Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/800C6E3282BA11EEB75501314AD9E6FC.roa
File: 800C6E3282BA11EEB75501314AD9E6FC.roa (raw, json)
Hash identifier: CWPvNPohaV5h0+hi2QKrqyUV1o6ZR4KMSLfCouMhq34=
Subject key identifier: 53:5F:F6:99:3E:DA:25:7D:57:50:E2:C9:A2:BF:B8:13:DC:8C:41:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/800C6E3282BA11EEB75501314AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:53:22 +0000
ROA not before: Tue 14 Nov 2023 06:53:19 +0000
ROA not after: Tue 12 Nov 2024 06:53:19 +0000
asID: 397630
IP address blocks: 154.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20446 (0x4fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:53:19 2023 GMT
Not After : Nov 12 06:53:19 2024 GMT
Subject: CN=65531962-d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:30:fb:f9:4f:d1:0a:e3:39:e4:49:02:49:
f5:31:65:19:a9:5b:63:83:46:6f:34:fa:48:19:c4:
66:08:15:17:4b:c6:d0:96:92:f7:ad:d2:6a:c5:5b:
01:10:ca:31:df:1d:0b:1a:48:76:50:3c:f1:87:30:
f3:46:b6:65:1d:55:cd:7c:23:e1:09:14:b9:45:1b:
1d:5a:42:f5:8e:6f:e6:9e:e8:a9:16:bc:c5:c3:aa:
1c:9b:29:80:fe:bb:37:da:f4:e6:48:af:b3:52:cc:
3e:db:d9:0a:95:cd:2d:21:33:99:cf:da:51:05:19:
bb:aa:91:db:4d:dc:0a:a1:f0:e3:82:31:14:66:7c:
a7:46:79:1c:f7:98:ae:d1:ed:a7:a9:99:06:e5:59:
13:f3:63:cd:02:b6:0c:62:d3:c6:b6:83:7c:66:cd:
70:88:5a:1a:5d:b1:44:3d:67:3f:1f:db:36:83:e9:
a5:a1:2d:5a:b4:fa:f0:d3:21:81:01:7e:86:ad:66:
b2:ef:4e:05:c4:78:20:21:b7:67:f7:90:a7:a2:7c:
f1:73:89:37:35:61:b3:0a:7f:6b:5b:c8:db:42:20:
95:54:63:30:2d:d9:f4:57:fc:be:c7:4a:4f:fb:b2:
be:39:3f:c2:c5:7a:28:16:e9:d5:74:aa:6f:24:1b:
4e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5F:F6:99:3E:DA:25:7D:57:50:E2:C9:A2:BF:B8:13:DC:8C:41:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/800C6E3282BA11EEB75501314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:30:a4:07:f5:ae:a2:59:eb:2f:17:34:a7:da:1a:05:0a:66:
14:17:ed:75:66:e0:71:5c:1b:07:fb:0e:3d:ed:0f:1c:59:64:
1f:72:68:c2:3e:bd:ec:cb:27:cb:d7:57:67:3d:bc:0d:b5:66:
3d:92:88:b0:29:59:2e:47:a1:f3:b3:ae:b9:91:f2:9b:43:b1:
3f:aa:cd:1f:ac:2a:d1:e6:12:d8:77:20:41:42:d9:98:ec:ca:
b6:a0:4a:04:a2:09:bd:44:c6:a2:91:87:20:f4:8a:ce:bf:18:
da:db:86:26:2d:29:40:31:61:4e:e4:30:06:ac:08:bd:93:52:
bc:2a:f5:e9:71:6e:42:a0:0b:60:84:ab:2c:14:84:60:53:d6:
1d:92:d4:8f:d0:37:bd:4a:42:23:bd:f9:27:7a:07:1f:90:ab:
d4:b8:61:66:cb:39:07:36:dd:19:3b:e4:f8:6e:35:45:7c:2f:
fa:72:da:7d:26:c7:e4:28:ab:7b:98:3d:f0:c2:ba:4f:fe:cd:
cf:a0:d7:53:94:91:3c:66:b9:05:f3:80:a6:e2:08:77:18:a8:
43:41:93:cd:cf:44:f8:67:2f:b1:d6:0a:85:d5:f5:ae:f0:74:
96:39:69:71:d0:3b:5b:3b:45:71:e2:6a:b8:2d:66:94:d4:fa:
d9:88:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org