Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1CB83AFD3A11EE92D88C4E017001B1.roa
File: 8C1CB83AFD3A11EE92D88C4E017001B1.roa (raw, json)
Hash identifier: 51B07Q5WPx+whQLa7AokMC1HRDj+fo2OogtrpCmcD0Q=
Subject key identifier: 8C:28:A4:39:D4:2F:CE:38:95:88:32:DA:13:9C:CF:B7:D9:67:4F:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1CB83AFD3A11EE92D88C4E017001B1.roa
Signing time: Thu 18 Apr 2024 04:17:20 +0000
ROA not before: Thu 18 Apr 2024 04:17:16 +0000
ROA not after: Fri 26 Apr 2024 04:17:16 +0000
asID: 39600
IP address blocks: 154.86.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 04:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44567 (0xae17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:17:16 2024 GMT
Not After : Apr 26 04:17:16 2024 GMT
Subject: CN=66209ed0-8116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:04:d7:e7:09:2b:64:f4:e9:99:8f:90:d2:
82:d3:3d:e4:cd:84:e1:da:be:df:57:f6:e9:d5:d7:
b4:f5:56:fb:99:46:93:df:c3:6d:76:6f:98:75:a2:
e8:22:8f:58:a3:72:e2:30:6c:a6:48:88:2c:d5:e0:
0a:60:8d:c7:26:50:e5:7a:27:d2:ae:e1:5e:5b:e8:
52:01:55:fe:ec:0e:07:ed:55:e4:09:f0:41:68:ea:
1d:0f:56:8f:f0:f4:b1:50:58:c1:52:ea:4f:ac:86:
46:36:41:eb:11:91:98:9f:c6:6c:36:51:b8:a6:dd:
4f:6a:f9:05:6e:2d:e3:99:e9:86:28:eb:ca:f2:9e:
47:bd:0b:0f:c1:4b:3a:b7:4b:41:7d:9c:f2:03:41:
c3:e4:63:a3:32:62:4d:d6:59:c0:26:04:60:0b:c9:
1f:ee:2b:70:57:93:6b:2f:5e:4c:40:3b:58:7f:0f:
1e:25:5e:0d:94:28:6e:55:8f:2a:20:2b:c2:18:56:
8a:a7:8f:dc:bc:69:47:e6:cd:6c:0a:a7:5c:dc:cb:
98:de:6a:8a:f1:20:a6:02:4f:37:59:0d:69:a3:97:
7c:a1:46:29:84:46:a7:85:89:ff:c2:1a:9a:b2:9c:
61:41:5d:da:95:35:34:40:f8:29:60:01:48:7a:24:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:A4:39:D4:2F:CE:38:95:88:32:DA:13:9C:CF:B7:D9:67:4F:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1CB83AFD3A11EE92D88C4E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:44:3e:42:eb:c0:b8:29:90:52:71:65:bb:7d:29:5a:36:e1:
46:f7:dd:02:e2:10:e8:a7:2d:cc:07:87:de:54:70:22:ad:fb:
36:4b:ca:39:8d:bb:fc:59:2e:74:d1:34:3b:36:02:95:9c:12:
2c:97:78:f1:03:7f:7e:9c:ad:23:55:41:a3:56:83:82:e8:6a:
24:e4:d2:36:a2:e6:6d:fc:b2:fc:44:db:42:b1:92:96:e0:2a:
ed:5e:56:35:a8:8b:fe:1b:4d:ba:44:e1:54:79:82:c5:c4:f6:
b1:a4:2a:2f:a3:e7:b7:95:f2:f3:54:b8:d6:b2:e8:02:1d:6d:
16:2c:4d:c4:0d:95:9d:df:a1:1d:6e:90:64:02:9f:9f:2d:fb:
cc:67:a4:91:80:32:25:ac:b8:15:4b:bb:6c:d5:cc:f3:68:9d:
e3:c3:86:1a:95:8d:63:d1:10:32:71:f1:a4:ae:fd:ba:81:01:
3b:98:9b:71:36:ae:f6:ea:cf:7d:7a:0a:d4:12:10:bc:eb:2c:
9d:17:a7:ac:12:1d:08:83:65:65:f3:9b:8e:60:6c:00:cc:71:
39:f2:15:af:29:b9:bc:c6:ad:9f:81:2c:0d:7b:ba:25:54:e3:
78:22:07:05:39:08:e3:6d:55:27:f5:d1:a6:63:bf:d3:61:65:
a2:dd:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:37 2024 by rpki-client on console-fra.rpki-client.org