Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804F3E9010D911EE9D443A204AD9E6FC.roa
File: 804F3E9010D911EE9D443A204AD9E6FC.roa (raw, json)
Hash identifier: Kp0wTWUqX+XQYJ7UYUh8uCsD0pcrDVNmyuKJI//W9OU=
Subject key identifier: 1C:23:72:07:23:CC:D0:3D:0F:93:E2:29:D1:63:3D:46:1F:65:90:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804F3E9010D911EE9D443A204AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:48:04 +0000
ROA not before: Thu 22 Jun 2023 08:48:01 +0000
ROA not after: Fri 26 Apr 2024 08:48:01 +0000
asID: 4809
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 08:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11572 (0x2d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:48:01 2023 GMT
Not After : Apr 26 08:48:01 2024 GMT
Subject: CN=64940ac4-41a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:84:e1:a0:25:2f:82:f4:b7:dd:a4:79:b2:
2a:bd:53:e2:54:0a:cc:ce:e6:ca:55:f4:1c:db:f6:
ba:90:08:3a:b8:49:33:6d:26:fc:5d:ff:f9:eb:60:
93:5f:e9:79:fa:7c:10:11:8e:d0:ff:ab:49:1a:f8:
7b:a1:4f:7b:62:ac:ce:55:1a:a7:6f:bf:dc:d0:cb:
b6:ce:47:a2:ac:48:ee:b2:33:9e:9c:fa:03:72:ce:
1f:fb:89:9e:14:74:c0:0e:fc:57:3e:81:a1:e4:49:
68:8f:a4:12:36:e4:e1:ba:7f:f4:c5:8b:bf:2a:fc:
35:d8:fd:4c:29:7c:bb:ec:3a:7f:11:34:2e:de:7b:
ba:b3:8e:dc:e0:d8:60:cc:d0:44:3d:45:99:76:1b:
84:86:ad:03:b8:03:d7:b7:ed:a6:65:53:68:ba:b8:
f4:2c:53:03:a3:75:3c:81:0f:50:8f:a9:09:8c:3d:
c5:7b:27:5b:bc:54:b6:28:a8:ab:ad:37:58:be:81:
15:f0:89:9f:b0:dd:6c:9e:72:85:cb:c0:08:78:39:
0c:78:87:27:1e:fa:9e:33:38:43:37:c7:76:3b:67:
f3:58:a8:f1:34:6e:af:28:19:4e:47:a0:6b:2a:21:
b5:73:7e:67:ce:9f:67:fe:f8:75:e3:60:8d:6b:b6:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:72:07:23:CC:D0:3D:0F:93:E2:29:D1:63:3D:46:1F:65:90:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/804F3E9010D911EE9D443A204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3d:67:8b:e6:69:69:a2:0a:c3:90:aa:40:c8:ff:78:f1:2e:
e5:a6:66:85:13:b0:1c:6f:66:ef:95:ca:40:fa:ea:bb:c8:2e:
95:1a:a8:c4:42:f6:66:8d:7d:82:fa:28:dc:4d:e2:54:63:48:
d8:bb:79:a8:eb:40:95:d8:6b:1b:95:ff:d6:52:53:28:85:b3:
30:bc:bb:75:91:ef:22:da:ec:ba:98:2d:da:c7:0b:2b:e9:db:
19:c9:0d:a4:7f:8a:24:63:b9:0a:7b:b3:7f:6a:ef:df:93:4e:
9d:ee:1d:9b:ce:be:8b:be:e6:b8:7a:67:a2:8e:3d:6d:52:9e:
99:97:53:4b:1c:b4:e2:63:53:59:da:5b:93:c1:0a:21:50:57:
6d:2c:05:08:85:25:ee:d3:d4:c9:f7:38:f1:f1:35:7e:3b:47:
83:53:56:f7:26:4b:12:41:c3:bb:c1:f4:d2:8d:b5:4c:6c:b3:
8a:25:c0:8e:51:be:91:16:88:2d:a6:ec:9c:e8:f3:11:fb:45:
5c:9f:6f:36:c7:75:79:e9:e8:fd:09:cb:fd:ab:53:28:26:bf:
32:18:0a:25:79:ea:93:c1:78:44:39:00:b2:a7:55:7e:ad:b0:
af:d9:56:cc:95:68:fd:58:ff:85:3c:c5:c1:e3:09:48:c9:07:
17:7f:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:36 2024 by rpki-client on console-fra.rpki-client.org