Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6327548C0F3011EF9CA56725017001B1.roa
File: 6327548C0F3011EF9CA56725017001B1.roa (raw, json)
Hash identifier: aYv8jGXWPIT963AvbUDbdMM2z1/wcI/eRuBoglj7BKU=
Subject key identifier: A2:BD:3D:C2:CD:15:81:86:B8:B7:71:5E:4B:84:6A:29:D3:78:B7:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B6CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6327548C0F3011EF9CA56725017001B1.roa
Signing time: Sat 11 May 2024 00:49:57 +0000
ROA not before: Sat 11 May 2024 00:00:53 +0000
ROA not after: Mon 05 May 2025 00:00:53 +0000
asID: 209242
IP address blocks: 154.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46799 (0xb6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 00:00:53 2024 GMT
Not After : May 5 00:00:53 2025 GMT
Subject: CN=663ec0b5-5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:3b:99:c3:f8:92:87:7b:7c:71:be:e4:7b:
f5:64:b3:f8:c4:a2:af:8e:95:b8:eb:b3:7b:80:18:
9e:e0:9e:86:25:9a:8d:7d:41:be:ce:8c:8e:43:b5:
97:82:2e:1f:42:92:94:78:59:87:84:67:f4:89:58:
72:7a:5a:8d:09:6e:75:a7:fc:1d:36:79:0e:80:e9:
ef:d8:ba:6f:7c:b2:4e:99:24:08:e8:4d:e2:ef:49:
ce:80:4c:e4:a2:95:0d:d5:be:64:ec:1e:d4:97:9a:
0d:80:70:6f:76:a7:01:b6:19:bb:06:e2:7d:bf:10:
a0:2f:b3:4e:cb:3f:6c:52:fa:ad:07:79:60:65:4a:
c2:ad:92:d5:15:25:a3:15:27:b0:34:9c:5e:24:f8:
8b:72:cd:05:6e:ac:f7:d2:c5:ef:39:10:4c:d8:37:
a4:49:43:4d:cf:72:00:0f:20:49:56:40:05:7a:83:
4a:3b:cb:35:79:bd:ac:9e:0f:53:d4:a2:47:b8:67:
2b:ab:f1:98:42:c7:17:80:0e:9f:db:61:dc:8f:d4:
7d:11:ab:66:b8:1b:4a:d2:e8:ec:41:b5:75:a0:8a:
a3:2a:33:ee:fa:29:cf:29:24:6d:4a:d5:ae:6f:31:
61:34:b6:d2:5c:42:0e:40:e5:40:01:73:be:a6:d3:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:3D:C2:CD:15:81:86:B8:B7:71:5E:4B:84:6A:29:D3:78:B7:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6327548C0F3011EF9CA56725017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3f:d0:7c:c0:51:30:7e:5f:a2:7f:5b:03:2e:e8:be:dc:55:
f5:fb:0a:40:5d:62:ea:f6:c1:80:0e:10:86:aa:4b:e1:56:1f:
b7:18:16:c5:a6:a8:78:49:6e:42:c3:2f:21:33:1a:c8:85:56:
dd:80:16:4b:2e:f8:d8:d9:de:af:55:8e:18:d2:64:96:8e:89:
87:48:5a:24:35:2d:3d:99:e9:34:06:13:18:fc:b5:ca:82:9b:
0c:47:b1:22:d8:d2:73:69:b1:bc:ab:4e:95:47:c9:3e:28:e4:
90:f0:d1:f0:7d:90:88:c6:63:c5:ad:74:16:58:f9:35:e7:3f:
82:18:4f:62:8f:71:81:d7:0a:ba:55:89:07:be:05:bd:e9:c5:
ca:34:48:51:0c:e9:5d:62:75:65:af:76:ff:a2:45:7b:52:0a:
e6:7b:95:36:45:49:a1:64:0b:2b:eb:e5:6e:fd:ca:78:68:70:
ca:fe:84:95:7b:df:c5:2f:87:bc:b9:ed:2d:d6:9a:39:d6:fc:
91:54:71:db:42:6c:a3:73:aa:3d:db:ed:b1:b4:24:87:2e:61:
3d:3d:3a:d5:90:43:d2:f7:ae:96:2c:9b:d6:bb:f9:86:05:31:
7d:81:38:b3:15:14:e0:1d:f9:6d:07:34:07:37:71:94:bc:16:
78:63:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org