Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B367908482C111EE83347F474AD9E6FC.roa
File: B367908482C111EE83347F474AD9E6FC.roa (raw, json)
Hash identifier: 5rsWRH/OF+uxRknJeQB/Jc33E6hIWLaewpq7ilI618U=
Subject key identifier: 79:68:99:F9:58:81:DD:8A:CE:6D:DB:16:33:14:C2:2D:FA:E2:8B:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5020
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B367908482C111EE83347F474AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:44:55 +0000
ROA not before: Tue 14 Nov 2023 07:44:51 +0000
ROA not after: Tue 12 Nov 2024 07:44:51 +0000
asID: 397630
IP address blocks: 154.84.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20512 (0x5020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:44:51 2023 GMT
Not After : Nov 12 07:44:51 2024 GMT
Subject: CN=65532576-2a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:11:cd:4c:e2:0a:05:c7:93:80:20:92:ad:
14:dc:67:7c:68:08:4e:45:5a:20:68:af:d8:16:3b:
0e:d2:03:eb:77:65:c7:b5:ab:c6:d0:af:98:54:6f:
cb:4a:a6:35:b0:87:8e:97:31:ae:be:0e:db:4b:f5:
38:11:24:e8:fe:58:a1:44:cc:89:67:e0:c1:ea:5f:
83:74:ea:d6:85:1a:76:0a:d3:d7:85:d4:ca:c8:1d:
79:c2:cc:3a:67:40:3c:6e:be:d5:4b:3b:47:66:ea:
30:0a:7b:e9:00:83:46:ac:87:65:8b:65:13:bd:c1:
9b:48:0d:85:26:8e:aa:0f:48:8b:75:4b:fd:30:0d:
91:e3:bd:bd:d4:51:6a:04:1d:8c:69:d3:7f:6f:48:
95:fe:ee:29:75:0a:c9:79:e0:7c:0c:5c:48:aa:6b:
46:93:49:7f:27:0c:a0:c8:96:3f:7a:9a:c7:71:b9:
f8:4a:0e:1b:b3:8e:a2:6b:57:69:d9:9b:82:53:95:
89:91:24:4b:77:ef:1a:f8:b0:4e:77:38:be:21:6d:
d3:c1:df:80:ff:a2:5b:b0:91:d5:79:aa:ba:2e:be:
7b:07:fd:22:ea:9e:0c:47:eb:3a:fa:ec:37:0e:30:
f4:f7:83:87:73:65:8d:3d:f6:82:71:6b:3c:5d:97:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:99:F9:58:81:DD:8A:CE:6D:DB:16:33:14:C2:2D:FA:E2:8B:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B367908482C111EE83347F474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.132.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:9b:0d:b8:ce:33:3d:88:a4:7d:6a:f1:85:27:43:29:1f:
7f:b0:81:91:5a:d3:31:52:9a:b1:1c:e7:d9:99:26:53:49:dd:
70:61:c2:ff:97:57:f0:0b:4f:5a:b5:b7:4f:0b:2d:65:bd:d8:
3e:dd:e6:95:1c:44:83:ae:4c:36:5b:0e:02:84:df:cd:d3:c0:
c3:03:01:c4:2f:b1:92:3e:b1:cd:ca:05:72:68:cc:cb:db:dd:
c4:b5:75:66:df:63:67:a5:71:26:90:e2:08:b5:21:4f:72:e6:
5c:67:d4:16:20:09:19:5b:3f:30:7a:ab:9b:af:dd:2e:5b:09:
a2:b3:d7:c8:49:41:11:f3:e6:ab:0c:c2:cf:56:ae:86:01:38:
44:07:27:3e:4c:fe:f8:f6:ac:cf:da:13:05:e5:8b:41:3c:6e:
35:87:63:57:37:94:1f:66:d8:72:80:d2:c3:63:52:4c:b0:9e:
36:7f:c8:73:a9:f9:74:77:1d:39:5f:9f:19:10:ba:77:0f:e3:
60:12:20:79:74:a6:da:cf:e5:31:71:41:bd:d2:d2:5a:2f:46:
df:44:05:21:fe:7e:7b:33:d4:7e:00:7d:d4:42:9a:fb:5d:f6:
c3:80:f5:50:4f:1f:5e:44:68:79:ef:e8:f8:5e:9a:bc:84:8b:
70:69:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org