Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960FE376F72C11EE81C4C76B017001B1.roa
File: 960FE376F72C11EE81C4C76B017001B1.roa (raw, json)
Hash identifier: 8vL4EspCmNrManq9ocw/J7OsFQpLJeZRoTnjeJWEiKI=
Subject key identifier: 9D:31:03:FF:B4:99:EE:84:3B:10:5E:DA:5F:07:32:26:FA:E4:D1:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AADC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960FE376F72C11EE81C4C76B017001B1.roa
Signing time: Wed 10 Apr 2024 11:22:16 +0000
ROA not before: Wed 10 Apr 2024 11:22:13 +0000
ROA not after: Sat 12 Oct 2024 11:22:13 +0000
asID: 150698
IP address blocks: 154.202.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43740 (0xaadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 11:22:13 2024 GMT
Not After : Oct 12 11:22:13 2024 GMT
Subject: CN=66167668-2741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:56:a9:54:e5:ea:7d:58:78:15:4e:67:90:
cc:2d:e0:26:e2:a5:4e:c6:36:3a:f0:b4:c4:17:08:
f6:8f:e7:fd:00:01:b3:ec:4e:9a:68:ec:5b:55:c4:
a4:e5:0c:eb:bf:a3:6f:5b:bb:b4:8a:53:42:d2:0b:
4a:c2:99:9e:c0:9e:4c:52:75:6d:77:f0:dc:51:55:
ad:ad:d7:42:f0:a4:16:66:71:60:e8:18:86:9d:e1:
1c:93:01:cf:d3:f1:d8:36:1e:b6:a4:96:48:d0:44:
b6:7a:67:9d:cb:01:37:6a:c9:80:d1:45:33:44:a0:
27:b7:99:e6:c2:63:2c:28:85:6b:4f:b5:fe:b6:12:
79:39:11:48:e8:28:08:0f:07:e6:24:91:c0:f2:bc:
86:c4:5f:8e:04:4b:b6:6f:d9:4d:69:e4:31:53:03:
db:1a:ab:b6:32:0e:72:ce:e3:fa:83:df:2a:df:16:
42:11:0b:7c:c0:9e:92:13:33:17:21:3e:96:bc:bf:
27:09:84:d7:15:ed:53:1d:5e:90:83:f9:e7:96:68:
86:c8:7c:dc:ce:14:97:a2:cf:a5:b5:32:e3:24:1f:
57:22:1e:b6:6b:5c:21:97:65:03:4d:8c:e5:e7:cd:
0f:13:3b:7f:96:eb:2d:bf:e5:81:24:d1:a3:8d:5f:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:03:FF:B4:99:EE:84:3B:10:5E:DA:5F:07:32:26:FA:E4:D1:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/960FE376F72C11EE81C4C76B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.84.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:bd:01:66:75:83:62:9a:4e:25:a2:72:3f:b6:f2:5d:a7:5e:
06:6c:ab:a4:1b:20:8e:ac:cc:85:95:9e:60:76:49:d8:28:30:
62:8d:aa:22:8d:2c:e0:5e:7a:a5:66:1f:d6:ff:67:69:f8:39:
cd:36:80:5b:92:1b:dc:af:fc:e3:32:54:a5:1e:b5:fa:04:3c:
f7:ba:a0:4f:ba:88:9e:b1:3d:a8:92:17:76:4c:4e:61:c3:54:
8e:a4:5f:f4:7a:0c:12:b4:af:ab:08:0d:06:22:05:d1:e5:a4:
19:26:29:17:4b:ac:73:92:4c:9a:46:ec:b6:eb:85:50:21:a4:
49:e3:2e:3a:4d:67:c0:8f:a3:cb:9e:14:fd:0a:19:cc:fb:f5:
1f:62:84:0b:4a:13:c7:4e:16:c5:ac:ef:da:2c:e1:25:6d:af:
c7:7e:83:6b:28:2b:6a:09:89:b6:7f:d8:13:cd:c2:82:e3:b6:
be:2b:26:27:37:be:5e:49:4b:5a:ff:08:53:0b:78:c3:96:65:
63:9b:ab:8a:3b:57:c1:96:0d:d3:98:bb:18:37:33:68:ac:4b:
39:ee:3f:4f:f5:78:ee:c9:23:44:84:22:04:90:d3:ee:79:30:
ce:e0:5b:79:3e:ae:45:d6:03:55:9d:24:69:c3:6c:24:f8:b4:
33:fa:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:16 2024 by rpki-client on console-ams.rpki-client.org