Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E37616183911EF9EA4A34C017001B1.roa
File: 57E37616183911EF9EA4A34C017001B1.roa (raw, json)
Hash identifier: UqOROJikdNHcw9rfNLymvpYRpK2EN7+moRULhgf8OgE=
Subject key identifier: 4D:A5:D6:10:19:C7:9D:89:E9:1E:D5:9A:99:4E:EF:6C:F5:3D:8F:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B9A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E37616183911EF9EA4A34C017001B1.roa
Signing time: Wed 22 May 2024 12:46:44 +0000
ROA not before: Wed 22 May 2024 12:46:40 +0000
ROA not after: Sat 03 May 2025 12:46:40 +0000
asID: 63199
IP address blocks: 154.204.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47524 (0xb9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 12:46:40 2024 GMT
Not After : May 3 12:46:40 2025 GMT
Subject: CN=664de934-e6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:2a:46:ca:4e:68:ab:40:28:c6:4e:6f:7c:
d3:a3:02:aa:25:1c:f7:fa:85:c0:e4:3c:c1:c9:ec:
6c:c9:01:93:01:83:8c:9b:af:1d:25:29:33:e7:c7:
37:50:8e:dc:36:e7:3d:4e:dd:b2:b8:9a:dd:ff:c7:
a9:15:bc:37:7b:78:fb:2e:c1:09:59:34:b6:b7:07:
ab:80:a8:f4:1c:c7:21:22:a8:55:2e:aa:c9:9c:68:
ca:f5:8d:fb:c0:26:c7:ff:61:7c:b7:b0:54:84:02:
2b:d4:89:8a:4f:ec:2d:cc:15:c3:d4:07:22:8e:64:
45:bf:ec:16:c2:75:ca:70:e3:7a:34:cd:72:42:ba:
3e:96:a5:6b:dc:54:03:75:89:11:b0:c7:75:cd:12:
53:dc:0e:9d:62:c6:d0:85:79:f6:fa:b2:a2:77:ac:
5f:ac:24:b2:f8:7f:93:de:f6:96:85:a4:37:e6:40:
0d:54:3c:3f:70:c4:a2:78:18:d0:da:d4:90:73:7b:
77:84:40:53:f2:ec:50:e1:7a:a8:bd:fb:d1:b5:b9:
8d:b9:71:f9:de:23:c1:ef:32:9c:bc:80:d6:95:df:
ef:81:34:8d:c8:ba:53:61:5a:c2:60:25:6e:a4:60:
16:cc:04:1c:c9:0e:f9:c6:c6:02:78:b1:b8:7b:86:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:D6:10:19:C7:9D:89:E9:1E:D5:9A:99:4E:EF:6C:F5:3D:8F:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57E37616183911EF9EA4A34C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.36.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7e:8c:8c:91:36:0f:9a:e0:ff:29:7d:21:8d:a0:6e:61:40:
e4:1a:78:26:b3:c2:c2:45:c4:93:22:73:77:ae:a5:e0:7e:d7:
1d:f4:4e:16:43:f8:72:c2:f5:01:dc:61:07:a9:dc:f9:4c:ae:
ed:42:b6:a0:b1:61:0e:2f:c5:3d:b9:24:3c:45:59:a3:f1:72:
bd:35:35:f2:73:d2:2b:30:58:36:fc:8a:d0:42:db:59:f3:f5:
ad:b8:5b:bb:52:06:59:de:54:97:1f:3f:8b:15:13:c2:28:16:
67:ae:67:b7:8d:1f:78:8d:e6:58:b0:2e:ad:7e:e8:6f:e5:06:
6a:1d:4f:cb:f5:e8:7a:e8:88:1e:9b:be:0f:34:83:04:4b:f1:
26:e4:d4:2e:31:58:47:1e:10:18:b0:63:37:d6:17:c3:c3:78:
95:8e:a9:51:da:a5:56:e8:c7:7c:f6:c8:1f:74:9b:4f:fb:93:
13:5e:46:3d:bd:f6:4e:83:50:79:d1:1c:62:22:15:cd:5c:d0:
cd:fb:6b:59:36:e5:43:e7:6c:b7:a7:e9:9e:fd:63:a5:22:5b:
22:95:74:28:e6:43:a7:84:4d:b0:b9:80:47:1d:ac:70:52:ee:
37:84:a3:51:ba:11:99:ad:42:cd:56:18:61:dd:85:b8:49:49:
bf:06:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:05 2024 by rpki-client on console-ams.rpki-client.org