Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4896EB0C60EC11EEA41284534AD9E6FC.roa
File: 4896EB0C60EC11EEA41284534AD9E6FC.roa (raw, json)
Hash identifier: pibnxol1Wj2D1qVZ/F3XFhuhV3oO9Eer6fOR+s8pg+M=
Subject key identifier: B0:3B:4B:B2:CE:5A:1B:95:52:09:55:15:40:E0:E0:34:8D:8C:37:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4457
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4896EB0C60EC11EEA41284534AD9E6FC.roa
Signing time: Mon 02 Oct 2023 06:24:04 +0000
ROA not before: Mon 02 Oct 2023 06:24:01 +0000
ROA not after: Tue 01 Oct 2024 06:24:01 +0000
asID: 211392
IP address blocks: 154.85.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17495 (0x4457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 2 06:24:01 2023 GMT
Not After : Oct 1 06:24:01 2024 GMT
Subject: CN=651a6204-7659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:3e:a0:76:4b:e9:25:8d:17:27:b3:62:65:
fb:d2:89:3f:e5:bc:02:24:ed:84:cb:10:4a:47:ce:
e2:1d:de:63:25:d9:22:4a:07:58:c8:50:2a:1a:a7:
d2:18:de:4a:02:63:0d:bc:4b:bf:1f:05:cb:c1:51:
64:2f:ec:86:fb:4a:17:13:e9:57:c3:0a:9a:c4:56:
2d:4b:df:ba:e4:2a:7f:42:aa:40:bd:56:9f:25:a6:
88:bc:92:f1:36:75:2a:97:9c:f5:f4:63:77:1b:38:
a3:29:b3:79:f3:04:5a:8c:3e:80:d6:d4:07:79:95:
59:13:44:e5:ee:e7:6d:3f:73:22:47:ec:bb:81:1e:
35:c1:0e:81:62:ae:e9:28:d0:5c:1a:70:0f:c0:a0:
67:a7:e0:f5:e3:27:4a:be:d9:8e:4a:dd:14:17:21:
06:6e:22:64:95:1e:a3:48:17:a6:0b:7f:b2:c6:0f:
89:59:84:eb:a0:68:98:66:ed:6e:bf:32:f7:b0:a2:
75:ba:6e:db:c6:d3:51:d7:88:22:58:02:da:d3:6a:
8f:e7:29:fd:1f:3d:e4:b4:66:24:4e:5d:56:c9:00:
f9:8d:2c:ff:97:82:92:92:3a:a6:71:80:02:f8:e0:
11:f2:d3:70:5d:4c:21:99:70:50:ff:bc:e7:dc:fd:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:4B:B2:CE:5A:1B:95:52:09:55:15:40:E0:E0:34:8D:8C:37:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4896EB0C60EC11EEA41284534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.9.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f9:f2:35:31:81:db:4e:20:e5:55:7d:6d:b0:9c:9b:4e:0c:
a7:9f:79:b3:0b:5c:0f:90:2e:d6:bc:67:78:4f:16:86:fc:ca:
a0:35:29:e7:96:96:b4:06:64:0d:56:7c:18:64:07:23:c0:ac:
43:f2:5e:8f:9d:4e:5c:e0:36:8b:78:34:a5:86:f1:34:ef:8c:
90:74:18:a9:b3:64:23:0a:01:16:69:ae:52:73:09:5c:69:bb:
7a:23:51:d0:38:37:8f:f6:56:04:e0:b2:ad:65:e9:cd:05:68:
44:b5:d7:46:00:0a:46:69:97:73:6a:6a:df:5b:0c:69:d5:29:
14:71:da:8e:87:81:b7:ec:51:41:99:62:45:c4:32:65:d0:84:
48:12:2b:1d:bf:90:6f:e8:83:a9:44:18:25:20:69:bf:b0:2c:
f0:8d:c4:29:eb:2d:e7:36:8b:ee:9b:10:9f:da:a6:94:bf:88:
d4:0d:51:48:d7:b3:c6:04:fc:2b:0e:72:94:0d:20:eb:30:5b:
28:5d:83:25:83:e2:54:29:86:a9:28:8a:ef:5d:21:9c:dc:54:
55:eb:a1:3c:a2:7f:89:0d:b7:65:f6:65:84:fc:88:2b:de:d4:
b5:28:90:99:eb:58:49:30:66:8f:d0:d5:af:bb:7d:c0:d1:80:
68:ed:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org