Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85A89F1282C111EE863D00474AD9E6FC.roa
File: 85A89F1282C111EE863D00474AD9E6FC.roa (raw, json)
Hash identifier: cDyZ/FD9Lm4Ekad8JJqCyV8ebnFye4UbnnQ6uGyylTY=
Subject key identifier: 72:15:B1:65:82:FF:3D:45:B7:1D:33:42:6C:F2:A6:C8:ED:7E:3F:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 501E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85A89F1282C111EE863D00474AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:43:38 +0000
ROA not before: Tue 14 Nov 2023 07:43:34 +0000
ROA not after: Tue 12 Nov 2024 07:43:34 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20510 (0x501e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:43:34 2023 GMT
Not After : Nov 12 07:43:34 2024 GMT
Subject: CN=6553252a-384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:73:af:77:11:61:2f:5c:f7:86:88:d5:85:9b:
33:6d:84:61:39:f1:bd:d4:f8:36:3f:dc:8a:47:dd:
a6:db:83:fb:38:bf:6e:79:f2:65:3d:49:b2:0f:1f:
84:fc:85:98:c2:9e:d6:cc:c6:17:96:ec:cf:05:52:
cf:9e:0d:2d:4b:e6:76:26:24:da:ed:f9:da:cc:46:
41:ec:84:61:81:63:04:ff:0e:9d:d1:a0:3b:c1:4f:
2e:5a:72:f4:82:06:ae:a8:86:35:6c:0f:f2:26:c4:
6a:f0:53:3b:3c:91:f2:a9:42:79:03:47:cb:79:a2:
8b:5d:2c:52:22:e7:d3:75:60:ed:59:fd:7f:b2:ff:
6b:a4:88:c1:0f:4e:b4:df:92:4a:1d:6d:28:cc:c3:
85:c9:52:f2:13:33:12:71:b6:8a:80:e8:db:03:bd:
15:36:32:17:0a:18:3b:76:4e:56:8f:1e:ee:67:9a:
19:19:af:e3:44:c6:d4:a3:d4:89:06:b1:c3:2b:66:
61:74:38:1f:39:dd:97:a1:77:2f:a2:d0:fe:db:bb:
18:39:58:6a:fb:a5:d4:37:39:5e:97:72:cb:19:d0:
56:1f:38:70:71:70:cb:05:de:92:58:c5:a0:6d:35:
55:a6:de:c1:09:4d:00:b4:c0:bf:81:a0:d3:14:41:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:B1:65:82:FF:3D:45:B7:1D:33:42:6C:F2:A6:C8:ED:7E:3F:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85A89F1282C111EE863D00474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:65:ae:de:f1:9e:56:f7:05:68:7c:04:46:bc:52:36:38:b5:
8e:7b:15:7f:9c:fb:e3:1f:64:df:e2:63:2a:16:a8:f2:db:c1:
a8:b5:96:f6:3f:52:f1:52:4a:41:c2:8e:27:93:96:2e:0b:3e:
6e:06:bb:20:b5:72:9a:b6:fe:47:c0:59:0a:49:b0:a9:d7:ac:
43:44:08:79:6d:70:94:25:5f:f5:71:1b:73:70:d7:27:17:5c:
67:bc:50:9d:57:a3:49:9f:dc:ae:4d:87:86:41:84:41:09:e6:
49:2a:e6:ca:10:e2:b7:a1:5e:cf:f8:96:f7:75:a2:b6:06:df:
45:9e:45:77:dc:87:1c:c0:93:80:29:02:d5:e6:43:0e:7d:0b:
fa:18:11:30:bc:83:3e:55:01:11:36:eb:30:58:79:d5:af:e1:
de:c3:0b:52:2d:d2:c4:74:1c:c9:f4:ed:79:4d:ba:39:5d:1a:
3a:b2:66:ec:94:b9:e5:7e:a7:32:91:63:05:0e:76:43:08:34:
6a:ca:4e:46:14:da:e5:81:8f:60:7e:2d:7f:74:2f:78:e5:2f:
6e:63:cc:70:3d:94:a9:43:74:74:a6:28:1b:7f:cc:6c:cc:30:
0b:46:2e:93:26:5a:79:c4:1a:5a:dc:ce:ea:a3:b4:4a:af:9d:
d4:bb:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org