Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A355574C671B11EEA50E1A764AD9E6FC.roa
File: A355574C671B11EEA50E1A764AD9E6FC.roa (raw, json)
Hash identifier: P+63mTkUFqU3XlX3lUhh3mZN9Z7tkbPVynbhAMowFs0=
Subject key identifier: A1:AF:11:2C:82:D2:80:83:81:21:02:7C:6E:33:46:EE:A8:0A:6E:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4565
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A355574C671B11EEA50E1A764AD9E6FC.roa
Signing time: Tue 10 Oct 2023 03:18:10 +0000
ROA not before: Tue 10 Oct 2023 03:18:06 +0000
ROA not after: Wed 28 Aug 2024 03:18:06 +0000
asID: 140227
IP address blocks: 154.197.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17765 (0x4565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 03:18:06 2023 GMT
Not After : Aug 28 03:18:06 2024 GMT
Subject: CN=6524c272-4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:ec:50:67:f1:93:9a:f9:14:b7:5d:79:2a:
11:c6:3c:9c:41:4f:5c:ed:7a:86:c7:bc:fb:0b:c2:
20:b5:57:11:8f:01:0e:2d:ce:e7:89:71:90:f0:3e:
f8:a8:2c:9e:e5:f7:52:08:db:6c:95:d5:8d:b8:22:
3d:51:42:9b:8c:3d:07:4b:e6:60:62:3c:61:0a:97:
5b:86:3f:64:12:8c:2b:38:73:65:da:85:11:99:89:
7a:ba:f9:65:88:42:98:17:b8:10:33:97:fd:44:3d:
36:cd:5c:58:db:e0:4f:83:15:0a:9d:5b:a6:da:ad:
d8:15:4e:30:88:dc:2f:68:2b:b4:14:58:53:ac:3b:
bd:63:06:c5:1d:43:dc:17:b4:d6:72:b6:d5:50:d1:
7f:e8:f8:a1:ee:1e:70:e1:19:a7:70:3c:aa:10:fc:
b7:12:f1:9a:7d:f8:41:61:ac:8f:d4:f3:7e:24:35:
32:4a:84:d7:2d:7a:b7:ed:7b:41:55:03:75:f4:14:
90:39:68:5d:17:d7:f3:f7:94:68:50:9d:d8:fd:17:
e7:8a:eb:35:f3:a6:bb:8d:c8:ce:8b:67:b9:b0:f0:
fd:10:b7:0e:56:ac:39:8e:1a:c3:c5:e8:36:cc:fd:
17:31:8e:04:bd:3e:a4:b0:ac:64:a2:4e:d9:dc:29:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:11:2C:82:D2:80:83:81:21:02:7C:6E:33:46:EE:A8:0A:6E:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A355574C671B11EEA50E1A764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.17.0/24
Signature Algorithm: sha256WithRSAEncryption
37:93:36:e4:9d:5e:b3:37:02:ff:d5:7b:f0:79:1e:43:8d:bc:
bd:56:f8:56:f9:39:03:aa:ae:9d:b6:a0:7c:f7:91:01:a7:be:
91:75:4f:bd:46:ce:83:e7:5f:67:3c:a4:67:4b:fa:29:69:00:
5e:d7:c3:61:c1:39:c7:d1:f8:98:7e:d3:25:8d:f7:eb:c8:f5:
65:7c:20:67:c3:70:e4:47:d0:21:c4:a4:b5:f6:a3:f1:46:fb:
fc:98:ca:8d:df:25:92:ef:21:5f:8d:d4:4a:ba:f9:b4:6c:41:
7d:f4:25:36:99:2a:09:9f:45:82:85:24:6c:01:e0:b9:ee:68:
03:9c:21:af:cf:89:63:9b:43:4c:00:89:71:fa:c8:ea:44:a3:
0f:03:18:d8:1d:a6:8f:99:f9:e5:c7:fe:3c:05:2f:e2:f6:32:
2d:72:e6:af:9a:14:91:55:0a:7f:81:13:a9:98:64:cf:d1:7c:
4f:90:f0:33:c8:93:f3:07:12:cb:4a:45:62:6b:0a:ef:9e:b3:
a7:ea:83:d7:60:3b:98:50:aa:96:ac:34:3a:97:0f:e8:12:ec:
55:f4:25:35:42:3d:54:d8:89:53:3d:69:3d:d5:43:36:86:24:
90:8f:cc:9b:55:06:ce:05:78:34:bf:01:45:a2:e6:99:e6:ab:
64:2c:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org