Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7020AA1053A311EE954A826B4AD9E6FC.roa
File: 7020AA1053A311EE954A826B4AD9E6FC.roa (raw, json)
Hash identifier: zlq2xnMrXjS7KgDvb7WZ5ia+qil4iPaT7fAsuWtfOsI=
Subject key identifier: 6E:7E:4A:04:81:68:5B:F6:E0:08:F4:AB:F9:58:91:0B:E3:F8:F6:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7020AA1053A311EE954A826B4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:39:52 +0000
ROA not before: Fri 15 Sep 2023 08:39:49 +0000
ROA not after: Sat 08 Jun 2024 08:39:49 +0000
asID: 142403
IP address blocks: 154.209.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15789 (0x3dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:39:49 2023 GMT
Not After : Jun 8 08:39:49 2024 GMT
Subject: CN=65041858-0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:b6:f1:15:be:b6:62:f8:4f:41:27:ea:6d:
d9:30:91:73:fb:4e:58:ee:5e:95:d4:f2:cc:bd:31:
98:79:66:e0:7f:8b:6f:33:73:e0:2e:de:d5:af:de:
d2:a2:0b:ae:2a:80:f0:a2:0f:66:40:46:a1:4d:4d:
d0:34:c9:3a:8e:db:15:88:b4:29:ce:61:97:dd:cd:
67:a5:cc:cf:8d:0e:c4:09:8f:77:dd:5e:50:51:a0:
d4:0d:fa:ec:75:20:a8:b1:f3:c1:4b:d3:e0:98:4c:
6f:77:32:e9:64:4a:e8:d6:8e:8d:69:4e:84:62:50:
0c:7f:42:83:2b:84:d5:ec:4c:a7:28:7b:80:4c:09:
60:48:5a:ec:46:66:2e:43:20:25:4f:55:8f:33:8e:
06:48:aa:32:0b:97:91:7a:ba:1a:01:dd:6c:e5:80:
8c:8b:fb:b3:7a:43:61:1f:d2:40:72:63:3f:34:d4:
f0:8d:cf:59:d4:52:aa:5b:3a:98:55:d7:cf:bd:43:
c4:08:36:6c:69:53:65:de:4a:db:1d:85:6e:b2:db:
56:27:03:c3:17:41:5f:dd:a1:e4:9c:dd:66:9a:0b:
f1:ba:4a:60:73:e0:db:c6:04:f9:5f:fc:ec:96:70:
fe:69:ad:13:7e:49:a2:a4:b9:7b:cb:6a:c2:c1:e1:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7E:4A:04:81:68:5B:F6:E0:08:F4:AB:F9:58:91:0B:E3:F8:F6:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7020AA1053A311EE954A826B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5b:75:f4:bd:e8:65:60:15:be:7f:d2:4b:6d:d8:9f:8d:22:
38:4d:42:1c:82:5c:72:8d:a5:69:d3:5e:fe:11:f8:29:7e:59:
31:da:cf:91:15:18:bd:21:29:cb:dd:a2:62:39:2b:f4:d8:05:
3b:29:3d:5b:71:f0:c7:1f:08:f0:15:20:a2:d4:cc:9d:62:3f:
75:61:92:71:14:9a:a4:91:69:8a:ca:de:2b:17:41:e7:61:34:
20:53:5d:1d:5c:ad:e1:88:22:4a:f0:30:82:6e:dc:75:45:78:
5b:ae:f3:2e:03:a0:85:e2:b2:44:4f:db:4e:25:c0:a9:6f:44:
49:26:9a:95:f0:d1:84:f6:21:47:c5:34:d0:4f:33:5e:5f:c6:
25:08:e0:80:b7:3f:26:12:ba:61:8e:28:bc:96:4e:8e:11:57:
35:42:5d:28:42:e2:4e:00:73:28:38:2f:42:40:df:fd:5a:7e:
f5:99:55:0a:a2:c7:2f:fd:12:d7:a6:a3:85:c8:3a:2b:46:48:
9e:0c:80:7e:b3:c8:30:df:c1:0c:5d:b3:cb:86:75:39:4f:4f:
94:4b:1f:93:da:80:b8:63:77:ff:5a:d4:60:b1:d3:3b:37:65:
95:e5:27:76:0d:df:25:c2:6c:f9:7e:9a:88:e1:74:35:73:80:
0c:4f:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org