Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD4B45C074B011EE8CDBBE564AD9E6FC.roa
File: AD4B45C074B011EE8CDBBE564AD9E6FC.roa (raw, json)
Hash identifier: 7ewS87Zj+zgTLqw1uMOMUko+hhKP7kBvKNpfbLUzD+A=
Subject key identifier: 45:B9:E0:06:75:EE:23:DA:7C:04:08:E9:51:CA:69:6E:E5:30:4E:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4AF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD4B45C074B011EE8CDBBE564AD9E6FC.roa
Signing time: Fri 27 Oct 2023 10:07:47 +0000
ROA not before: Fri 27 Oct 2023 10:07:43 +0000
ROA not after: Wed 30 Oct 2024 10:07:43 +0000
asID: 58460
IP address blocks: 154.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19184 (0x4af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 27 10:07:43 2023 GMT
Not After : Oct 30 10:07:43 2024 GMT
Subject: CN=653b8bf2-cf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:b7:66:7a:30:e0:4c:a5:96:7e:cb:07:4c:
ae:2e:9d:04:a9:91:9e:d8:66:b0:c9:1d:14:47:11:
30:e1:73:89:45:28:90:1c:d2:ee:07:26:9c:81:e3:
c2:b5:ad:06:88:5e:73:e2:ae:ae:45:36:5f:0c:c1:
46:93:3d:26:0b:e6:a8:af:c4:5a:ab:aa:5a:4b:5b:
27:20:24:be:07:31:a7:8d:c2:5b:ad:88:5e:c5:66:
af:53:a2:f3:9f:77:0e:11:88:5c:8d:7c:2d:8c:80:
45:6b:f3:a5:b2:d4:33:29:08:63:8b:d6:56:b7:b5:
75:58:5d:1c:7b:67:29:24:9d:c3:c3:ed:c2:eb:ce:
80:43:10:e1:24:87:91:f9:a2:6b:d8:cf:b2:a9:33:
f7:51:c4:d6:f6:90:4f:00:18:22:c6:ed:19:02:f7:
68:41:99:fa:db:14:05:8c:eb:74:a9:e9:f1:5a:4e:
1a:02:1d:73:9c:fe:f8:5a:20:bd:12:13:6f:ab:32:
07:74:61:5f:1d:b7:50:46:e6:26:ba:ee:ee:d2:bf:
ff:77:52:55:28:0b:6b:26:a6:05:0f:eb:50:dc:29:
cb:64:6f:27:58:60:c1:55:8d:3d:d0:eb:ef:f9:c4:
8e:ae:c9:94:d9:a7:f1:d0:fc:25:8c:ab:9f:b5:38:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:E0:06:75:EE:23:DA:7C:04:08:E9:51:CA:69:6E:E5:30:4E:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD4B45C074B011EE8CDBBE564AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2a:72:af:15:d5:c1:1d:3a:c5:c0:64:c0:c3:d7:93:17:d8:
06:91:3d:f2:ef:65:61:a8:f0:9b:cc:42:ca:44:bd:dd:3e:a8:
f2:10:a0:7d:ff:75:7d:53:46:61:b8:f0:ee:6c:14:99:82:b5:
68:2b:d1:8c:8d:6a:ed:df:42:e9:25:06:1f:8d:c3:5f:97:c2:
9a:61:18:b4:4d:08:85:0b:03:f3:8e:15:8d:a8:aa:04:22:f1:
ed:22:f3:cb:8b:4d:5d:b6:10:26:72:11:41:0a:a1:43:a5:bd:
3f:a4:17:cf:ff:dc:bb:5c:8f:16:66:9c:c6:b0:3f:30:10:98:
7c:d5:8b:8d:9b:49:97:c4:e1:83:e9:8f:46:d9:5c:09:3a:25:
37:3f:45:ea:d9:ac:5f:ce:8f:c2:66:fd:0c:63:dc:bc:60:3d:
b5:fe:02:35:ce:e1:d9:21:27:41:b9:f8:ba:2c:00:b1:d2:ff:
04:51:97:0f:42:b9:06:6c:cf:4e:95:ce:5d:ea:68:0f:59:4f:
bc:7e:e7:a3:51:d9:76:33:41:56:c0:67:47:93:c6:eb:e9:e0:
5d:ac:e0:16:fb:9b:39:81:ce:08:da:0e:92:ff:ae:64:a8:41:
6b:c3:a6:3e:6c:61:a9:d7:b7:b9:25:de:7d:9a:bc:dc:50:39:
4b:0b:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org