Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/684D4110E46511EEA563479A775412E6.roa
File: 684D4110E46511EEA563479A775412E6.roa (raw, json)
Hash identifier: VVF75t/B7CflAgW/vaqkTbg7ZCr98V45/Mcun6K4S98=
Subject key identifier: C9:BD:8C:28:ED:7F:66:41:04:F7:4B:64:BD:B1:4F:F5:62:A3:55:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A1E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/684D4110E46511EEA563479A775412E6.roa
Signing time: Sun 17 Mar 2024 13:51:09 +0000
ROA not before: Sun 17 Mar 2024 13:51:05 +0000
ROA not after: Thu 13 Jun 2024 13:51:05 +0000
asID: 5065
IP address blocks: 154.198.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41443 (0xa1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 13:51:05 2024 GMT
Not After : Jun 13 13:51:05 2024 GMT
Subject: CN=65f6f54d-3803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:f1:9f:39:c6:65:c1:19:ff:f5:e9:ab:a7:
78:15:f3:95:18:a5:c8:e3:8c:54:31:33:7e:93:21:
85:db:02:f1:14:1a:70:01:01:51:31:41:2d:2e:b4:
e0:0a:62:31:19:8a:32:76:e1:9f:24:a3:12:d1:00:
77:e9:eb:87:22:e8:34:b7:db:5a:bc:8c:a5:af:d4:
55:6f:12:d4:dd:55:85:15:54:e1:7d:fb:c5:b2:79:
9d:3a:c8:8c:b3:60:23:ee:46:84:f8:05:f6:8f:ba:
9d:2a:4a:ac:7f:1e:46:29:db:24:79:0f:da:30:13:
b2:07:e5:f7:6f:98:78:d7:4c:e9:04:47:60:e9:d6:
96:86:c9:71:d3:9a:39:af:bf:4f:d9:19:c4:ab:dc:
be:9f:c6:57:da:ca:ad:3c:b7:a5:20:a4:fd:41:08:
a6:9b:25:9b:d5:01:c4:e0:29:10:0a:a5:57:bb:16:
dc:30:19:45:61:d9:c1:a0:ea:37:ba:9d:d8:a0:2b:
ff:3d:02:9e:3c:b6:1b:85:e6:bc:65:9f:26:53:fe:
22:51:85:56:ec:af:9b:10:92:ee:25:87:2a:de:4d:
c2:3b:c3:db:d8:de:85:ce:c1:d6:3e:68:db:49:52:
d5:e2:e9:c9:88:f2:ee:1b:b4:c1:a1:ca:57:09:70:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:8C:28:ED:7F:66:41:04:F7:4B:64:BD:B1:4F:F5:62:A3:55:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/684D4110E46511EEA563479A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.16.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7b:fa:c6:6d:2e:32:07:0b:b2:7a:10:cf:f0:4e:15:48:72:
53:23:24:eb:45:7f:8d:7b:f6:5c:30:6c:f5:54:d2:f8:50:fa:
0a:d6:de:70:e3:07:f8:2e:fe:f3:67:6f:ec:77:ad:de:75:c1:
a3:74:85:22:e6:f9:7b:ff:bf:7e:e9:69:dc:22:f3:c2:fd:44:
40:df:c8:a0:ac:a1:93:09:ab:60:2c:05:6e:5f:5b:bf:72:0c:
dd:d6:54:ad:32:c8:ab:5d:7e:6a:c9:8e:a2:bd:c1:cb:8a:98:
39:f1:d0:31:f4:e0:a0:7f:58:d1:30:ba:30:15:af:4d:7d:af:
fc:ff:74:d0:e4:9e:dc:99:bb:d1:48:bf:ef:48:dc:2f:27:e7:
42:f2:d0:fb:37:fe:86:b7:e4:6a:6e:8e:bd:e5:57:85:2c:fa:
40:9b:f4:6d:97:07:c2:fc:93:a7:1b:f2:27:f5:65:e1:9c:b2:
64:23:20:c3:6a:e7:67:47:de:7d:7a:3e:31:f1:cc:a5:4b:32:
6c:59:52:1a:50:1a:46:a0:1d:34:f5:c0:76:38:6b:cd:df:83:
61:48:5a:87:b6:89:5e:9c:8b:8b:fa:c8:fa:ea:8b:67:92:e2:
6c:24:a3:07:97:21:51:d5:2d:0b:ad:37:37:e1:bb:53:b0:4c:
5c:96:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org