Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773727C4278011EE9E001C194AD9E6FC.roa
File: 773727C4278011EE9E001C194AD9E6FC.roa (raw, json)
Hash identifier: EMasUKhrmWuDgl4vWJ9QwcbfCRigrXGSwDYuEhu2vNE=
Subject key identifier: 8C:E3:00:22:E1:20:00:3D:B3:2C:D7:B9:B9:93:F7:43:BF:A0:80:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3393
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773727C4278011EE9E001C194AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:38:40 +0000
ROA not before: Fri 21 Jul 2023 04:38:37 +0000
ROA not after: Thu 13 Jun 2024 04:38:37 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13203 (0x3393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:38:37 2023 GMT
Not After : Jun 13 04:38:37 2024 GMT
Subject: CN=64ba0bd0-c807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:b9:d3:83:fb:64:81:62:fc:3f:8e:94:a2:
e2:3c:21:b6:5b:bb:a8:2a:81:8a:49:ee:35:a1:9e:
9e:41:25:73:ee:16:d3:6f:c2:a0:c4:4a:3b:d4:94:
b5:57:9f:91:82:e0:f5:26:f7:c8:5e:6f:b0:4b:6d:
35:63:a4:db:37:1e:1b:b1:5d:ef:4f:08:83:dd:35:
df:c0:11:07:03:0c:42:d1:6e:fc:8b:d5:1a:80:65:
6e:58:31:ac:4d:bd:9b:d2:ff:27:ec:f8:1f:10:c7:
be:b4:9e:96:4c:8b:12:18:7a:b9:9e:fb:57:d5:d6:
e8:b6:59:33:18:e0:4a:78:80:a1:67:7f:ad:72:22:
f8:02:82:13:08:60:14:78:f7:e4:33:15:12:cf:af:
84:35:98:da:76:f9:c6:67:19:63:87:38:35:be:c1:
2a:5a:ab:a5:a5:46:a5:6a:cd:4c:c1:0a:ad:03:64:
f7:1a:03:b1:b4:70:9f:7d:39:c5:7a:b9:26:80:85:
36:f1:66:ea:04:9e:c0:8f:b4:8b:7f:78:f5:da:f7:
57:10:59:c3:07:ce:32:59:12:de:c1:76:fd:c0:f8:
ea:f2:24:e7:8a:09:c0:a7:1a:22:e3:0c:af:d6:a4:
4d:6b:e1:63:b9:f0:57:b0:75:66:30:a4:61:34:96:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:00:22:E1:20:00:3D:B3:2C:D7:B9:B9:93:F7:43:BF:A0:80:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773727C4278011EE9E001C194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
af:04:8d:8d:78:b0:38:23:3a:92:8a:88:5f:34:1d:0d:d5:f2:
ae:b1:f5:16:ae:05:4d:f0:31:c3:df:5b:cd:04:29:ff:27:58:
33:a6:3b:6d:b5:98:11:ad:8c:b5:87:ce:28:21:cb:e4:3b:bc:
eb:84:18:a5:a2:39:49:71:9e:73:ff:cf:ea:4b:75:89:e3:d7:
ec:04:a7:d1:09:4b:2a:e9:72:ef:9a:78:f3:09:e1:55:e8:85:
62:49:74:d1:8f:76:43:fe:43:25:f1:ad:90:d8:d6:03:aa:ab:
31:14:d4:3a:f1:a9:db:87:a6:12:b5:31:56:d4:ed:f3:f0:78:
c4:4d:29:f6:0d:cd:dc:8e:a6:6d:68:dc:31:b5:96:e3:24:e6:
ce:c6:43:54:99:e5:b5:58:25:c5:2f:78:2f:0d:0d:2e:b3:f6:
50:2e:49:d8:4f:b2:f4:65:d5:49:e0:0c:c9:43:3d:96:df:3f:
27:d8:20:ae:bf:0e:e0:f8:2a:88:76:97:7c:88:9f:23:6c:28:
35:81:66:66:32:1c:05:87:ae:ea:a2:08:61:59:59:88:f6:d5:
8b:78:5b:42:4c:a7:a1:6d:ef:97:8e:ce:2f:7d:3d:44:08:cd:
9e:bb:5f:79:c8:cb:ff:d3:7f:6f:c8:aa:cc:cc:dc:d2:b1:5f:
3d:d3:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org