Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE624605F9611EEAA74960E4AD9E6FC.roa
File: AEE624605F9611EEAA74960E4AD9E6FC.roa (raw, json)
Hash identifier: gXW2K60+1dZaa1m+I8xt7twZKFfgnAr4j7R+rFO1Ei0=
Subject key identifier: 13:50:70:17:B3:A7:55:E2:0F:1D:4C:40:34:F9:9D:DE:4B:5C:21:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4421
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE624605F9611EEAA74960E4AD9E6FC.roa
Signing time: Sat 30 Sep 2023 13:38:48 +0000
ROA not before: Sat 30 Sep 2023 13:38:45 +0000
ROA not after: Mon 30 Sep 2024 13:38:45 +0000
asID: 211392
IP address blocks: 154.84.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17441 (0x4421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 13:38:45 2023 GMT
Not After : Sep 30 13:38:45 2024 GMT
Subject: CN=651824e8-859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:b0:56:76:1e:9b:26:15:b1:30:ac:4b:98:
05:af:d4:52:d0:2b:85:5f:6b:75:6c:57:bc:f3:3b:
6e:8c:39:3e:3f:f5:27:6b:b1:69:33:f9:3a:9b:73:
91:25:24:35:4f:4e:6a:d1:ca:8f:22:ca:43:64:a6:
7f:89:b3:ff:9a:aa:00:25:9d:db:fc:52:c0:00:65:
e2:75:e6:8a:5a:62:39:59:6a:63:60:69:2a:0f:d0:
46:57:a9:c3:cd:5b:6e:69:d0:17:c9:c6:14:67:6e:
ec:21:59:2d:cc:03:06:1c:37:99:53:a8:f7:e3:f4:
b7:a3:03:d5:6f:b7:70:05:8e:d5:5d:00:22:83:dc:
89:a9:52:20:ce:b7:0c:85:17:8b:29:b5:af:e9:f6:
9e:a6:c6:8f:14:a7:72:24:4c:be:64:f1:02:9f:16:
dd:e1:31:34:3e:3e:c6:48:f2:db:ef:d3:18:96:32:
27:ec:08:28:e2:8c:e9:7c:ae:5d:28:3a:4e:e9:10:
f5:d9:74:35:eb:61:6a:3f:0b:ab:31:9c:8a:51:47:
42:12:4a:d1:3e:e0:fb:6f:ed:a9:b2:86:a4:04:71:
46:87:2e:a3:3a:e1:6e:69:8d:8d:d0:d3:c3:0f:91:
d1:6d:74:4e:bb:0f:54:56:09:46:9b:a7:95:65:87:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:70:17:B3:A7:55:E2:0F:1D:4C:40:34:F9:9D:DE:4B:5C:21:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEE624605F9611EEAA74960E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:10:90:e4:d1:19:15:ca:e2:f0:04:80:e3:37:76:d5:72:3f:
06:b1:d3:e4:75:83:51:2d:49:26:6d:b9:a3:55:f2:87:8b:b3:
95:2e:a4:73:93:0d:c9:34:0f:21:95:ab:f4:9f:b5:a2:cf:1d:
53:1f:ea:d7:f2:d0:01:c6:3c:82:78:70:0a:fa:39:50:b9:7a:
37:96:01:bc:18:0b:b6:2e:40:51:95:9a:5f:b8:bd:e4:1f:ef:
23:26:a6:88:9e:c5:21:e2:72:e5:08:aa:86:7d:5e:4d:14:0f:
0f:c7:ce:4f:9d:49:c5:57:2f:7a:27:df:b6:ee:f1:20:a2:e1:
27:b1:20:30:02:a1:41:4f:88:fc:09:68:10:87:88:77:60:f0:
8e:fe:0c:9c:70:73:f5:4c:8d:62:55:b0:da:7f:a5:22:bb:aa:
f9:d2:23:d4:b7:3e:4d:a4:7f:0f:65:14:96:76:44:4a:e1:d5:
38:a3:34:38:da:4e:81:54:b3:2c:1a:e5:84:14:80:d3:cb:29:
d5:0d:67:60:de:4c:e0:95:99:16:e3:4b:8d:69:61:33:ce:cd:
79:7d:70:ae:45:ce:37:36:0c:fc:24:09:eb:73:e8:07:d8:7e:
b5:f4:fa:ba:27:a3:94:ee:a1:ca:01:e4:fd:0a:5b:3c:b3:bb:
9f:d2:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org