Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D9C455853A211EEA3D05C684AD9E6FC.roa
File: 5D9C455853A211EEA3D05C684AD9E6FC.roa (raw, json)
Hash identifier: hU5eqf3U3P7Ac5IsUQV2cR8IT10gl8NsutEzfZnd5w8=
Subject key identifier: 6B:CF:A9:05:D9:49:0D:B6:59:B6:74:6A:18:7C:06:71:D8:A6:88:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D9C455853A211EEA3D05C684AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:32:11 +0000
ROA not before: Fri 15 Sep 2023 08:32:08 +0000
ROA not after: Sat 08 Jun 2024 08:32:08 +0000
asID: 142403
IP address blocks: 154.221.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15773 (0x3d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:32:08 2023 GMT
Not After : Jun 8 08:32:08 2024 GMT
Subject: CN=6504168b-ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:ec:1d:eb:11:d4:0b:38:07:2c:5f:2f:cb:
23:83:57:04:e7:83:6c:2c:da:d5:b6:03:3e:46:fa:
dd:76:5a:f0:0c:61:3a:e1:6b:7f:26:92:0f:f1:64:
53:63:bc:ae:c2:8b:0b:96:c4:30:8e:b8:a7:00:70:
75:ff:dc:e4:e8:2c:e3:66:1d:21:b3:cd:32:dd:00:
de:4c:e6:9a:66:41:c2:12:39:06:9d:32:66:9b:da:
c0:54:00:4a:d6:79:29:54:53:bb:92:15:28:bf:cb:
50:05:9b:45:18:c9:56:cc:60:e1:3c:a2:2c:35:e5:
aa:5a:21:6f:94:ad:4e:7d:6a:b9:aa:f0:8a:2e:fc:
c2:dd:fb:56:35:49:61:bd:dc:fb:ab:18:c3:20:28:
ff:0e:da:f6:20:99:2e:cf:8d:4e:5e:70:d8:70:b1:
80:ec:9f:4b:80:a8:70:7d:c8:24:0b:36:2e:a1:e6:
65:fa:08:e8:4a:0e:c3:60:b5:af:06:e1:ee:3e:db:
1f:9e:d4:0d:a6:fa:5e:de:e2:1c:84:65:d6:1c:cc:
8e:aa:c5:be:18:3b:64:fc:ed:f7:ac:32:88:4c:71:
6b:3a:11:91:ac:88:86:14:50:46:56:e7:04:21:fb:
97:cc:d6:00:31:b1:0c:25:6c:b2:20:6e:9b:52:56:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:A9:05:D9:49:0D:B6:59:B6:74:6A:18:7C:06:71:D8:A6:88:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D9C455853A211EEA3D05C684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.16.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a9:f5:4a:8a:71:9e:f7:7b:90:17:46:da:bb:89:2c:58:3b:
5b:68:cd:17:11:05:64:03:1e:35:42:9a:ce:8a:11:c7:b1:12:
ce:58:23:7f:95:b3:45:ec:f1:f6:8c:89:72:86:00:d1:3c:08:
e1:9e:f0:91:15:b3:3e:2e:fc:82:16:6e:55:84:39:eb:33:53:
5d:96:51:59:9c:31:cc:04:fa:2f:39:69:dd:a6:58:ef:57:71:
18:e4:8f:8b:c7:fb:59:06:18:ed:cd:79:19:b3:48:7a:89:25:
bd:b1:eb:f7:2b:05:f9:ca:0a:04:9a:9f:a1:b1:ab:06:ae:b1:
e7:d4:5a:22:80:74:4d:fd:9b:bc:bf:3e:8c:70:19:5d:60:59:
a5:c0:53:44:e1:18:4c:5a:7b:7c:91:be:20:6e:6f:5e:28:0f:
df:9c:d2:e3:8d:35:1e:8b:f5:a9:ab:42:56:60:81:f6:06:16:
90:fe:a4:38:e3:73:1f:1b:0a:f5:39:3b:46:85:0c:c1:6a:f1:
32:52:74:c6:7f:7d:c4:a7:3a:d8:d8:e1:04:46:51:32:4b:a6:
b5:3d:28:f5:35:de:f4:e7:8e:2f:a9:f5:78:a4:0a:63:54:9c:
0d:03:86:46:44:e1:74:90:e4:4c:ef:98:8b:f6:cd:8b:9a:31:
d2:6c:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org