Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5734FCFA040B11EE8FF1B5624AD9E6FC.roa
File: 5734FCFA040B11EE8FF1B5624AD9E6FC.roa (raw, json)
Hash identifier: mQFeEVc/1tbw5dq3XvjFAZuvZarghfoK/bj0BGIsLwI=
Subject key identifier: A6:0A:8F:FF:5D:9C:90:F5:E2:4C:25:4C:06:85:BF:A1:73:16:B8:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 295D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5734FCFA040B11EE8FF1B5624AD9E6FC.roa
Signing time: Tue 06 Jun 2023 01:42:05 +0000
ROA not before: Tue 06 Jun 2023 01:42:01 +0000
ROA not after: Thu 20 Jun 2024 01:42:01 +0000
asID: 45996
IP address blocks: 154.205.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10589 (0x295d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 01:42:01 2023 GMT
Not After : Jun 20 01:42:01 2024 GMT
Subject: CN=647e8eed-3fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:7c:32:24:74:f7:f7:c1:30:15:3e:ea:a3:
d0:97:ce:4d:07:56:14:a7:a1:05:44:2a:96:97:cd:
b7:a2:3f:36:f9:c6:ec:db:ff:63:a9:de:fd:19:d7:
e6:80:2e:b8:f8:90:34:29:88:fa:04:5f:15:8a:45:
4b:11:3f:74:7c:5c:0f:fa:df:28:c2:83:ba:18:3d:
a3:a8:3b:fa:b5:a0:03:76:62:69:04:04:89:f3:56:
18:ba:f8:41:c1:4d:8e:32:b3:eb:95:32:b3:c9:be:
37:fa:3a:fb:0a:40:b4:0c:41:37:74:61:35:ba:e2:
4c:21:3c:22:97:80:8b:53:b6:55:89:21:6c:e5:f8:
0f:72:ca:ae:d7:f3:d5:b0:04:6d:9c:c2:d7:ec:05:
41:2b:df:57:dc:f3:ca:2a:42:71:c6:35:f9:14:d1:
a0:57:28:b3:43:28:b8:a1:76:15:6a:c1:75:13:dc:
e7:b7:e7:60:dd:5b:49:04:09:af:3b:de:78:47:89:
61:c4:1e:cb:e1:1f:a2:ba:7d:14:54:8c:ee:f5:62:
cb:b6:61:94:12:04:65:78:51:81:9f:bc:28:3c:e8:
27:d0:7f:df:89:cd:68:72:22:c7:8a:2f:37:aa:a1:
bc:74:f3:50:e6:68:10:44:eb:ba:5e:36:01:45:f9:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0A:8F:FF:5D:9C:90:F5:E2:4C:25:4C:06:85:BF:A1:73:16:B8:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5734FCFA040B11EE8FF1B5624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9b:31:5d:6b:be:88:be:cc:b5:cf:8e:99:85:ea:c5:58:45:
8a:06:98:15:39:6a:55:c7:22:1d:49:ae:0b:f6:df:3f:5d:4b:
91:26:50:6b:bb:e0:ba:77:70:0e:96:a6:6d:96:51:86:47:e5:
93:7f:12:45:c1:47:f7:1d:55:3d:77:1a:e8:9c:76:bc:29:ae:
d5:bd:cf:8f:b1:84:23:cd:61:f5:3d:07:a6:f4:68:e9:26:05:
99:d5:71:f8:18:a9:58:e0:1d:0d:ac:7d:f7:0e:59:cb:e9:d0:
dc:a4:6f:49:1a:78:3c:57:6b:6a:9b:29:f6:31:29:2b:95:56:
40:fc:5d:94:a4:b2:c6:ee:22:33:a5:2b:cd:79:e9:40:12:62:
6f:2c:88:b2:88:ad:58:ef:f1:5e:11:6d:fa:3d:4c:a1:9f:6f:
c3:24:fc:3d:e6:da:6c:b5:ad:de:01:ea:04:3f:90:07:06:6d:
8e:ba:dc:67:e3:29:aa:44:62:3d:e2:03:1d:09:1f:94:3b:85:
48:5b:ec:06:c0:a2:a6:5e:ff:db:6c:95:3d:90:45:4a:dd:b7:
4b:11:bc:bf:0a:3a:f0:cb:3f:04:3f:a6:4e:7d:97:af:77:76:
8f:f7:e0:91:c1:d9:74:32:46:72:a6:a9:a6:59:3d:45:61:ca:
37:8d:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org