Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD3A6BE9E4611EEB1574704D25BE465.roa
File: 9CD3A6BE9E4611EEB1574704D25BE465.roa (raw, json)
Hash identifier: 4kKwNLJs8px0oxAwqO04A6Y4MAU2TgYzVS/mOjKEypw=
Subject key identifier: C3:C2:CE:2C:89:62:49:7B:79:A3:87:A9:C6:D0:BE:56:05:06:76:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 62DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD3A6BE9E4611EEB1574704D25BE465.roa
Signing time: Tue 19 Dec 2023 08:14:21 +0000
ROA not before: Tue 19 Dec 2023 08:14:18 +0000
ROA not after: Fri 20 Dec 2024 08:14:18 +0000
asID: 132546
IP address blocks: 154.197.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25308 (0x62dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 19 08:14:18 2023 GMT
Not After : Dec 20 08:14:18 2024 GMT
Subject: CN=658150dd-1aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:19:37:6d:76:07:54:53:40:15:b1:7a:58:
75:38:1c:78:71:c7:46:50:bf:b6:ef:42:4a:20:fa:
12:71:8e:b5:a1:6c:a7:61:fe:2c:44:32:0f:9f:e1:
1b:7b:ed:f1:77:41:35:5e:c9:98:ba:49:c2:68:5e:
cd:c0:23:91:bc:e5:23:eb:08:84:aa:83:1e:31:c4:
6d:63:b7:8e:e9:79:0d:7e:a3:54:f3:f5:9c:0b:89:
f3:4a:10:e3:39:82:1f:cb:8e:89:61:47:03:b5:6f:
81:01:b6:02:ce:56:fb:8e:19:62:35:e4:3f:fe:5f:
a6:da:b8:42:4a:8a:93:f1:82:25:00:e9:92:98:52:
3b:13:44:f8:74:df:6e:8d:05:09:22:26:6e:b8:21:
cd:a6:62:e2:23:94:ed:d3:91:b0:20:48:85:49:58:
15:53:25:04:5b:b3:5c:4e:17:08:e6:b2:8c:9e:d4:
9d:f5:3f:eb:b3:09:09:47:36:ae:49:b2:9f:20:bf:
5d:96:0a:2a:03:4d:3b:4e:65:bc:e7:fa:f8:cd:5a:
b9:02:48:d8:1b:81:f0:81:11:1a:ea:c9:2d:12:1c:
60:30:3f:27:d6:61:cd:40:18:b4:a0:91:16:6e:8a:
f7:ba:f9:c4:9f:fc:8a:ac:43:4d:d3:5e:b6:d8:54:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:CE:2C:89:62:49:7B:79:A3:87:A9:C6:D0:BE:56:05:06:76:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CD3A6BE9E4611EEB1574704D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4e:d9:5c:c0:69:1d:d2:fb:50:de:5e:d1:dc:44:5a:aa:fe:
c9:2f:55:e4:9c:8c:a0:36:49:ad:f6:89:8a:76:b6:0a:dc:4b:
33:e4:4b:a2:85:2c:ca:e2:ac:b8:b0:3c:5b:a0:e5:e5:9d:88:
53:28:95:e1:6c:2e:26:14:e9:22:7a:36:ad:00:55:2d:c0:11:
4a:0d:1e:42:51:e3:37:ed:a1:ba:81:3e:25:94:1c:22:ab:b5:
0f:1e:1e:5f:d8:e0:e7:8a:b0:a9:ea:c3:b2:39:73:6a:52:15:
2a:13:71:0a:e6:62:02:b4:31:33:3d:b3:7e:4a:c6:3d:bd:f1:
95:4b:3d:e2:64:c0:1a:76:f9:bd:8f:b9:cb:72:57:47:ab:42:
22:55:16:cd:b3:13:5b:4c:73:c4:32:88:89:52:4e:43:8b:cb:
77:f8:9e:74:e0:e4:c8:37:7c:f2:2e:54:90:5e:15:61:fa:5b:
63:d7:e3:92:53:66:71:f4:0a:2b:9c:c1:b9:4a:b6:ec:14:a2:
fa:a6:9d:d2:1e:9a:17:d8:ca:24:55:de:fb:ce:b4:66:ac:63:
31:1e:01:fb:7d:e3:07:67:60:78:38:30:47:f8:7c:ed:d9:74:
73:4d:03:78:b9:b5:99:ae:39:30:ec:e2:47:b9:fc:10:cc:57:
a5:6f:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org