Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5051FD747EBE11EEA3E1D56B4AD9E6FC.roa
File: 5051FD747EBE11EEA3E1D56B4AD9E6FC.roa (raw, json)
Hash identifier: yKgH2JWPvtEZiySbDAg0gff9BUjruCxBO7lG0Ahs4WM=
Subject key identifier: 9D:A7:B4:4C:3D:25:FF:51:DF:37:7F:D7:CE:48:D7:79:C4:C1:CD:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5051FD747EBE11EEA3E1D56B4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:10:36 +0000
ROA not before: Thu 09 Nov 2023 05:10:32 +0000
ROA not after: Wed 06 Nov 2024 05:10:32 +0000
asID: 139057
IP address blocks: 154.92.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19939 (0x4de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 05:10:32 2023 GMT
Not After : Nov 6 05:10:32 2024 GMT
Subject: CN=654c69cb-821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:8b:76:0d:96:59:10:1c:57:f5:70:a7:26:
e6:c9:8c:8a:f0:6f:82:83:bc:3c:49:8d:9f:66:b8:
de:9a:84:91:56:80:13:98:40:5c:63:cb:c3:8a:db:
ce:d5:92:1c:9f:9c:b6:85:c3:89:aa:c4:a4:e3:9c:
7e:79:69:2a:a4:c0:05:ff:a0:cb:f1:88:53:69:30:
d4:ca:a7:84:07:d3:a3:af:cf:10:2e:2d:4f:ef:27:
d1:dc:86:8b:04:c2:6b:ad:65:7b:94:75:62:1d:be:
53:8f:3c:c8:5b:5e:c3:97:bc:35:62:9a:2b:10:c8:
f8:8b:d3:f1:3c:97:5d:60:43:75:11:34:c1:67:f2:
6c:59:32:96:31:94:16:54:34:e5:80:71:b7:f4:d6:
56:44:26:54:3a:89:5f:e6:89:3c:a3:7f:4e:85:8d:
a5:9a:5e:98:20:26:53:f8:61:1c:74:0a:e3:d6:0c:
f9:68:e7:14:55:e9:b7:ed:11:bc:31:ea:82:a9:15:
31:97:96:28:bf:cc:aa:b1:6c:df:b1:8b:79:75:f8:
47:5e:dd:89:04:1e:40:c9:aa:28:2a:b1:0b:c0:2c:
72:06:e9:a6:f8:0d:53:48:58:2f:23:b9:8a:b6:73:
6a:1f:e7:15:33:30:cb:75:9e:7a:4f:d4:b3:7f:40:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:B4:4C:3D:25:FF:51:DF:37:7F:D7:CE:48:D7:79:C4:C1:CD:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5051FD747EBE11EEA3E1D56B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:43:1b:90:bb:18:16:9e:e4:07:d1:9b:bf:bc:f0:31:e3:4c:
0e:2c:94:d3:e1:90:49:99:91:89:89:d5:e8:e6:54:df:66:54:
6f:fe:ef:2e:60:2d:a8:85:a9:23:8e:a5:60:98:43:5c:72:91:
17:5e:1f:db:75:dc:b8:67:09:1c:1e:36:ba:bc:6a:2b:eb:c7:
58:32:df:8e:d4:43:ee:45:f1:58:b8:29:61:3f:d6:30:b3:5d:
4b:95:0b:57:1d:92:d3:ba:08:44:13:db:8d:7e:f0:cc:7b:59:
d8:12:9e:6d:4a:33:ac:24:ca:3b:13:5f:6e:e0:0a:d5:52:fc:
a3:c9:b5:4a:3b:47:99:36:5b:bf:c1:07:f3:bb:45:2f:11:7a:
78:f0:2f:c1:76:52:65:2d:fd:ec:8d:96:85:19:3d:7e:b2:d2:
01:38:c4:cf:08:74:57:59:03:95:84:8b:b6:40:ef:16:f5:71:
51:80:65:04:95:ea:3d:7f:d5:cc:99:9b:68:f5:d4:a4:fc:39:
3a:1c:cd:3d:51:e0:89:18:78:ab:81:7e:6d:5a:1b:0e:02:0d:
90:4c:55:7b:e3:df:ef:a2:c0:7d:c4:a3:42:7f:74:ed:39:c1:
13:8a:85:3d:e4:b9:14:37:03:26:77:35:32:da:67:55:c9:5f:
ec:f4:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org