Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B413CD67BA211EEB3E9F6774AD9E6FC.roa
File: 6B413CD67BA211EEB3E9F6774AD9E6FC.roa (raw, json)
Hash identifier: /amfDDttGRkjWOvokYBSSV1p2tVuEuj3uFxRTSdi3L4=
Subject key identifier: BB:D5:C3:43:49:2B:E3:14:CA:34:74:84:99:24:7C:CE:C4:AB:D0:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B413CD67BA211EEB3E9F6774AD9E6FC.roa
Signing time: Sun 05 Nov 2023 06:13:21 +0000
ROA not before: Sun 05 Nov 2023 06:13:18 +0000
ROA not after: Tue 05 Nov 2024 06:13:18 +0000
asID: 133448
IP address blocks: 154.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19262 (0x4b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 06:13:18 2023 GMT
Not After : Nov 5 06:13:18 2024 GMT
Subject: CN=65473281-8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:67:62:17:8c:1a:75:41:08:44:a5:b2:f7:
4d:c6:fc:c3:f3:d6:1d:02:8b:7c:2a:ab:6c:c4:8d:
72:d7:b5:7f:a9:fd:2d:43:46:85:4a:36:42:87:9f:
4c:ad:12:1a:91:91:c4:f5:6e:bc:d9:65:5b:04:6d:
a4:dd:44:5c:82:13:93:c0:cb:b5:78:c0:2e:64:79:
73:5e:05:d5:77:f5:1b:17:19:9f:f3:a4:b1:71:b9:
ed:e4:45:c3:dc:b4:69:b8:29:d6:26:63:70:fd:f9:
58:ee:a2:53:a8:60:0f:ba:bd:4d:34:57:a4:21:80:
c3:14:78:65:0f:1f:28:94:bf:83:b4:c1:e1:f2:7a:
46:c2:a6:45:34:b8:d8:76:29:0a:29:40:8e:4e:71:
1c:34:82:95:ba:5c:6f:30:40:3b:d9:77:7d:e3:a1:
09:ea:01:ce:e7:64:7a:44:c9:58:65:a2:a2:95:12:
8c:68:ea:ea:fb:50:0e:44:73:38:b2:c9:87:f2:c9:
4f:ac:55:7b:af:76:bf:7a:3f:7d:48:8c:2f:09:cb:
75:02:18:ee:36:08:3b:eb:7e:c9:9f:32:3f:cf:02:
49:d2:11:42:55:d0:27:3e:b4:50:02:6c:e2:3d:3d:
06:df:44:66:ea:c7:66:43:d3:6a:29:64:c1:f6:14:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D5:C3:43:49:2B:E3:14:CA:34:74:84:99:24:7C:CE:C4:AB:D0:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B413CD67BA211EEB3E9F6774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:27:0d:95:e3:28:a7:e4:f5:87:ca:ed:42:23:d8:5d:8e:23:
47:60:22:d7:1e:1e:d1:4f:8c:4b:44:44:79:86:41:02:70:bc:
dc:d9:18:d2:15:94:ce:14:33:be:3e:04:29:54:ac:f6:dd:1b:
d3:d1:be:28:04:b8:3d:ae:d0:11:6b:36:6d:98:dc:69:a5:de:
5b:18:00:08:66:4e:64:32:13:1f:70:94:a4:09:8e:12:cc:4a:
9b:c8:d2:8c:a9:f4:03:ff:7a:d0:63:28:3c:9c:8b:ff:96:5d:
c6:77:c2:cf:a2:25:88:46:c8:ac:de:9f:de:f8:cb:b0:58:5e:
8c:b3:6d:1d:bb:0b:08:2a:3f:b0:76:a1:14:9d:9c:1c:1f:ba:
6b:a5:50:63:f3:99:90:85:64:d7:3d:d6:8b:03:27:84:3b:27:
75:07:58:b7:20:6c:1e:b3:7a:9b:f4:72:30:4b:09:f0:9b:11:
87:0a:b9:e6:43:a3:e0:8d:83:7f:d7:19:4c:e4:16:bf:6e:ed:
ca:d2:ab:68:32:f2:c9:48:48:dc:39:fd:c3:7e:1f:85:fe:fe:
60:e9:e1:11:6d:8f:9e:1e:b6:d9:94:a9:00:fe:d8:f0:6c:33:
be:3e:da:0d:4a:23:65:24:18:dd:e5:fc:99:e6:b2:ca:10:b5:
88:94:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org