Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663243D253A411EEB6EEBD6E4AD9E6FC.roa
File: 663243D253A411EEB6EEBD6E4AD9E6FC.roa (raw, json)
Hash identifier: WneEmxSy/IvmouukMRWgHvpDqWK7ZQ6PNYNOKiw9DMI=
Subject key identifier: 8E:A8:65:E3:F1:5B:7C:6E:47:17:3E:BA:61:F6:E9:70:FB:3B:66:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663243D253A411EEB6EEBD6E4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:46:45 +0000
ROA not before: Fri 15 Sep 2023 08:46:42 +0000
ROA not after: Thu 08 Aug 2024 08:46:42 +0000
asID: 137990
IP address blocks: 154.197.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15803 (0x3dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:46:42 2023 GMT
Not After : Aug 8 08:46:42 2024 GMT
Subject: CN=650419f5-4688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:44:f1:a8:f2:e2:1d:fb:7f:ee:33:81:c2:
80:7d:fe:0c:f5:c9:8a:c2:02:c6:ff:2c:7c:1e:57:
0b:44:e8:58:1e:f1:6b:96:17:9a:25:47:91:07:83:
fa:fd:0d:c5:d9:38:8e:c4:5a:4f:7f:36:99:84:e1:
7b:b1:c0:48:9b:a8:4e:44:f0:4e:3e:71:30:37:14:
ab:d9:ee:6f:4b:00:c9:d6:44:30:3c:24:72:c0:34:
33:2e:f4:e4:75:e6:a8:35:2c:57:cd:51:c4:0e:38:
31:ce:c0:12:fa:ca:44:d2:77:22:d7:bd:4b:e7:3b:
dc:eb:bb:80:fb:70:e6:4f:f8:37:51:d6:48:d5:91:
68:92:82:e0:ea:99:9b:55:16:18:07:4a:84:ea:ee:
65:83:c2:77:bd:49:34:e1:f9:fc:fe:d7:f0:b3:74:
a0:3b:31:7a:20:f0:d8:44:b4:da:f3:af:60:9a:16:
25:0f:a5:e5:43:b4:c3:77:e8:7e:68:db:ac:68:bb:
75:73:a1:c2:a6:6f:25:f2:59:7a:dd:90:ad:dd:df:
ff:c4:5c:2c:50:15:c9:10:02:16:9b:ab:b1:0c:25:
74:bf:d2:2f:c7:6e:a5:27:03:28:ce:0b:ef:ec:47:
8d:cb:e2:eb:f0:8c:0c:0c:ca:b6:f1:e7:42:7e:9f:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:65:E3:F1:5B:7C:6E:47:17:3E:BA:61:F6:E9:70:FB:3B:66:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663243D253A411EEB6EEBD6E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0f:3c:f6:c5:5e:60:d1:b7:9a:8a:79:68:83:15:4a:06:c4:
63:8e:df:25:a2:da:86:d2:c7:87:26:df:cb:38:9b:d4:23:dd:
e7:48:45:3f:6f:46:91:18:fd:3f:f8:73:56:45:df:20:96:72:
c9:a2:a7:f9:02:68:c2:85:e4:00:f1:2c:fd:de:9b:7f:5d:fb:
19:42:a3:17:57:86:22:e2:e2:7c:f7:64:52:71:e1:68:8c:f0:
d6:74:74:74:93:38:1c:a4:2b:cf:a1:30:b7:05:da:5f:6f:d7:
e8:43:a4:e2:74:2b:91:be:b7:0b:30:86:32:51:da:fa:60:3b:
0f:eb:d2:b2:2a:56:cd:00:68:61:a1:3a:03:a0:26:ba:d1:cd:
03:9f:5f:10:11:c3:fc:67:c2:ba:14:fc:ad:14:8f:f6:1d:53:
1d:51:cc:91:5b:5e:7c:c4:fb:b4:e5:93:df:e0:dc:f0:c3:4b:
69:3c:4e:ba:53:5b:63:c3:88:a3:5b:83:ae:bc:ff:b4:6f:93:
f4:78:56:0a:96:8c:d5:2b:68:24:6f:ab:a2:58:46:10:ad:e3:
46:31:13:7c:8d:a5:23:55:dc:c5:de:03:a1:23:6a:1d:93:ee:
81:05:5d:dc:f2:84:13:e2:ab:c2:93:dd:a9:56:47:65:c0:4c:
57:d1:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:06 2024 by rpki-client on console-ams.rpki-client.org