Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86C6DCAE82011EEA2914F72775412E6.roa
File: A86C6DCAE82011EEA2914F72775412E6.roa (raw, json)
Hash identifier: BkPyendND9XuWVje3RlgR2z4LXYFZqa8v+jWZ+tgSx8=
Subject key identifier: 4D:49:A0:94:0A:D1:40:83:FE:C8:B5:A0:EF:98:49:F3:E7:4B:33:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86C6DCAE82011EEA2914F72775412E6.roa
Signing time: Fri 22 Mar 2024 07:49:06 +0000
ROA not before: Fri 22 Mar 2024 07:49:02 +0000
ROA not after: Wed 04 Dec 2024 07:49:02 +0000
asID: 135423
IP address blocks: 154.210.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42528 (0xa620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 22 07:49:02 2024 GMT
Not After : Dec 4 07:49:02 2024 GMT
Subject: CN=65fd37f2-956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:39:a3:f7:ef:96:3c:67:2f:e8:52:0d:28:
9f:2b:a9:c6:9f:d6:58:81:1b:7c:67:e1:6d:ba:d6:
0f:d5:fb:0e:de:9d:65:ed:f4:a3:ae:0c:87:ad:7b:
88:8a:73:ce:83:c1:0a:9f:69:56:ed:99:5a:c0:e3:
69:83:06:86:ac:3d:ca:00:ff:18:91:f4:ca:aa:c9:
7c:dc:db:c7:7a:6d:08:fd:1f:61:8f:be:5e:79:1c:
08:7f:95:82:ca:c4:e2:f1:46:32:0d:ed:e4:66:65:
25:f4:c8:20:cd:90:33:4c:53:4f:2e:98:2c:5e:aa:
d1:4d:e7:ef:23:76:a7:94:d7:b9:1a:c2:99:62:a5:
93:36:b1:de:09:a7:bd:f3:22:4f:14:6b:df:1e:2a:
f8:07:98:d5:57:4c:cd:8e:df:48:8c:58:da:af:fb:
d4:c5:90:53:b7:e4:a7:e5:14:ea:0f:f4:95:e2:d4:
aa:78:ac:14:f7:33:e7:60:a6:9f:ce:c9:a6:6f:38:
10:9e:37:28:4d:b4:48:8a:33:62:1e:58:35:12:a4:
ac:08:9e:81:d5:00:37:6f:cf:6b:b4:62:21:16:dd:
a6:89:99:e3:8a:6d:41:24:80:c7:8f:c7:c7:6c:67:
da:5a:3d:ca:44:7d:39:8c:ca:2b:25:21:62:bf:c6:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:A0:94:0A:D1:40:83:FE:C8:B5:A0:EF:98:49:F3:E7:4B:33:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A86C6DCAE82011EEA2914F72775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.8.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:74:94:94:3a:ae:58:c8:1f:cf:95:8f:af:0d:e4:25:55:27:
18:43:fd:d4:fd:44:b4:ba:b3:22:21:47:3f:b6:82:1e:52:95:
f8:5c:75:7c:fb:b5:26:52:25:3d:d5:09:09:70:76:71:9c:96:
2e:67:dd:53:ed:6f:ef:d7:b8:99:9f:48:f8:3c:ff:5f:7b:d9:
36:98:1e:69:fc:db:9c:3f:be:47:96:9a:ea:f3:e3:bb:db:91:
dd:3d:77:ed:0f:ca:ea:d6:be:01:82:cb:7d:f3:a3:a8:81:57:
d4:70:1d:45:4b:e0:10:54:2b:6e:96:8c:bd:12:ec:5b:c3:31:
51:13:13:ac:0b:ba:2a:b2:86:1f:69:48:90:07:a7:30:20:0e:
b6:a4:79:6a:2a:0a:a1:0b:ef:9d:2e:7a:2c:39:c0:6d:38:81:
48:0b:ff:7a:41:7b:75:c8:fb:25:4d:57:3e:62:92:2c:69:4e:
24:fb:d4:28:a2:5e:53:79:cd:02:a4:cc:5e:bf:d2:60:b8:f0:
3c:00:52:e8:fd:3e:e3:31:f2:37:d2:28:a2:64:39:2a:d5:1d:
04:4e:83:e1:ce:73:4f:b6:bb:5d:31:23:e4:37:2e:8d:fd:50:
b5:77:5b:9e:10:0e:b0:30:28:00:e2:04:c5:4e:0e:5e:27:b8:
c1:ab:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org