Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A25F9A150111EEAF09612D4AD9E6FC.roa
File: A8A25F9A150111EEAF09612D4AD9E6FC.roa (raw, json)
Hash identifier: ETv1MDc60XoxjcKslCA1DgRyKglrsRS+ALmnDvSkUis=
Subject key identifier: CC:1C:DE:02:3A:90:64:F2:D0:54:A5:A4:A0:ED:50:98:2B:F6:09:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A25F9A150111EEAF09612D4AD9E6FC.roa
Signing time: Tue 27 Jun 2023 15:45:36 +0000
ROA not before: Tue 27 Jun 2023 15:45:33 +0000
ROA not after: Sun 23 Jun 2024 15:45:33 +0000
asID: 201411
IP address blocks: 154.84.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11806 (0x2e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 15:45:33 2023 GMT
Not After : Jun 23 15:45:33 2024 GMT
Subject: CN=649b0420-dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:7a:e4:96:b8:7f:1f:08:40:60:c6:0a:f7:
67:92:e6:f0:f7:5b:9d:44:56:53:d3:e4:5f:de:37:
29:4d:c4:94:94:97:02:5c:7b:d5:a9:7d:d6:c2:06:
e1:7e:68:2f:20:f9:ec:b9:49:c9:54:5d:83:97:af:
e1:a7:2a:f8:17:cf:59:32:7a:51:4e:f0:29:51:87:
55:86:82:8e:88:42:9d:c9:83:ed:e3:dd:5a:8b:32:
eb:9f:1f:6d:b6:7a:b6:de:e8:fc:7c:8a:d4:1b:1d:
62:62:ad:4c:2b:29:2d:51:14:03:c7:7c:30:43:84:
3e:67:39:81:28:7f:86:86:71:3f:68:01:aa:3e:73:
61:88:33:69:9e:03:b8:c6:d9:e4:4c:8a:24:19:23:
e8:20:29:40:23:bb:25:68:31:bf:a5:d6:06:f7:d2:
fa:93:f2:90:29:65:93:e3:04:16:ce:4b:2e:a7:13:
89:e3:85:30:2f:59:a4:22:3e:15:9b:6e:0e:69:c8:
95:2a:ce:b9:4f:8a:80:6d:67:0e:86:e1:c5:8f:74:
de:64:8b:6b:9e:3b:16:0c:85:6d:cd:6b:61:45:d2:
92:bf:d1:25:7c:54:74:b1:94:13:bf:90:a1:3d:2f:
5b:88:2e:1a:31:11:3b:ff:25:94:43:74:51:1b:29:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:DE:02:3A:90:64:F2:D0:54:A5:A4:A0:ED:50:98:2B:F6:09:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8A25F9A150111EEAF09612D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.156.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:92:dc:54:75:62:7d:6f:30:87:67:7c:8c:7d:90:b6:b4:1d:
21:69:d0:c8:c6:02:c1:b6:c8:5b:5d:dc:bd:7c:a9:66:9b:1e:
cd:d9:97:bb:e1:6f:9f:f7:e8:b3:73:e6:67:4f:1c:98:cd:7a:
b9:c5:8f:0a:ba:40:11:f7:f8:f0:5c:ef:d3:85:d7:f3:b4:4a:
33:ef:bf:76:7d:8e:0c:2e:d7:b3:36:a4:02:49:74:d9:d6:19:
ae:9b:09:ba:38:48:97:26:8b:ca:53:6b:f2:05:32:f0:ec:90:
f5:a5:35:3b:52:d8:cc:36:98:0d:09:2c:6f:4e:2b:6f:7e:b5:
4c:f7:ae:18:49:8b:06:6b:5c:4d:1a:6c:89:03:f3:e7:de:b0:
d0:28:f4:e3:1a:57:6c:70:07:da:44:e8:23:a3:b1:dd:a4:3b:
0c:b9:fa:40:a1:bf:09:6e:53:28:52:05:df:70:58:40:3d:75:
d4:13:24:f3:2c:60:93:0f:3c:85:2b:44:f6:36:e2:27:d3:3e:
84:19:b9:0e:48:7d:11:7d:dc:f3:aa:3e:ea:da:1a:e9:20:bc:
15:09:f5:33:43:e0:bf:65:cb:28:5b:96:cf:ee:29:42:19:83:
98:64:57:84:b9:c6:78:51:b4:53:ab:6a:b7:60:f6:99:2a:28:
2c:68:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org