Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D1863082C111EEBC9736464AD9E6FC.roa
File: 57D1863082C111EEBC9736464AD9E6FC.roa (raw, json)
Hash identifier: p36tMefIT7PY9Xg8y1sGRFby0w6R7gBlm3khi17sq0U=
Subject key identifier: 9B:60:E9:BD:93:63:19:1B:FE:97:48:24:02:DE:DF:9D:FD:42:7A:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 501C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D1863082C111EEBC9736464AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:42:21 +0000
ROA not before: Tue 14 Nov 2023 07:42:17 +0000
ROA not after: Tue 12 Nov 2024 07:42:17 +0000
asID: 397630
IP address blocks: 154.201.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20508 (0x501c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:42:17 2023 GMT
Not After : Nov 12 07:42:17 2024 GMT
Subject: CN=655324dd-d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:00:6c:a9:da:7f:af:c6:9c:82:42:a7:f1:
87:b9:6b:9c:25:94:9c:a2:38:55:ce:1f:a9:10:bb:
55:51:31:2a:69:c3:c1:2f:03:78:b1:5f:4d:cc:ec:
bc:3f:55:39:db:87:a7:74:2d:7b:78:65:3e:df:bf:
1c:bf:33:a0:4a:f9:ff:bb:2d:0b:7b:1d:54:96:26:
42:32:3b:09:25:b1:a3:a7:01:39:52:49:c8:2e:5b:
87:f8:56:68:52:d7:7f:40:fd:b4:d4:96:f2:3e:a2:
20:7b:24:08:55:e4:98:eb:d5:d5:ff:45:52:eb:f2:
de:e0:28:3f:80:bf:71:c6:b5:7a:95:7e:a1:3e:c0:
f0:27:50:ae:41:8b:4e:95:c8:5d:6f:61:d9:dc:81:
07:4b:de:36:76:2d:17:c5:68:da:42:a8:ca:dd:a0:
cd:75:ca:86:e4:5e:b2:3f:94:e4:df:d4:1b:52:44:
8c:0a:57:9a:af:9a:1d:ad:f8:e1:57:a0:1a:ac:a6:
ec:9b:2f:71:5c:b8:76:4d:65:6f:cd:66:cb:e7:9c:
e3:8e:bd:9c:0d:7f:5c:fe:72:06:36:b4:9b:9a:90:
5f:0f:86:c5:0d:8f:34:59:93:b1:21:04:dc:5b:cf:
8d:7c:67:bc:d6:ce:ad:66:a5:bd:f7:32:aa:b5:90:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:E9:BD:93:63:19:1B:FE:97:48:24:02:DE:DF:9D:FD:42:7A:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D1863082C111EEBC9736464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.35.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d5:16:43:03:f9:87:80:a0:db:3b:77:1d:58:73:31:37:3e:
f9:ad:8c:a7:80:7d:2d:ba:54:b2:7c:4f:5b:96:05:de:37:75:
3a:9c:93:e9:4f:94:40:ad:13:1b:46:57:b5:27:35:bf:5d:fd:
5b:35:86:48:49:d9:20:87:5a:20:a2:29:3d:9b:79:e0:58:cc:
45:6d:72:1f:28:7c:de:41:2a:a2:e7:65:49:6f:79:a1:84:ef:
24:7f:f7:17:51:1a:b7:b1:4c:e7:0a:ac:00:70:9f:68:61:b8:
13:0e:22:d0:d2:19:45:c7:41:a6:3b:b5:f8:41:4e:b6:16:21:
ad:60:73:10:c8:ec:a5:ff:b1:8e:30:58:e0:52:04:36:81:6d:
36:e2:c9:9b:f8:46:02:48:24:8f:d9:03:5c:0d:2f:9f:5a:83:
f2:25:39:ef:78:28:8a:7c:07:72:5c:25:a2:75:f5:51:36:47:
b3:5d:ed:30:7f:4a:d6:cb:3c:1c:15:7d:6d:d5:c7:3f:f5:11:
1d:89:f5:e0:4c:5b:bf:a3:0e:68:08:dc:59:a8:c2:c8:18:fd:
10:5e:48:c0:a0:5f:16:97:fa:aa:ec:04:f4:ea:6b:66:1a:d8:
3a:55:92:fc:91:ec:89:c4:b6:ac:bc:be:90:66:02:f4:ea:25:
c7:a0:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org