Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F871870E9A711EE80E09A67775412E6.roa
File: 5F871870E9A711EE80E09A67775412E6.roa (raw, json)
Hash identifier: X6BR8nyldiJf39Stv5ahEOmXOlyx3pw14/dncE0Ts0c=
Subject key identifier: 75:B1:BB:B9:0E:76:3B:A2:B7:24:73:7A:F5:52:4A:F4:17:1B:29:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A658
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F871870E9A711EE80E09A67775412E6.roa
Signing time: Sun 24 Mar 2024 06:25:57 +0000
ROA not before: Sun 24 Mar 2024 06:25:53 +0000
ROA not after: Fri 26 Apr 2024 06:25:53 +0000
asID: 8796
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42584 (0xa658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 06:25:53 2024 GMT
Not After : Apr 26 06:25:53 2024 GMT
Subject: CN=65ffc775-f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:49:6a:a7:f5:e8:aa:8a:95:90:2b:55:c9:
9b:8f:44:56:40:e0:6b:97:6e:59:0a:c6:76:93:c4:
90:4e:49:ac:2d:6b:34:5e:aa:dc:f8:c7:ef:2d:b9:
f6:22:6e:c8:70:8b:79:b0:67:91:38:95:64:56:1f:
50:e8:ae:38:73:30:85:3b:14:79:7d:ca:b7:68:74:
50:08:72:69:7d:81:c9:2d:66:37:2e:cb:71:d4:d9:
b5:53:34:13:37:64:2b:54:06:20:22:f8:7d:51:c0:
e0:cf:7b:4d:f4:66:b6:ea:34:ba:53:92:46:b0:35:
f5:fb:d0:bf:64:8c:b8:27:b6:ab:de:f2:62:4c:43:
d4:de:fb:85:8a:10:e4:21:4c:4f:0e:75:6a:b2:ab:
c4:5d:be:cf:59:a7:b5:d0:78:87:0c:2c:47:d8:b9:
82:c2:d6:d5:32:f2:a8:2e:c6:2f:ca:b9:8a:a6:3b:
9a:03:ae:34:f0:34:96:79:43:6b:e7:34:fc:51:63:
9c:4e:c5:0d:e1:2c:c0:c0:6a:5d:76:7b:99:c0:00:
e0:0a:cf:f1:97:6f:ef:03:c8:13:72:ea:03:00:f1:
dd:21:13:68:84:52:9f:8e:3c:45:a5:23:38:52:e2:
cb:7c:0e:17:88:cf:69:38:93:d3:7c:61:0d:48:91:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B1:BB:B9:0E:76:3B:A2:B7:24:73:7A:F5:52:4A:F4:17:1B:29:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F871870E9A711EE80E09A67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:22:36:d7:c7:f7:90:15:de:81:6d:a1:a7:c4:ab:74:91:c4:
c4:71:97:4a:7c:92:81:0c:c2:d4:fb:ef:fd:6f:82:c3:2d:94:
e4:8b:cb:6a:5c:7d:cc:3a:5f:07:95:29:73:73:1a:a4:7f:bc:
b4:7d:e1:62:a4:69:2b:41:79:7a:b1:f8:7e:1f:ef:da:29:15:
b8:c4:98:ff:9e:d6:e4:8c:72:17:20:8f:b5:a5:23:1d:8b:76:
e9:1c:b7:08:87:35:8b:d9:63:4f:5f:3b:e5:5a:83:54:c9:ed:
29:38:92:77:2e:39:73:f4:4b:f7:d8:ed:66:49:61:17:82:f0:
c7:c4:62:50:5e:1a:62:9f:52:79:72:59:63:28:34:2b:3d:58:
1c:46:76:80:88:c2:7c:50:7a:f3:87:d1:64:c6:eb:45:c9:15:
97:cf:63:4c:8b:24:1a:e5:34:63:bb:79:ea:9b:37:be:f5:9e:
26:a3:03:d8:75:8f:ec:c0:3e:47:10:8f:33:1d:ae:f2:29:cc:
2d:af:75:d4:95:74:86:42:03:ec:a7:cb:47:10:99:d6:48:21:
a5:54:93:57:a2:1c:b2:5e:9d:25:20:be:b6:83:e8:7a:a7:97:
c9:aa:4d:5e:47:e1:ed:74:fe:41:9b:4e:b6:f3:d4:98:b6:41:
e1:f4:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:42 2024 by rpki-client on console-ams.rpki-client.org