Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E117EACB4211EEA324A793775412E6.roa
File: 87E117EACB4211EEA324A793775412E6.roa (raw, json)
Hash identifier: gCeThGbxIuYtSogRy9TuTZeyD6AmSuH0oX4D+kjZoXE=
Subject key identifier: 52:70:A3:86:17:32:E2:CF:0B:44:3A:7B:89:E4:5B:5F:5A:1C:C7:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8989
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E117EACB4211EEA324A793775412E6.roa
Signing time: Wed 14 Feb 2024 14:08:30 +0000
ROA not before: Wed 14 Feb 2024 14:08:27 +0000
ROA not after: Mon 17 Feb 2025 14:08:27 +0000
asID: 197730
IP address blocks: 154.201.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35209 (0x8989)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 14 14:08:27 2024 GMT
Not After : Feb 17 14:08:27 2025 GMT
Subject: CN=65ccc95e-68b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:0a:63:75:33:16:50:82:40:bc:21:1c:3d:
ff:9f:02:a2:85:ba:a2:77:e4:65:3d:a0:4e:df:d8:
6f:3b:34:21:6d:19:70:0d:64:bc:d3:a1:7d:5a:c9:
e7:f4:dc:3e:77:81:b4:23:62:a6:4c:7e:a8:01:2e:
5f:59:59:3a:84:c7:7e:eb:1f:7e:c5:10:97:fe:a2:
74:f7:41:ef:bd:d9:b0:52:11:b2:b8:f7:62:27:e8:
e0:0e:28:4d:bf:38:2e:5e:53:10:07:e7:d6:43:b1:
eb:b9:ec:64:20:32:74:85:25:e2:a8:b6:52:a9:f7:
aa:d1:df:5e:51:7f:1f:e8:22:2a:91:12:da:ba:2f:
1c:a2:3a:56:be:00:f4:98:c7:e6:cc:94:98:a7:70:
f1:78:1f:83:b2:fd:43:96:82:e1:7e:6f:da:b4:47:
61:75:cf:64:71:03:02:08:bf:3d:02:1e:d2:e2:b6:
aa:10:3b:64:9b:bb:f9:02:da:92:cc:f9:00:dd:72:
12:d1:d8:3d:63:b0:26:25:27:f5:76:be:02:c8:a8:
36:15:b6:8d:89:86:04:e7:5e:0f:7f:2a:32:a4:ff:
67:a6:e7:de:e5:7d:ef:30:33:ab:60:b2:2c:cd:69:
43:5e:c5:d1:52:9e:f8:20:17:4f:04:a3:09:85:db:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:A3:86:17:32:E2:CF:0B:44:3A:7B:89:E4:5B:5F:5A:1C:C7:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E117EACB4211EEA324A793775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.112.0/21
Signature Algorithm: sha256WithRSAEncryption
62:69:45:c2:66:1d:50:2d:fa:ed:15:bf:7e:6d:1f:6c:a4:89:
3c:30:65:98:c1:91:fd:a8:cf:d6:06:f2:96:fc:2e:bd:75:a0:
94:0d:58:2c:1b:59:80:0d:39:3f:f1:31:4d:4e:3e:1a:b1:20:
aa:f3:a7:36:d8:a9:37:93:d0:a9:8b:52:53:96:3f:64:ec:c8:
24:dd:97:34:35:a6:59:90:15:5b:83:46:c0:f2:9b:4f:2d:93:
fb:26:97:25:7f:c0:8f:72:aa:97:06:22:ef:07:6f:13:34:84:
b3:0c:84:02:80:de:1d:fd:e1:06:cc:50:c3:94:d1:90:15:c8:
47:0f:34:4a:39:43:9c:76:e8:94:c5:fa:29:f6:47:a9:16:09:
7e:f0:13:86:1d:4e:11:b5:62:50:d3:bd:34:86:b7:3d:2c:8f:
63:06:39:0f:b6:31:ad:51:80:fc:ec:d7:a0:e5:d7:06:e2:42:
08:49:2e:1f:10:0d:40:49:73:87:0d:94:47:42:38:5c:d3:3b:
3c:f9:6d:95:37:ff:c6:95:c7:a7:af:63:2c:80:70:c3:dc:5c:
ce:71:b8:61:38:ce:47:ea:12:98:4e:63:98:cc:39:48:43:b1:
98:79:2b:1c:34:77:b8:e4:15:57:68:d1:77:26:02:ee:4c:7c:
ee:9a:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org