Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F59C386C5C111EE9912906F775412E6.roa
File: 8F59C386C5C111EE9912906F775412E6.roa (raw, json)
Hash identifier: 9D+0HhETvQmKbjztxQ2DmlrdZQB7rFqSig7p7N5tm9g=
Subject key identifier: D2:B8:13:3C:A3:F5:9F:B5:7E:71:8B:57:5A:36:ED:5B:89:3E:B3:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 86E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F59C386C5C111EE9912906F775412E6.roa
Signing time: Wed 07 Feb 2024 14:02:42 +0000
ROA not before: Wed 07 Feb 2024 14:02:39 +0000
ROA not after: Wed 31 Jul 2024 14:02:39 +0000
asID: 53356
IP address blocks: 154.214.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34536 (0x86e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 14:02:39 2024 GMT
Not After : Jul 31 14:02:39 2024 GMT
Subject: CN=65c38d82-d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:e0:ba:de:45:d9:b4:a1:ab:5c:8e:00:bd:
dd:09:4d:8f:68:d1:f2:1d:b5:d1:6f:de:52:90:cc:
59:e2:41:8a:05:89:de:63:08:b4:83:de:a3:d7:a5:
6a:0b:83:5b:eb:04:a5:2b:1c:d8:48:df:b9:1c:40:
63:7b:7d:ea:c3:f4:6d:79:e3:24:e1:a3:41:ca:e9:
77:de:83:a9:2d:f1:b2:4c:90:1f:4a:12:6a:28:46:
b2:5b:85:d6:4e:88:31:08:6d:d2:4e:a3:a9:2e:b8:
12:b2:82:0d:96:9f:31:97:8c:7e:4b:a7:40:40:03:
c2:44:c7:79:44:ba:54:ff:82:17:a2:cb:98:1e:3f:
cb:4d:f6:47:31:d4:e2:f5:3c:19:e9:0f:c1:14:48:
73:a3:34:86:ed:98:8c:be:4f:3d:35:39:4c:03:09:
26:c2:b9:fb:ff:d2:a9:d0:84:a8:f3:c5:86:f1:95:
62:d1:e3:8f:76:a9:a2:11:0b:63:e5:d6:11:c5:96:
39:9a:25:67:f9:25:34:3b:ac:72:64:7a:cd:a9:00:
b3:2d:14:1b:0c:c3:67:ca:ee:e5:c5:d1:53:9d:4e:
eb:8b:8f:8d:48:9f:bb:a5:77:cc:db:dc:eb:4f:87:
7c:53:e4:7c:b0:2d:d1:a7:59:5d:04:54:c7:fd:d5:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:13:3C:A3:F5:9F:B5:7E:71:8B:57:5A:36:ED:5B:89:3E:B3:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F59C386C5C111EE9912906F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:f3:5a:2f:77:54:93:4f:47:c3:76:43:51:de:09:6c:ef:ef:
e8:f6:9e:51:5c:41:47:be:ed:27:89:3c:b5:22:c7:ec:67:6e:
ff:31:4b:00:bb:e6:a2:6f:d8:63:75:e3:19:fd:ec:9f:9c:ee:
37:dc:13:77:10:d9:e8:f4:22:31:ce:a9:14:0d:51:da:8d:1e:
61:f4:6e:77:3f:11:dc:d3:b6:7d:92:7f:34:9e:3c:1d:a6:3a:
09:aa:9d:df:28:f1:47:38:aa:8f:4d:01:0f:b6:c6:ba:72:b1:
bf:e3:fb:5f:47:aa:24:8e:32:4f:ea:d5:43:ed:cd:c7:68:69:
2b:6b:ef:d1:20:62:13:1f:d7:19:fc:a4:d2:db:d5:34:5e:11:
9d:b1:b4:19:e3:53:90:d5:75:fa:0e:80:86:83:de:48:74:da:
d7:c3:64:37:15:a4:cb:bf:60:7e:89:c8:2e:96:31:78:b2:53:
d7:58:64:78:c6:ca:c2:f4:fc:06:c6:a1:7f:d9:4e:fa:57:68:
65:de:08:35:99:c0:8d:d5:f4:0b:2a:d9:cf:5e:73:4e:66:bd:
cf:db:a2:76:09:74:1c:b2:51:75:77:32:9d:db:55:4b:25:50:
48:77:88:14:b1:a9:34:9b:20:4e:4a:bb:3d:80:f6:c4:09:bd:
7c:9a:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org