Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F289187EB611EE91CAFD524AD9E6FC.roa
File: B4F289187EB611EE91CAFD524AD9E6FC.roa (raw, json)
Hash identifier: 5SrWC9mJ0B3DV4+qkowSKo5pwLEwNLTSd6IQBESBLwk=
Subject key identifier: DD:1C:5D:2C:C7:EA:2B:02:30:F7:C5:9B:9C:7A:9E:A8:5B:64:97:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4D9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F289187EB611EE91CAFD524AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:16:08 +0000
ROA not before: Thu 09 Nov 2023 04:16:05 +0000
ROA not after: Thu 08 Aug 2024 04:16:05 +0000
asID: 133861
IP address blocks: 154.204.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19871 (0x4d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:16:05 2023 GMT
Not After : Aug 8 04:16:05 2024 GMT
Subject: CN=654c5d08-2d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:e9:f3:06:53:0f:42:25:5d:5c:36:3b:03:
a6:47:94:fb:73:0b:b2:f6:35:88:fd:0e:ef:87:08:
c8:41:a3:44:f5:0d:3b:24:41:94:b3:9d:93:b9:ed:
0f:02:65:bd:ca:bc:4d:d9:3f:c8:19:46:e5:3a:3e:
cc:61:e8:f2:be:45:f5:5f:32:3d:47:ba:af:42:48:
d2:8f:75:79:e5:91:5b:eb:65:8b:2e:1e:a5:d8:65:
14:e9:d8:c6:00:2e:e6:64:f7:27:57:af:2a:a4:96:
8e:17:65:0a:8c:14:9d:8b:16:09:dd:c1:11:b7:b6:
0d:b8:8b:e5:2b:c4:e2:e9:30:e7:61:39:5e:32:24:
9d:1f:f6:ed:6d:da:8a:26:14:cb:40:0a:02:d9:f7:
24:1b:07:6a:29:0a:37:cf:f1:dc:78:4a:fa:aa:41:
ba:34:c1:e1:2c:6a:a8:05:92:88:79:7d:63:91:4e:
0d:b8:05:f0:2e:19:93:69:1e:6e:8d:e6:96:49:5e:
60:98:ca:7c:54:61:c6:3a:f2:6a:80:90:9c:2f:7f:
03:0f:6b:e7:3d:49:45:a0:3f:c6:ca:f9:44:b3:0d:
d8:e4:2b:c7:40:48:f2:e8:7d:18:fe:dc:1a:80:f4:
c4:03:8e:56:5b:ad:0f:eb:98:f2:e2:c2:2a:62:43:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1C:5D:2C:C7:EA:2B:02:30:F7:C5:9B:9C:7A:9E:A8:5B:64:97:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F289187EB611EE91CAFD524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.63.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1a:05:1a:88:75:12:30:21:48:a9:d2:0d:ca:cb:f4:89:5a:
5d:f0:00:a7:d1:ba:ac:52:42:00:02:42:d3:ca:7b:99:2c:10:
67:23:a1:70:3e:76:42:5e:68:a2:00:2e:c3:c4:b7:e1:3d:94:
f7:4f:b9:52:ab:96:de:81:27:c6:f0:7b:64:30:8a:b9:d7:95:
bf:73:59:39:16:2b:9c:3d:82:7f:d0:9d:bb:c6:97:97:18:73:
db:9e:90:53:49:1e:5b:bc:ab:3f:8c:b0:fd:14:6b:83:1a:d3:
3c:bf:15:de:60:c9:a0:5d:05:4d:f6:04:67:74:fe:de:f2:a5:
85:43:4b:30:91:e5:f5:17:09:bb:18:84:e4:10:98:c5:2c:eb:
28:f1:22:6d:ad:8c:fa:96:3e:a3:2b:ca:5a:7e:d8:1c:d1:ae:
f0:a0:15:37:88:99:fa:b3:c8:b7:5d:80:5d:84:9c:d9:dc:b7:
d9:9a:75:e7:39:b1:15:de:fd:8a:c2:af:8a:bd:1e:ed:e4:e6:
49:bf:20:b4:e0:f2:06:2e:f2:60:b1:a5:fe:09:b6:df:93:ff:
91:03:4d:83:57:43:b3:92:24:d8:13:b1:fa:d0:44:b4:1b:b0:
1d:aa:6b:51:c9:18:d7:0e:2d:f6:8d:f3:d3:35:b0:6c:bf:be:
26:bd:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org