Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2A6F0453A311EEBA220E6B4AD9E6FC.roa
File: 4E2A6F0453A311EEBA220E6B4AD9E6FC.roa (raw, json)
Hash identifier: Xc0q8/r94ryRQsDCuBNz3YIaHV5XzXqjjSA9mtvtRck=
Subject key identifier: D7:7C:B0:B5:83:19:E8:FE:8C:67:7A:1A:D9:E6:01:1C:64:40:20:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2A6F0453A311EEBA220E6B4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:38:55 +0000
ROA not before: Fri 15 Sep 2023 08:38:52 +0000
ROA not after: Sat 08 Jun 2024 08:38:52 +0000
asID: 142403
IP address blocks: 154.209.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15787 (0x3dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:38:52 2023 GMT
Not After : Jun 8 08:38:52 2024 GMT
Subject: CN=6504181f-48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:47:b3:89:98:07:7e:f3:14:64:c0:8b:af:
6a:27:e4:5b:dc:a9:b7:2c:55:b7:a8:21:fd:18:aa:
5e:d8:a7:86:f6:2f:eb:7d:f0:63:b0:ae:ab:ff:19:
a3:86:45:dd:f3:c3:de:7a:23:43:4b:2f:86:68:df:
ed:fe:d1:ff:9e:82:7c:57:77:6f:54:b9:b1:4b:a5:
89:48:ed:0a:2f:2e:a9:08:dc:6e:34:53:b7:20:ff:
15:1e:76:ea:8c:f0:22:46:70:6e:b0:0d:f3:f0:99:
c6:74:ce:f1:74:33:90:69:dd:58:af:b5:10:ce:c9:
94:b4:72:aa:77:14:c5:3a:7b:c9:cc:45:53:7b:eb:
98:01:7a:2b:fb:c2:0e:22:7e:7b:f2:a9:76:0d:b2:
ea:67:9d:6d:10:f3:54:1c:bc:fc:ef:1e:40:ae:ec:
6d:c1:ca:8e:65:d3:23:44:9a:6d:7f:8b:bc:06:c7:
1e:e0:12:b2:1f:5c:3b:4b:c0:30:af:12:fb:18:62:
c0:3c:45:86:0b:5d:0d:cf:bf:0e:15:c8:2f:79:a1:
91:c6:f3:e8:0c:37:3e:31:94:fc:70:83:98:ed:82:
75:b8:b9:11:a4:bc:de:b6:47:38:56:e5:d3:5e:f5:
fe:19:28:03:e9:2d:93:3f:e6:6c:ab:8c:10:d7:b9:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:B0:B5:83:19:E8:FE:8C:67:7A:1A:D9:E6:01:1C:64:40:20:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2A6F0453A311EEBA220E6B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:58:70:29:bb:3c:dc:68:93:4e:1c:d8:ef:96:74:7d:ff:62:
c8:1d:e5:78:bb:0c:b2:c9:41:ca:24:0b:20:a3:6d:60:fd:0d:
38:be:5f:d3:d9:56:62:3f:06:07:f5:ff:e3:02:c6:92:23:ac:
35:d7:f9:96:59:40:77:64:d5:e5:9a:97:d6:32:f7:ec:06:44:
06:1f:99:cf:7c:a7:6c:6c:f1:e6:79:5a:a1:86:a0:41:00:d6:
40:cb:9a:cc:81:df:d6:6b:5e:49:36:f3:a8:05:83:ce:4c:5f:
a0:d5:70:37:b0:14:d2:71:57:3c:45:ab:b5:16:4a:04:f4:84:
5a:14:d1:89:7b:82:f2:71:8c:2f:6a:11:a7:5a:2b:7b:ed:00:
01:fd:08:ad:19:d9:af:47:ab:96:8f:00:25:d0:8a:3c:3d:c8:
3b:28:54:f9:46:2a:89:4a:bc:9f:9a:81:a9:70:39:cc:7a:76:
bb:e6:31:49:f7:40:40:a0:98:3e:41:ad:4b:fe:39:28:cc:ac:
a4:67:fe:e2:3a:26:e6:4c:9b:0f:96:90:63:96:41:35:f2:72:
ac:f6:22:22:e8:c1:a2:ab:18:a2:e4:6b:41:8a:50:61:bb:43:
7f:0b:e1:0a:f3:9e:14:e1:16:86:1e:84:a1:b1:3d:09:9e:c4:
8b:4f:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org