Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CAA06F629C211EE9C5A19254AD9E6FC.roa
File: 7CAA06F629C211EE9C5A19254AD9E6FC.roa (raw, json)
Hash identifier: csZQnIVFUnl8Ut+OyLKQQu259H+cBikUcSQwPHNT4A4=
Subject key identifier: CD:21:44:1D:22:5A:09:4F:33:5F:98:1A:5E:DA:49:D4:90:4B:B6:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 33CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CAA06F629C211EE9C5A19254AD9E6FC.roa
Signing time: Mon 24 Jul 2023 01:36:19 +0000
ROA not before: Mon 24 Jul 2023 01:36:14 +0000
ROA not after: Wed 24 Jul 2024 01:36:14 +0000
asID: 151196
IP address blocks: 154.204.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13258 (0x33ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 01:36:14 2023 GMT
Not After : Jul 24 01:36:14 2024 GMT
Subject: CN=64bdd593-0550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:54:68:17:92:e1:1b:77:de:44:30:59:ad:
3c:97:1c:89:5c:49:96:24:d1:42:d5:7e:89:dd:26:
67:47:f3:0f:75:8b:6a:16:d1:4a:45:8f:59:07:59:
0d:ad:fa:78:d8:27:48:61:51:f5:03:4d:2e:a9:4d:
6c:fa:88:d7:52:10:86:c1:69:53:05:6b:ed:0b:6c:
64:c2:03:a7:91:e9:cc:17:0e:60:af:8b:d0:67:20:
b2:10:49:64:0a:73:6d:80:57:b8:26:3f:18:35:00:
95:d7:3f:a4:f5:0e:6a:a0:82:df:26:b4:7d:a1:ec:
09:07:fb:3a:34:49:76:26:9c:66:b8:fa:93:88:10:
34:2f:12:8c:59:d9:bd:6f:1f:23:75:d8:22:4a:88:
29:e1:a1:d8:f8:bd:f9:7d:73:cc:47:44:a8:93:57:
33:e1:a4:a8:23:93:a1:c7:f1:92:a0:f0:b9:19:f8:
e1:19:20:63:03:31:da:5e:de:0b:d6:e4:eb:3c:d1:
7b:a2:95:db:76:5c:f2:83:1e:1e:98:b5:4b:0b:0b:
b8:0a:f1:f2:25:a9:00:b5:d7:39:c4:8a:a0:96:a2:
18:a5:cd:f3:37:fd:ad:f8:41:d0:7e:f8:7f:81:12:
51:83:43:75:6e:b3:7a:fb:c4:11:07:e9:5d:ae:87:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:21:44:1D:22:5A:09:4F:33:5F:98:1A:5E:DA:49:D4:90:4B:B6:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CAA06F629C211EE9C5A19254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:31:af:71:e4:70:eb:10:d0:39:68:1a:eb:55:25:9d:b0:d5:
20:79:36:f1:9a:72:77:b1:08:7d:52:e0:b3:60:04:ab:67:73:
59:68:6a:44:06:93:8c:6c:2e:f3:a3:ce:ed:0a:9b:07:cc:eb:
c2:bf:d3:dd:18:dc:f0:31:d0:1c:d9:c6:c1:04:b8:ff:ff:38:
17:0a:1d:dd:45:38:f6:f4:06:35:ac:cc:88:1a:d9:ef:23:53:
58:a7:30:3e:76:b1:5b:e1:94:a4:40:5f:ee:82:da:e3:42:6a:
d9:50:f1:74:7f:fe:91:b3:98:10:55:ca:df:82:fd:99:9a:d6:
d3:11:94:09:e5:6b:91:3e:92:3c:79:a8:6b:ff:a3:dd:43:b0:
1e:8b:38:07:11:61:08:4f:8a:be:61:33:6c:4f:ac:b3:1b:f4:
6d:77:20:9d:9e:e5:42:43:45:d1:32:e7:5a:26:cc:7c:bf:c0:
a8:56:cf:45:0c:09:54:56:41:3c:96:c2:2c:13:5e:c2:d9:ee:
4a:88:44:35:21:9b:57:56:c9:fd:88:11:88:0c:ea:de:ff:79:
2a:98:44:27:3a:5d:33:b4:02:a3:63:58:5a:ed:5e:74:4b:d6:
68:42:97:55:50:96:0b:29:12:8d:02:71:75:30:3d:6b:7e:e1:
b1:25:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org