Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE15EA25C6B11EEBAFCA16B4AD9E6FC.roa
File: 5BE15EA25C6B11EEBAFCA16B4AD9E6FC.roa (raw, json)
Hash identifier: u0VZy14Xk6UXCX8UTtfBDw7/ehz5NukipK8cSuMWgVk=
Subject key identifier: 01:63:64:B4:40:BF:CC:5B:CE:7F:D1:9A:8E:DD:A5:8D:16:F9:8F:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4208
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE15EA25C6B11EEBAFCA16B4AD9E6FC.roa
Signing time: Tue 26 Sep 2023 12:51:07 +0000
ROA not before: Tue 26 Sep 2023 12:51:04 +0000
ROA not after: Sat 28 Sep 2024 12:51:04 +0000
asID: 21859
IP address blocks: 154.207.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16904 (0x4208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 12:51:04 2023 GMT
Not After : Sep 28 12:51:04 2024 GMT
Subject: CN=6512d3bb-8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:76:75:a2:c9:e5:8e:2c:9b:35:02:b4:15:
96:a8:c4:6d:f4:da:db:19:ef:c5:f0:43:20:2c:80:
f8:89:71:14:53:43:00:6e:77:0c:3c:cb:06:ba:d4:
cb:e2:81:92:98:0a:0d:f9:13:c3:12:19:e7:a3:59:
92:fb:4f:cc:a8:1f:5e:c1:26:4c:c5:50:4e:9c:c8:
04:cc:42:2d:6d:50:b0:07:2a:8d:47:da:22:4f:18:
52:c6:8e:04:76:c5:55:39:9d:ef:5d:dc:2f:76:d5:
79:c2:53:32:db:a7:08:ac:83:ed:a8:3c:4d:31:d2:
3a:28:11:b0:7e:05:5a:42:d8:76:20:b7:5b:71:46:
fb:a6:d0:4b:c5:4b:ac:8e:39:5c:49:e2:aa:13:fa:
d6:16:72:b4:d9:01:00:e0:05:45:38:44:1d:26:25:
8f:d7:0c:b7:c9:d5:75:60:50:c9:80:b8:01:f8:e6:
5f:bf:45:8b:72:69:31:59:67:2e:32:6d:c4:d6:a0:
86:7e:5f:ba:a4:b2:a9:fe:e9:a3:dd:85:2e:96:b7:
70:2a:6f:a5:8a:66:ab:1e:d3:18:1e:f7:c1:61:31:
92:b9:d6:86:1b:a5:a9:1c:c8:9e:b3:b4:b6:84:5e:
83:6c:b6:88:e2:d8:42:b8:f1:2c:cc:e0:74:9f:62:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:64:B4:40:BF:CC:5B:CE:7F:D1:9A:8E:DD:A5:8D:16:F9:8F:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE15EA25C6B11EEBAFCA16B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:31:63:87:81:82:c7:20:35:04:70:9d:37:19:a6:40:86:25:
90:d7:ad:dd:ba:79:a1:46:ee:c1:8c:04:88:f0:ff:f6:7c:a1:
d3:23:6a:c5:56:f5:95:70:30:fe:19:18:09:e9:4b:52:25:92:
20:0b:c0:a6:58:01:b2:c8:48:bc:f5:4f:da:06:1e:37:09:37:
12:ac:96:d8:fb:17:65:a9:b9:af:ac:4b:4d:a0:11:3b:93:c8:
36:fc:71:05:ee:94:57:50:8b:3c:21:17:3a:d5:19:2f:09:8c:
2c:6e:b9:22:40:97:ef:99:60:81:6f:4c:30:75:4e:c6:05:06:
86:87:1c:c6:11:42:a7:0d:5a:fa:ad:3d:14:9c:8c:45:85:1c:
a4:ce:16:d0:b4:68:5b:d8:69:ac:e0:be:4d:4a:40:cf:e2:d2:
91:d0:b3:9e:a0:aa:d9:f4:af:bf:99:8f:f0:23:2c:59:de:6f:
a9:d6:73:d1:84:69:3f:11:1b:06:d4:53:a9:6c:d4:cf:a5:d7:
d6:9f:8b:1c:30:ac:bc:a1:e3:0d:92:4f:41:3c:2a:cd:33:22:
c8:bd:c9:36:bd:52:aa:f1:a0:f4:ac:0d:02:a2:bd:fb:5d:01:
b9:21:ca:1c:cf:50:f1:9d:2f:6b:e0:dd:6a:f8:6b:1c:63:e1:
b5:76:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:03 2024 by rpki-client on console-ams.rpki-client.org