Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDDC296417811EE97F68B864AD9E6FC.roa
File: 8DDDC296417811EE97F68B864AD9E6FC.roa (raw, json)
Hash identifier: MYjQq1om8JuOXBhqEXavLt14XMq1sR6JOH8+7GGyfug=
Subject key identifier: 08:07:4E:44:DB:22:6B:C0:BD:9D:A5:0D:90:4C:BE:26:F8:BB:28:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 378D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDDC296417811EE97F68B864AD9E6FC.roa
Signing time: Wed 23 Aug 2023 05:47:33 +0000
ROA not before: Wed 23 Aug 2023 05:47:29 +0000
ROA not after: Sat 24 Aug 2024 05:47:29 +0000
asID: 5065
IP address blocks: 154.86.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14221 (0x378d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 05:47:29 2023 GMT
Not After : Aug 24 05:47:29 2024 GMT
Subject: CN=64e59d75-4aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:a2:77:38:d8:53:4f:10:a3:b8:c8:6b:63:
95:5e:15:5e:27:b3:f2:b3:08:89:1c:c5:55:42:fa:
da:66:ed:d5:db:53:a6:4f:18:ab:50:9e:c5:3d:f9:
ed:d0:71:b9:46:e1:e7:49:bd:b4:d9:49:8d:05:13:
72:12:52:72:b1:88:20:df:3d:69:99:61:f8:6c:5e:
bd:f0:01:ec:f7:45:64:8e:36:4a:f2:c4:8f:62:0b:
10:6c:19:7a:cb:ef:1c:9d:ac:6e:97:5b:6f:ea:6d:
09:70:f6:3e:de:7f:66:7e:c3:d9:92:26:57:6b:3b:
c5:54:3a:84:e0:8e:b9:00:33:64:e6:13:0d:ae:fe:
c1:66:85:df:9e:69:b7:d0:cb:aa:14:03:bf:f9:3b:
6a:22:dc:4f:e3:3a:47:51:a6:a9:91:64:6e:2b:9c:
1c:ed:a4:a8:c9:e7:08:30:6d:71:49:a0:6f:fc:05:
d0:64:5d:fe:b6:f8:41:ed:57:27:fb:7d:99:fb:04:
0a:38:7c:51:57:50:d5:09:50:3c:ca:0d:d3:f8:19:
36:5e:fb:d4:d8:21:51:62:79:3c:e8:88:a8:5f:a0:
05:69:a5:19:19:7e:0b:ed:c1:78:17:46:24:c2:e9:
89:00:82:e8:05:3c:50:65:f3:6f:e0:b4:4b:06:a4:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:07:4E:44:DB:22:6B:C0:BD:9D:A5:0D:90:4C:BE:26:F8:BB:28:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DDDC296417811EE97F68B864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.102.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:d6:99:0d:a0:d9:fa:b1:b5:7b:80:a7:28:6a:76:c7:93:f1:
e7:92:05:da:b1:3a:bb:1b:cb:f6:d2:df:4d:41:1a:8c:d5:24:
7c:ee:b6:c7:3c:4f:3e:16:78:30:18:09:b5:5d:23:45:e3:bb:
f8:6d:eb:e1:6c:aa:c3:1e:ab:07:4b:5c:f3:b8:b5:5c:b3:c2:
95:64:71:81:2d:a8:13:32:04:d7:3b:30:49:10:0e:90:df:f3:
b6:26:bd:05:c7:99:b5:d3:06:bd:ce:82:8e:8b:1e:6e:34:be:
f1:ea:fe:74:18:6d:5f:01:2d:28:6d:68:08:ab:7b:fb:c6:42:
b3:09:2a:b2:ce:f6:bf:03:db:8b:1b:a1:43:0a:c8:75:e1:62:
ed:85:10:41:dd:f5:4f:16:60:58:2a:0e:6e:d8:1f:00:9f:7d:
ae:90:f4:74:41:f6:27:57:1b:97:5e:4b:79:59:2e:3b:6a:fd:
fa:cb:15:2c:ff:6b:ac:04:35:07:af:e0:e4:f1:f5:e7:51:85:
98:46:d1:3c:c8:3c:c3:80:51:0c:67:c7:b2:0b:30:26:c3:e6:
af:06:a8:fc:f1:4b:8a:a6:09:bb:13:35:11:7e:b5:ba:ea:c6:
93:90:ea:c4:d8:5b:bd:85:3b:1a:c7:07:a3:40:26:72:fb:8b:
5b:6c:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org