Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63664BBCA2C311EE810A1C20D25BE465.roa
File: 63664BBCA2C311EE810A1C20D25BE465.roa (raw, json)
Hash identifier: QojExvZiiLaHiwa0SbpbDA65MWh/074Ha64pwVL0N9U=
Subject key identifier: E5:BB:DE:FD:BD:D7:94:32:B5:49:41:44:95:B5:9F:73:99:E4:FE:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 667D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63664BBCA2C311EE810A1C20D25BE465.roa
Signing time: Mon 25 Dec 2023 01:17:36 +0000
ROA not before: Mon 25 Dec 2023 01:17:33 +0000
ROA not after: Wed 25 Dec 2024 01:17:33 +0000
asID: 137443
IP address blocks: 154.209.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26237 (0x667d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:17:33 2023 GMT
Not After : Dec 25 01:17:33 2024 GMT
Subject: CN=6588d830-daa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:dc:25:2a:ec:66:44:8b:0b:99:b2:c8:61:
fa:b4:80:6c:88:53:8a:e3:27:05:10:cd:6e:bd:d1:
00:c1:1d:fc:67:5b:e8:f7:e5:bc:ef:ee:92:c0:a4:
04:09:dc:f2:65:02:63:73:36:c6:ac:e0:d4:37:6a:
d2:4d:a9:1d:cc:1c:7c:55:4e:e4:27:f5:d4:cf:aa:
9d:07:2e:e9:1b:7c:a7:91:b3:5b:a9:93:98:a9:64:
46:82:f1:ee:f1:82:fc:eb:78:6a:c5:60:a1:03:62:
02:f0:55:12:f5:d3:d6:8f:dd:ca:ae:c6:df:20:5c:
2d:1a:65:6d:8a:48:e5:ed:bb:07:fc:03:9b:3b:36:
55:0c:5c:61:45:28:48:83:5d:80:26:3e:e9:f3:98:
6e:7a:21:6a:90:03:ce:cf:25:94:4e:7b:1d:8f:97:
ef:5c:81:ce:65:57:e6:82:a3:0e:cd:5b:b5:b2:ce:
02:a5:79:c4:78:00:4f:b2:1e:7f:b1:4d:89:42:b4:
ea:67:43:5f:ed:f2:94:77:5f:ef:3f:c4:7b:3a:aa:
5c:7f:5a:f4:4c:b7:72:6a:66:8c:db:dd:90:de:42:
67:80:a3:f8:cb:88:3c:2a:b5:77:9e:ef:c0:ed:19:
d3:35:ef:d5:0e:8c:cf:04:4a:f3:69:74:a8:8c:1b:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BB:DE:FD:BD:D7:94:32:B5:49:41:44:95:B5:9F:73:99:E4:FE:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63664BBCA2C311EE810A1C20D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.2.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:be:9d:6a:ff:66:73:5c:da:a8:52:10:ff:6e:0c:da:96:bc:
ca:14:05:c7:db:96:65:31:fd:44:ab:14:e2:4f:e3:ea:8e:8a:
28:e5:65:74:14:9e:1e:fc:61:f0:ee:7c:b5:28:c1:ab:3c:bf:
0c:6a:49:30:ae:0e:38:57:aa:b6:86:b3:c1:17:2e:0e:49:b0:
2b:f3:36:67:a8:89:e3:2a:30:04:58:2e:af:10:4b:94:36:3d:
a6:85:09:67:61:07:e0:ef:2a:03:dc:e1:20:1b:aa:c1:f2:96:
31:71:27:2c:bc:36:15:89:05:fe:6d:de:21:ef:06:fc:4d:7a:
77:70:a1:dd:c1:b9:79:2c:0a:cf:c9:f7:8c:d6:34:58:3f:d1:
ca:58:cf:19:93:11:b9:ca:60:c3:eb:6c:4f:31:93:34:ae:00:
75:3e:a4:d9:7d:75:4e:51:09:ab:5f:24:04:05:c7:f7:5a:c0:
1d:ea:ce:58:4b:41:90:4c:71:be:de:c2:ad:e0:a5:83:54:f9:
f1:2b:c2:93:31:81:44:4e:9c:a3:e5:4d:58:b6:c1:e0:fd:7a:
d4:9a:a8:c0:36:59:e2:ab:53:a2:05:83:53:53:2b:4e:c0:24:
e5:e3:b3:d4:02:48:ab:71:1b:36:45:65:92:16:ee:61:8e:30:
92:b5:f0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:06 2024 by rpki-client on console-ams.rpki-client.org