Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8043D10AF91811ED89A4541C4AD9E6FC.roa
File: 8043D10AF91811ED89A4541C4AD9E6FC.roa (raw, json)
Hash identifier: IMcb2+CyqhncdVGJPnsT3YjmnLd7Jz5TSb8eD3Kopv4=
Subject key identifier: 52:56:35:15:CB:AB:0C:F4:DE:6B:DB:4A:54:06:86:AC:4A:09:E6:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2656
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8043D10AF91811ED89A4541C4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:18:34 +0000
ROA not before: Tue 23 May 2023 03:18:31 +0000
ROA not after: Tue 20 Aug 2024 03:18:31 +0000
asID: 399674
IP address blocks: 154.205.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9814 (0x2656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 03:18:31 2023 GMT
Not After : Aug 20 03:18:31 2024 GMT
Subject: CN=646c308a-b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:96:7c:0b:85:fd:92:80:cf:71:d4:5f:74:
1e:06:45:a5:35:92:56:39:08:3d:ab:69:65:3c:56:
a2:d0:bc:65:8d:2e:3b:75:1a:f7:67:6b:ff:c1:5c:
24:0b:e3:81:66:83:fd:0a:3b:1e:6f:04:ab:b9:90:
f8:1e:c7:db:c4:f0:7f:c5:c2:53:17:e5:1e:ac:66:
02:f2:86:23:f8:77:a5:d7:d1:de:81:99:ee:d2:9d:
5f:ee:0f:71:c6:e2:42:b2:6f:a2:4e:b0:c0:99:7a:
18:04:73:05:ae:d4:9c:75:0c:1d:86:1a:9d:90:d0:
e5:cc:59:b0:40:1b:11:68:54:9e:63:bb:6d:17:01:
be:ce:8a:1f:f8:e5:44:7a:9d:ab:27:f5:3c:99:89:
57:24:ff:d1:2d:f3:b3:ae:a0:06:1d:32:19:51:a7:
cf:73:b8:f5:9b:6f:27:0f:80:1a:6e:21:b8:65:c0:
2e:0c:bb:20:58:bf:65:5b:2b:fc:de:18:71:dd:18:
f3:64:71:b5:d7:93:3d:3d:c8:09:45:3b:d6:9a:55:
30:ec:4d:75:c2:30:3c:51:41:a2:3a:4d:67:0d:ea:
c8:a1:9d:92:5e:ef:be:75:e2:b1:8d:cf:df:5a:0c:
ed:b7:a5:05:7e:60:ff:07:d4:05:4f:ba:d8:b2:6c:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:35:15:CB:AB:0C:F4:DE:6B:DB:4A:54:06:86:AC:4A:09:E6:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8043D10AF91811ED89A4541C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.224.0/20
Signature Algorithm: sha256WithRSAEncryption
20:3a:77:2c:76:f6:e4:ac:f1:d4:a8:10:19:62:73:c8:5b:c0:
39:a8:77:0e:60:fd:94:f8:82:4d:86:9d:f4:c7:41:80:8d:98:
24:cb:c9:90:e2:ea:00:03:25:6b:3b:38:8d:a1:5e:6b:0c:8a:
37:6e:bc:fb:f9:7f:f9:9f:ea:4a:88:8e:c9:df:5d:42:b1:ad:
67:5a:24:68:9d:34:e6:7e:2c:34:c7:4e:89:62:44:00:4e:e1:
71:23:19:83:39:87:10:cd:bd:5e:e7:78:b5:45:13:91:46:c4:
65:dd:c5:9d:5e:a3:5c:c2:1c:f7:bd:ef:8a:14:56:52:24:b8:
f6:87:af:c3:a7:e2:71:b0:b2:83:4f:44:50:fc:a7:f0:8c:bd:
13:58:46:b9:31:6a:38:31:a8:1c:08:ec:da:64:96:17:4d:f0:
fb:83:41:cc:d3:44:09:2e:c2:67:8a:4f:eb:dd:06:80:6a:89:
43:fc:ab:e6:04:b6:32:2f:63:c6:e7:be:3a:b6:73:bb:89:9b:
08:f1:8c:cf:56:b1:97:e0:f1:9a:22:15:22:10:1f:93:c2:cc:
fc:fa:7c:90:3e:de:cc:b0:b6:a7:1d:a6:f3:67:e9:5d:03:aa:
c6:8b:1b:5e:0f:9f:ba:38:f1:ff:b8:ca:ec:2d:41:77:5d:14:
8a:e6:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org