Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F07D96FD2911EEB15D4539017001B1.roa
File: 43F07D96FD2911EEB15D4539017001B1.roa (raw, json)
Hash identifier: ZIChkx7Blu0Cygbu2hhohUjorhluMfojW8FMufUCDMI=
Subject key identifier: 0C:9F:CC:1E:89:DB:89:21:62:CC:CA:32:C6:04:92:84:79:48:48:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADE7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F07D96FD2911EEB15D4539017001B1.roa
Signing time: Thu 18 Apr 2024 02:13:37 +0000
ROA not before: Thu 18 Apr 2024 02:13:34 +0000
ROA not after: Sat 19 Apr 2025 02:13:34 +0000
asID: 215123
IP address blocks: 154.194.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44519 (0xade7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 02:13:34 2024 GMT
Not After : Apr 19 02:13:34 2025 GMT
Subject: CN=662081d1-f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:d3:8e:74:95:dd:d5:34:27:b5:69:41:ac:
8e:4b:a5:50:63:9e:59:f6:c9:89:5f:9e:ca:8b:ba:
84:ed:70:b7:1b:aa:f5:a5:6f:23:a8:aa:9b:5a:3a:
aa:88:24:ea:e8:78:91:c1:83:4a:72:6f:e8:24:56:
6b:35:7d:a2:1b:9d:c8:4a:ab:95:50:10:79:fb:e4:
fb:b9:6f:30:75:f4:07:1c:96:e5:32:42:72:fc:24:
7f:23:6a:62:7e:68:83:e6:fa:5b:df:eb:be:c9:86:
5d:62:1c:fb:ee:a0:fe:8e:b1:89:2f:68:e1:eb:6c:
61:56:c2:85:39:ef:b8:59:19:51:98:de:fa:a3:15:
f8:00:82:2e:cf:c6:7f:70:97:d3:e6:10:e1:49:7f:
8c:d7:01:51:ec:cd:97:c3:9e:7e:d0:47:56:a2:85:
15:93:ac:86:69:fd:85:a5:a3:97:e5:ff:12:78:96:
64:c6:bd:cc:46:ae:33:ff:92:63:86:c6:32:e5:c2:
29:63:24:a9:84:70:58:8b:32:ab:05:1e:22:7c:83:
7f:9a:c8:83:e8:5d:45:c7:88:46:a6:b3:6c:72:97:
7b:d0:4a:6f:af:8b:d3:75:f6:1a:25:6b:bd:0f:c2:
57:4a:2a:9b:3c:e3:cb:0e:6b:ae:aa:64:e2:eb:38:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:CC:1E:89:DB:89:21:62:CC:CA:32:C6:04:92:84:79:48:48:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F07D96FD2911EEB15D4539017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:32:e6:9f:66:bf:f9:c3:40:95:4d:28:b4:6f:6e:26:9b:e2:
d3:25:97:a9:1b:19:f3:f1:29:d3:e4:2f:6c:12:3c:30:a4:fa:
97:c6:6b:09:5f:eb:06:5e:dc:bb:bb:1d:f2:15:19:d5:66:8f:
ae:c8:02:ce:01:ce:fc:05:cf:e6:7c:02:be:b3:f5:f6:28:c0:
00:7c:26:6b:56:4b:13:db:4b:6f:15:8c:34:f3:91:41:30:00:
61:e6:78:76:f9:1e:06:ae:65:7b:79:da:37:aa:e2:8b:a9:39:
03:9c:1f:dc:83:30:23:72:cc:7d:e8:72:cd:9c:ce:51:b4:a7:
09:a5:12:e0:43:a3:92:83:a3:c3:4c:11:1b:a6:14:5f:bd:23:
6c:75:17:66:e2:49:cb:15:f1:f6:8a:bd:f9:d4:c6:84:a7:47:
11:45:26:46:d1:25:93:b3:02:b2:6a:a5:20:27:5f:b0:34:d0:
d2:3b:1a:b3:98:bc:4b:73:ba:53:ca:dc:43:08:32:89:65:af:
c9:43:82:2c:74:9a:2a:ee:fe:24:df:0a:30:e9:f3:b0:e9:e9:
83:b5:ea:8f:cf:5e:d6:10:1c:fc:81:d3:40:03:65:b5:23:f9:
8c:6f:11:4b:5d:50:62:58:c3:85:53:b1:73:46:92:74:02:20:
28:94:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org