Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B853BB0E82511EEA6C47198775412E6.roa
File: 8B853BB0E82511EEA6C47198775412E6.roa (raw, json)
Hash identifier: HEtnpWViI1KXhAz/HqT5d7PjpBGRVyR0bK6ZPdQusNM=
Subject key identifier: BE:A5:10:5D:9B:BF:D2:BC:85:A8:01:48:0D:BE:BA:62:07:19:8D:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A62C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B853BB0E82511EEA6C47198775412E6.roa
Signing time: Fri 22 Mar 2024 08:24:05 +0000
ROA not before: Fri 22 Mar 2024 08:24:01 +0000
ROA not after: Fri 26 Apr 2024 08:24:01 +0000
asID: 328608
IP address blocks: 154.194.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 08:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42540 (0xa62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 08:24:01 2024 GMT
Not After : Apr 26 08:24:01 2024 GMT
Subject: CN=65fd4025-b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:55:c9:c7:8b:64:70:6e:04:45:08:c3:b0:
b3:29:be:eb:0a:c5:bb:cc:04:9a:9c:28:e2:ed:b0:
ac:5c:1f:ac:32:b3:b8:24:00:a5:4c:df:1c:2b:10:
49:bc:a3:b1:86:be:ad:b1:39:90:8b:65:ec:b6:1a:
8d:d0:f2:cf:80:78:39:bd:e9:fb:d5:33:eb:aa:ee:
a4:1d:47:11:b9:38:f5:01:92:13:37:9d:aa:52:2d:
41:7e:92:0e:4e:72:ba:19:21:4b:e9:5b:82:a8:36:
02:5f:59:18:0b:6a:61:24:17:57:72:a4:af:14:ec:
f8:32:50:e6:62:b6:7a:1a:c9:63:e7:61:00:90:93:
fa:cc:ff:dd:42:0d:b2:1d:55:0d:f5:b5:32:69:df:
8b:77:4a:01:56:6f:b6:53:25:7d:e2:15:20:2a:46:
04:a1:d5:40:c8:21:95:7a:02:dd:c3:8d:80:b6:3a:
d1:76:6d:0a:56:42:44:a7:9c:eb:6f:a3:e0:71:b9:
60:c5:18:8d:cf:e4:b3:e7:57:86:d1:21:2d:74:07:
f4:dd:c3:bd:b0:bf:80:9e:c8:59:50:02:ff:ae:40:
28:3d:78:d8:69:6a:42:dd:38:18:f0:74:64:2e:a4:
09:16:41:b8:97:2b:99:1a:b5:a8:6e:ad:3b:2a:06:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:10:5D:9B:BF:D2:BC:85:A8:01:48:0D:BE:BA:62:07:19:8D:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B853BB0E82511EEA6C47198775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.48.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8c:06:9e:bd:e8:6c:3c:c8:86:37:d5:9f:8e:ba:76:a7:0d:
e4:4b:11:74:12:af:21:67:43:d2:b9:b9:78:9c:0a:9c:14:14:
15:d7:88:ef:ae:ee:55:28:ad:98:9f:45:3f:26:d7:15:bb:06:
28:40:92:e0:94:87:7d:2b:c9:6b:3f:b6:6a:59:7d:46:af:56:
69:d3:97:e5:85:1f:1e:d8:09:5e:f6:38:96:91:00:71:5d:dc:
86:cd:72:1e:56:b8:11:84:a0:d2:05:e9:f5:e7:bc:45:d9:5b:
d3:ff:9b:31:d9:c6:7e:67:71:e5:0c:36:f7:4a:0c:4b:77:55:
da:eb:90:25:5e:0a:c5:e9:2e:4d:fe:b9:ab:33:61:d6:f0:d8:
2e:f3:96:79:f3:f4:eb:da:46:aa:26:80:5f:05:2b:0d:a8:20:
20:4f:f0:63:6e:b8:66:5a:22:7a:ec:51:61:cc:3f:4f:07:c3:
eb:36:76:05:a4:60:82:67:0e:18:32:ec:b8:61:44:27:f8:56:
ba:aa:aa:3c:18:16:2f:f1:fa:82:9a:42:7a:9f:4b:fb:b7:4e:
72:27:83:9f:fa:a3:88:1e:ad:14:9f:57:03:40:b9:d2:f8:e6:
1b:d8:26:e2:a9:06:52:e2:46:09:13:19:69:9d:80:e3:82:ca:
6f:5e:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:37 2024 by rpki-client on console-fra.rpki-client.org