Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC6F7545E1811EE8BF3EF494AD9E6FC.roa
File: 5EC6F7545E1811EE8BF3EF494AD9E6FC.roa (raw, json)
Hash identifier: H1IS2Iu+sM2JTKdFvP3xVN759Td8T4yfxVVLKGC8hl4=
Subject key identifier: F8:D0:1F:69:46:C0:D1:38:F4:05:27:CC:83:03:1E:E1:B6:E3:B5:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 437D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC6F7545E1811EE8BF3EF494AD9E6FC.roa
Signing time: Thu 28 Sep 2023 16:02:06 +0000
ROA not before: Thu 28 Sep 2023 16:02:03 +0000
ROA not after: Sat 28 Sep 2024 16:02:03 +0000
asID: 21859
IP address blocks: 154.207.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17277 (0x437d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 16:02:03 2023 GMT
Not After : Sep 28 16:02:03 2024 GMT
Subject: CN=6515a37e-4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:5c:08:f9:82:43:53:2f:4d:25:e8:14:d1:
b1:66:52:c2:d5:cd:c3:26:d6:1e:86:5c:fb:37:8f:
5c:e1:dd:ea:a6:86:d5:6d:ba:bd:ae:9a:65:15:6a:
22:b1:70:c0:ca:6d:0b:c5:92:60:b0:0a:84:a9:12:
da:24:95:05:7e:02:47:85:a5:12:ca:1a:8a:a0:ee:
3b:84:6a:1e:67:df:14:1a:a0:8a:d7:60:1d:8f:1f:
cb:7f:5e:c9:fc:a7:ec:10:3d:a6:74:8e:63:3b:7b:
47:61:c9:4e:70:b2:75:65:3e:f0:c8:ef:7b:70:33:
d5:73:af:a6:06:97:76:cd:07:7f:a9:9e:bc:d8:e6:
66:34:9c:5b:80:28:3d:81:ff:fb:e0:48:a6:29:96:
6e:07:ca:a0:17:e9:85:b7:8d:d0:f3:31:c6:b2:1f:
e1:82:67:3a:dd:b3:ff:46:e8:9a:c8:ca:1c:ae:89:
41:1c:17:0f:c1:fe:02:de:d4:7f:53:9d:de:85:fb:
25:d8:d1:f1:b7:e4:05:c2:1c:ea:f8:4d:9e:e3:9a:
1d:95:dc:89:b8:65:ed:3e:e5:eb:69:8d:2c:a1:35:
31:2e:ad:fc:b1:f7:76:1f:74:69:99:9d:a2:5a:16:
81:a7:db:a6:10:96:5c:8d:83:e6:f1:00:f7:c2:c3:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:1F:69:46:C0:D1:38:F4:05:27:CC:83:03:1E:E1:B6:E3:B5:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC6F7545E1811EE8BF3EF494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:da:e2:9a:f6:86:57:c4:1b:87:bf:41:6d:25:6c:63:d5:51:
34:e3:96:0a:e5:12:dc:f7:9b:48:ef:68:43:e9:56:48:62:b9:
b0:9c:bb:2b:6f:34:11:81:81:cf:91:05:84:28:65:76:f5:56:
e8:60:f2:7d:a0:ac:6b:32:97:fd:b4:61:92:77:21:03:14:d9:
45:79:29:39:85:36:12:0c:41:2b:bf:8f:47:7b:9c:04:75:b3:
2a:18:46:fc:04:9c:24:cc:75:35:01:6c:9b:97:c3:fb:f2:c5:
51:fb:84:41:17:1c:fb:ab:47:a3:95:95:69:47:81:53:a0:42:
28:e1:1f:28:28:a8:db:6b:16:6b:29:bd:54:f3:6e:9c:95:3b:
3d:91:cb:29:73:4b:31:6c:5c:f6:3d:68:2c:cd:59:29:3d:0d:
47:83:2e:68:45:43:8c:20:6a:3c:dc:98:62:c4:e2:c4:ed:7e:
75:d0:f5:4c:5f:35:8c:c7:d8:d1:c5:5e:87:0b:1a:bf:fb:b7:
f4:b9:90:66:bc:8f:d9:83:14:a4:b6:76:c5:22:14:cd:7e:a8:
23:ea:8c:d1:c2:5e:c5:97:76:98:47:ed:94:77:8d:e4:fe:19:
2e:a7:a7:5a:20:fd:85:c7:f1:db:62:06:f2:55:89:24:7e:a1:
d8:a4:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:26 2024 by rpki-client on console-ams.rpki-client.org