Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45673CA64AD611EE8E1BCD614AD9E6FC.roa
File: 45673CA64AD611EE8E1BCD614AD9E6FC.roa (raw, json)
Hash identifier: GZdRabw5Rv9kJL9r0AsVThQzJKDcPmLX4jqoAslh9L4=
Subject key identifier: B3:90:B0:69:20:12:C4:84:1C:94:B6:9C:34:5A:2D:EB:D0:22:7D:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3B57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45673CA64AD611EE8E1BCD614AD9E6FC.roa
Signing time: Mon 04 Sep 2023 03:51:04 +0000
ROA not before: Mon 04 Sep 2023 03:51:01 +0000
ROA not after: Thu 08 Aug 2024 03:51:01 +0000
asID: 133199
IP address blocks: 154.204.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15191 (0x3b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 03:51:01 2023 GMT
Not After : Aug 8 03:51:01 2024 GMT
Subject: CN=64f55428-b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:6e:06:56:b8:1f:d3:34:9b:26:46:7c:83:
c8:9c:2f:47:20:59:8b:71:aa:b8:83:11:3b:cb:da:
18:ed:f4:19:6b:29:8c:fb:5f:6c:b7:ff:91:21:a1:
1b:60:cd:50:9d:51:70:04:0d:ef:fb:0c:7d:cb:c2:
3b:d1:83:77:b3:80:67:0d:d1:66:f6:8a:f2:27:e4:
f7:1e:96:9c:f5:0a:20:62:c8:d2:a8:e5:5b:6e:5d:
5b:62:ff:7a:02:74:b4:00:75:3c:f1:57:ae:18:8c:
9a:53:67:c1:24:8a:70:d4:51:0a:98:aa:4d:e0:44:
19:2b:db:7f:f0:fe:be:e6:94:77:92:35:45:8e:ce:
c9:7e:d5:a9:b9:20:d7:c3:2e:7f:ff:e5:ec:ef:d2:
5d:14:5d:9b:1e:d8:b2:97:62:65:67:80:38:71:90:
17:11:d5:be:a5:23:c6:f1:0f:0c:13:d8:6c:fe:c5:
64:bc:80:69:6b:90:3b:6c:2e:86:4a:bf:c6:4a:32:
f1:42:f4:ef:4a:ef:86:ac:db:de:40:92:76:7a:da:
29:49:0a:c5:fd:da:42:87:dc:8e:ad:48:dc:bd:c8:
31:47:67:a6:38:6a:8b:26:aa:38:c6:06:e9:b0:c9:
cd:84:3e:dd:c8:9b:e1:62:7b:08:78:50:71:13:d1:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:B0:69:20:12:C4:84:1C:94:B6:9C:34:5A:2D:EB:D0:22:7D:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45673CA64AD611EE8E1BCD614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.61.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ea:15:ce:53:85:66:de:54:d8:cc:1c:66:fb:5d:4b:16:5b:
db:b4:2e:83:79:c1:28:6d:6b:58:7e:9f:ae:80:7d:77:47:43:
84:6f:0a:23:aa:3f:e9:e1:70:c7:1e:eb:38:0f:cb:f2:e4:68:
a3:e0:fb:14:a1:f4:b0:cd:b7:7c:b4:34:48:aa:9d:b7:60:ac:
77:e3:a0:55:a7:5e:83:ee:86:2d:c6:4e:1c:e4:c2:f0:92:dc:
92:a8:da:f5:14:59:14:4b:05:bf:96:6a:79:e2:62:b6:f8:c9:
b8:9d:97:54:15:07:62:d0:8e:7d:50:36:4a:87:e8:e3:c4:bf:
41:6f:cd:2d:02:0a:fb:28:be:83:f9:47:c1:f9:07:a2:e9:64:
a9:bb:d2:af:68:8d:3e:3f:2d:f6:5d:6d:b4:ac:94:ed:f1:8e:
22:c3:b0:ce:5c:1d:d0:d6:c6:80:4b:94:7c:40:b9:1c:81:19:
54:4f:dd:f3:23:3d:8b:71:7c:a1:ac:6f:21:a3:4a:54:ee:c3:
6f:80:80:ab:ab:11:e6:66:c1:9d:30:34:f7:50:e6:d5:fd:0f:
0d:cd:6c:60:a1:eb:f1:f0:a3:9d:2d:e2:9c:41:8b:13:68:77:
27:a9:6b:49:4e:22:a7:34:ea:e6:a2:48:d1:6a:e3:ed:5b:80:
65:5c:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org