Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4304FD161FE511EEBFF599524AD9E6FC.roa
File: 4304FD161FE511EEBFF599524AD9E6FC.roa (raw, json)
Hash identifier: rdBLvLTd9VrwV6gC8L38tw8DZSFev4qgkvgbmCiiiz8=
Subject key identifier: 3C:1E:A9:1A:9E:8A:9C:C2:26:54:F6:BE:90:94:72:75:44:25:44:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 31A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4304FD161FE511EEBFF599524AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:20:03 +0000
ROA not before: Tue 11 Jul 2023 12:19:59 +0000
ROA not after: Thu 13 Jun 2024 12:19:59 +0000
asID: 139811
IP address blocks: 154.210.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12710 (0x31a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 12:19:59 2023 GMT
Not After : Jun 13 12:19:59 2024 GMT
Subject: CN=64ad48f3-5d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:32:05:17:2f:4f:fa:83:93:19:0a:1c:7a:
8c:52:f1:45:ce:f5:af:24:c6:81:4d:01:07:58:1d:
73:dd:27:40:fc:a1:b9:52:32:0a:a6:e7:88:fe:32:
15:79:02:17:c8:9c:e6:95:5e:b0:b8:3d:e0:07:4f:
02:91:fa:20:2d:7c:f5:50:03:ab:83:49:43:1d:20:
18:0d:5d:ab:41:bc:28:07:7a:0d:b5:38:56:fe:b9:
b3:24:2f:02:56:58:60:be:d3:fa:18:41:8b:78:bf:
0e:b4:2b:d2:6d:5d:b5:9e:7e:0b:10:91:43:53:ba:
c8:9a:f6:aa:7b:ce:55:4b:ba:dc:f0:ae:08:3a:1d:
df:d1:83:bb:6a:6c:4e:cc:1f:44:29:0c:fa:48:b7:
74:b8:7a:0b:44:ac:57:39:c2:31:fc:57:5d:44:44:
5f:fd:20:fa:88:6e:0a:26:4f:ac:3c:59:ec:22:98:
28:0a:69:aa:7a:88:e3:0e:ad:0b:df:da:f4:42:dc:
f2:b1:79:97:82:e2:b2:5f:54:f1:27:63:13:53:7b:
5a:1d:26:ed:ca:81:8a:79:cc:c0:8e:74:55:8b:41:
88:3d:47:b4:9e:03:c5:31:a6:cf:42:14:85:cb:c9:
29:92:8c:8d:9a:e4:6b:b6:d1:8f:50:50:b2:5f:00:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1E:A9:1A:9E:8A:9C:C2:26:54:F6:BE:90:94:72:75:44:25:44:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4304FD161FE511EEBFF599524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.12.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:af:c1:66:f7:de:3c:28:92:a6:ef:a7:ab:d5:10:c4:e8:7a:
ea:44:73:32:e1:f2:be:cc:fa:57:76:9f:77:90:7c:d3:d6:05:
40:76:2b:58:8d:1b:77:76:d5:e4:32:1b:c6:15:8d:ae:dc:81:
ec:d4:c6:5a:0b:7e:1a:ae:c1:59:62:20:22:95:42:26:2f:f7:
c6:b1:dd:c1:97:2e:e3:dc:6b:7c:f9:76:f4:7b:26:45:0e:e4:
66:eb:43:66:bc:70:28:82:25:0a:f8:a5:62:1c:49:8f:0b:28:
bc:08:74:c5:ce:ae:c1:17:bc:2d:8d:1a:b1:55:d9:8b:2d:8d:
8e:dd:44:57:78:f1:44:14:45:08:a1:4f:87:68:d7:87:22:e1:
1c:e9:ff:b3:07:da:97:fe:c1:0b:f7:6a:39:f9:e8:e4:06:3b:
4b:33:1d:f6:55:6c:45:f7:cd:56:3a:c6:48:36:c9:f9:0a:a9:
48:d7:ef:80:25:83:ea:50:e9:e9:0e:f9:8c:6a:ab:fa:17:10:
98:a0:b6:d1:9c:0a:d8:ed:29:a0:a1:c0:2d:90:7e:67:b8:32:
d2:c2:d7:ca:54:74:6c:fd:dc:d1:c7:80:34:0e:a0:f7:c7:0a:
ac:29:28:53:67:3c:f9:c7:7a:98:59:cd:8a:37:fa:77:10:b2:
cd:e5:7b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org