Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FC65DA278011EE8DCFC5184AD9E6FC.roa
File: 53FC65DA278011EE8DCFC5184AD9E6FC.roa (raw, json)
Hash identifier: tv43aviZmdYml+tEvxdJuLD9V3bvEyp4W9SqOG33sZI=
Subject key identifier: 72:00:83:C7:6F:9B:03:10:EF:26:82:82:46:A1:95:56:42:A7:1F:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 338F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FC65DA278011EE8DCFC5184AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:37:41 +0000
ROA not before: Fri 21 Jul 2023 04:37:38 +0000
ROA not after: Thu 13 Jun 2024 04:37:38 +0000
asID: 7018
IP address blocks: 154.82.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13199 (0x338f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:37:38 2023 GMT
Not After : Jun 13 04:37:38 2024 GMT
Subject: CN=64ba0b95-95e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:28:fa:6a:f6:46:22:20:c2:fb:11:f9:e5:
bc:96:9d:26:44:d7:00:92:e4:9f:3b:b4:0d:ec:2b:
ca:b1:74:a4:6c:81:3d:e8:ee:1c:1f:6c:41:64:c4:
ea:8b:f1:67:d6:c8:a2:d8:e1:b5:33:4b:d1:77:46:
46:9c:a3:24:c7:26:34:8e:c8:b9:85:6c:25:89:c9:
b5:4b:45:11:a5:78:91:3e:9e:a4:cb:3d:69:8f:02:
a9:20:78:3a:2f:93:de:01:f3:b0:f3:b0:f2:ae:27:
19:b2:84:24:e1:3e:21:91:56:63:d0:79:1d:3e:7d:
c1:80:f2:30:9f:0b:05:93:c7:38:b1:e4:8e:7c:87:
09:6b:cc:dd:58:3a:67:7a:5f:c5:c6:c6:2f:51:7c:
75:e6:30:2b:f9:49:93:89:69:0e:63:ba:2b:55:ea:
9b:9b:9f:f0:2b:8c:78:f2:c1:dc:ca:3e:5c:12:41:
45:ef:37:60:34:f2:b4:b4:cc:68:20:23:26:fc:9b:
2d:99:d0:11:6c:1e:68:08:65:bd:30:c5:b1:dc:0e:
6d:3f:80:e4:dc:90:40:24:8f:0a:fb:e1:d6:11:f9:
c8:bb:5e:6d:39:a6:f2:6f:09:40:9b:0e:12:f5:66:
04:d2:18:6d:69:10:6f:3e:e7:55:46:61:a9:c2:f9:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:83:C7:6F:9B:03:10:EF:26:82:82:46:A1:95:56:42:A7:1F:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FC65DA278011EE8DCFC5184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:fa:f2:01:11:47:fd:9a:25:02:04:89:4b:e7:d8:a3:69:50:
92:30:a7:78:fa:ee:9f:00:73:95:94:71:d9:03:65:37:bf:5a:
12:88:6d:aa:00:40:81:47:50:c1:e4:eb:82:ab:e5:95:54:50:
e5:05:ac:a3:5d:2a:ed:70:7c:a8:7a:53:b7:c0:9b:fe:a0:7b:
e0:4d:7b:47:f4:1f:c1:a4:18:d0:5c:32:9a:b4:cb:27:22:ed:
88:6d:8e:9f:3b:2b:db:44:c3:d3:99:c1:7e:fb:b4:af:cd:f2:
13:fa:e1:19:77:6f:a6:f7:3c:62:cf:75:0b:0a:9d:1c:76:20:
bd:b9:a1:cf:5f:6b:e7:ce:5d:4c:3c:3f:61:54:68:fd:84:b3:
96:ad:27:8f:9f:3d:4f:36:87:b3:7c:82:9d:a6:5d:02:c1:6f:
8e:19:a1:27:5d:e5:d2:39:dd:03:f9:ac:e4:d4:0a:bf:f2:d0:
e9:fc:dd:f5:a1:08:d7:4f:fa:db:b2:d7:01:87:18:13:ab:11:
97:5b:44:ec:b5:95:9e:c9:a5:81:79:03:c1:35:4f:77:7d:fd:
fa:2b:46:fd:2a:19:c9:96:72:ea:47:ef:af:06:18:22:46:44:
73:c5:75:6c:93:25:3e:47:7a:ec:d2:92:a1:26:8a:3f:a7:80:
d7:ec:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org