Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A50C26A014911EF9A2DCF60017001B1.roa
File: 6A50C26A014911EF9A2DCF60017001B1.roa (raw, json)
Hash identifier: ays24aNf9OL+OosO7XSlOKP21NHBP61YTDip/catFus=
Subject key identifier: 32:43:DC:83:E4:55:AB:BD:A6:3B:6A:5D:79:7A:20:6D:41:AE:EE:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A50C26A014911EF9A2DCF60017001B1.roa
Signing time: Tue 23 Apr 2024 08:13:50 +0000
ROA not before: Tue 23 Apr 2024 08:13:47 +0000
ROA not after: Sat 11 May 2024 08:13:47 +0000
asID: 9009
IP address blocks: 154.95.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44797 (0xaefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:13:47 2024 GMT
Not After : May 11 08:13:47 2024 GMT
Subject: CN=66276dbe-3e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:b8:7b:63:70:5d:6e:e5:b9:86:c7:f9:91:
30:ce:59:99:4d:96:6d:bc:86:68:12:8f:3d:51:af:
44:2d:92:5a:00:68:07:d4:cd:12:29:b4:97:6d:58:
49:9d:08:16:4f:90:4b:31:0f:92:db:cf:89:15:cf:
a7:3f:f4:8f:a8:d7:85:e0:35:7d:9e:77:f2:be:8b:
f1:53:70:65:d4:62:29:78:ae:8b:6f:55:a7:b4:49:
80:1b:b9:51:92:46:ca:20:eb:23:d4:56:f2:cf:c5:
d5:eb:83:6f:33:c1:f7:26:98:21:d1:c5:37:a9:79:
08:db:c1:23:31:73:7b:b2:5b:2c:f9:0e:ba:86:8a:
e2:34:ea:c4:5d:18:46:58:3d:5f:86:f8:57:fc:94:
7f:be:14:f8:22:53:79:25:8e:af:ca:58:a9:e0:7e:
b1:9b:d2:91:8f:a8:42:89:a2:4f:e4:39:53:63:a3:
22:23:a4:6b:80:84:73:4a:2b:0d:14:5e:8d:6f:37:
46:a5:e0:87:95:6e:c2:4a:52:0f:01:a0:84:aa:97:
b6:34:06:0a:32:69:34:46:ba:33:64:f0:0b:24:52:
48:4f:3d:84:73:ef:5b:53:95:3b:f8:eb:c9:27:56:
35:c4:e8:8a:4f:14:7e:a0:a1:c3:89:f7:75:5b:05:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:DC:83:E4:55:AB:BD:A6:3B:6A:5D:79:7A:20:6D:41:AE:EE:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A50C26A014911EF9A2DCF60017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:a9:50:18:9a:ef:c8:8b:48:95:0e:bd:7e:e1:c4:97:c7:94:
dc:39:52:82:50:6a:ce:7f:e4:09:f9:38:cf:e2:5d:f7:2e:4b:
0c:8e:9b:01:d5:b5:e4:c9:77:59:c1:4e:6c:d9:c8:2e:94:05:
6c:88:4e:a7:52:d5:78:41:35:4e:4a:d8:b2:c6:a7:e5:73:eb:
e8:f4:e0:f3:4e:c9:84:80:e7:d7:f4:73:5e:a4:50:4e:72:9f:
09:7a:2d:06:74:6a:cf:7c:f6:3d:c1:89:c5:bb:21:2c:8d:d2:
48:4d:1c:a3:88:17:ab:28:4c:53:3e:b7:7b:81:c7:e0:6f:e4:
c5:33:11:e3:81:b4:71:c8:5a:da:95:f0:91:3b:4f:e4:c2:96:
39:b3:48:4f:d0:7b:ed:76:e0:a0:bd:0f:84:fc:a7:80:c2:ab:
72:36:1b:e5:17:4f:61:40:f4:26:25:69:20:c5:0f:15:8e:c1:
d3:07:49:8a:d2:a9:d3:3d:ed:5f:2f:f4:c8:52:63:81:07:5d:
db:38:3e:09:f3:1d:06:d5:08:bc:fa:d3:35:00:7d:04:09:ec:
68:3d:12:73:6a:f2:c3:2a:03:d7:9f:b2:d9:06:d5:c6:f6:59:
5d:e0:ed:7d:16:51:df:f8:c5:ff:8e:69:11:a5:3f:05:b1:16:
1b:bf:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:35 2024 by rpki-client on console-ams.rpki-client.org