Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873DD84A1A1D11EEBE634B394AD9E6FC.roa
File: 873DD84A1A1D11EEBE634B394AD9E6FC.roa (raw, json)
Hash identifier: S3mQ/HowGQe0EcLx5wHiFeZgdvVhWuUpFucuFlfJNAk=
Subject key identifier: 12:99:0B:B6:33:BF:CA:D6:07:DA:1B:F5:1D:34:FF:75:63:AA:AF:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2FB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873DD84A1A1D11EEBE634B394AD9E6FC.roa
Signing time: Tue 04 Jul 2023 03:47:42 +0000
ROA not before: Tue 04 Jul 2023 03:47:38 +0000
ROA not after: Thu 04 Jul 2024 03:47:38 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12209 (0x2fb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 03:47:38 2023 GMT
Not After : Jul 4 03:47:38 2024 GMT
Subject: CN=64a3965e-3aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:39:99:d4:cd:af:87:7e:88:ff:1c:47:f6:
68:b2:ae:b4:58:af:a5:31:e1:fb:ff:9f:f2:a6:30:
4e:fe:42:d7:1a:e5:e1:d3:e3:b2:03:2b:db:13:7a:
c6:23:9a:9e:9a:3c:8a:3f:4a:f2:e2:d4:ab:63:be:
23:e6:dd:70:3d:25:67:14:ad:87:9f:b8:e7:39:38:
25:f7:ed:98:1e:f9:6d:90:2f:ca:ee:f6:74:2a:08:
7f:14:ea:b0:d1:06:86:e1:7f:ed:7f:8c:a0:03:c8:
91:ef:24:2f:77:e4:f2:28:97:08:83:1a:1e:b0:82:
a2:2a:94:94:6e:1b:97:91:5c:03:33:27:61:89:4c:
59:95:c7:7d:dc:71:34:24:2c:e7:86:76:f1:54:2a:
52:75:67:26:49:f1:99:fd:ac:f8:3d:07:65:cb:02:
5e:8a:60:2e:33:52:82:5e:e9:7d:ff:8c:43:a7:ff:
f2:34:e4:6f:06:ce:20:2a:de:8d:e5:72:b0:d7:a6:
10:0e:ea:0c:b8:b9:0d:e5:23:b5:3d:ec:82:ae:c7:
bd:d6:cc:bc:6f:ad:40:7a:77:7d:54:02:1c:bc:b6:
df:5e:c9:c8:e6:e2:65:d3:b1:12:0b:4f:b9:66:43:
0b:dd:bf:35:0e:6b:00:ef:2e:3b:3f:5c:2e:92:cd:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:0B:B6:33:BF:CA:D6:07:DA:1B:F5:1D:34:FF:75:63:AA:AF:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/873DD84A1A1D11EEBE634B394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:b2:dc:d1:74:16:92:b7:04:bb:6f:8b:a5:70:f1:f6:6c:c3:
cd:64:b1:ef:d1:8f:c0:64:9b:de:a6:11:6a:1c:92:77:a7:7e:
f0:62:ca:21:d3:19:cb:47:19:8e:4e:57:41:ac:f2:47:44:f9:
b4:fa:fa:03:12:d3:f1:9f:2c:75:08:4c:6e:0b:4a:2f:40:d1:
67:7e:d5:61:cd:33:a6:1a:5f:97:aa:ee:be:85:25:19:cf:66:
85:04:d1:d3:b4:50:8e:67:44:75:d2:6a:44:51:59:19:89:18:
cb:e1:94:4b:c0:61:32:ed:ee:c9:72:3b:fd:bd:8f:3e:85:8b:
d1:45:f9:36:a7:de:49:df:a7:21:f5:1e:ad:13:c3:8f:2e:0d:
bd:b1:58:85:1c:14:dc:4f:bc:e6:9a:c8:29:36:30:5a:77:45:
e0:35:9b:b7:a6:67:de:87:50:b6:a7:9e:b5:9a:fb:15:a6:33:
5d:b9:f0:cc:3b:f3:33:22:49:cc:f9:58:8d:a1:50:1a:fb:a7:
96:92:40:09:24:6a:57:fb:b5:e0:0d:b9:68:b4:d0:99:8a:fe:
b9:0d:b9:01:b0:03:f1:1d:71:75:73:86:b3:80:c4:a0:c1:16:
7f:dd:1b:dc:0e:01:7b:00:a1:82:1e:27:8d:1e:d2:af:20:2f:
db:85:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org