30:1e:87:27:30:ac:e8:99:8f:06:77:32:0a:fd:61:
0c:0d:a6:15:fa:a3:b7:9d:e1:44:f1:91:ff:0c:74:
ae:e2:f9:66:4e:66:6c:8c:20:e1:9c:d5:f6:2e:62:
bd:6e:03:65:93:9c:b0:b8:11:9e:b7:d6:ac:0a:c4:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:8C:FA:B2:3B:8B:6C:3D:E6:70:A9:0A:DC:0C:76:FA:EA:E9:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42B80574689C11EEB79A45354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cc:88:07:42:09:44:a2:56:a8:32:85:d8:16:76:73:88:65:
ce:9b:17:c7:36:33:05:d6:e2:18:35:d0:04:c5:52:e2:26:1d:
ec:ad:72:da:d1:dc:d3:c8:17:59:1f:00:91:d7:19:d8:8b:e5:
05:0b:3b:b9:53:6b:d9:5c:3d:73:55:d2:9f:f9:06:f1:a6:80:
20:b5:79:e1:08:70:14:ef:06:4d:31:dd:26:cc:06:bc:87:92:
fb:46:5a:ff:60:c8:3c:83:d7:bd:59:78:39:09:e1:d8:63:38:
ff:f0:05:4a:62:96:bd:a7:1e:29:ce:94:6b:54:8a:32:52:a5:
01:57:e2:7f:97:b1:95:07:97:e2:8d:54:a1:e4:ad:22:ee:6c:
00:d8:f4:25:f6:ef:87:78:9f:2d:5a:29:7c:2e:88:f6:43:9f:
a0:a4:0a:6c:fe:40:33:16:fa:29:fe:c1:88:84:5e:a8:58:11:
b8:34:ae:f3:31:f8:b4:e1:5e:27:9a:88:e8:85:3b:2f:b0:d8:
02:84:8b:6b:f4:71:0b:01:ff:f0:d3:e6:89:ee:44:e3:5a:f2:
b7:6d:50:f0:86:4d:ad:21:03:20:28:00:55:86:43:23:c8:a6:
f1:85:f9:98:65:26:8c:17:8a:3b:c5:1e:21:c1:33:06:da:86:
30:1a:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:24 2024 by rpki-client on console-ams.rpki-client.org