Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8997CB8E5C511EE97AB1885775412E6.roa
File: B8997CB8E5C511EE97AB1885775412E6.roa (raw, json)
Hash identifier: rGuA9oJS5xt+vMYyoLd3/nzTRITTm1V8v4IB3av6GC8=
Subject key identifier: 79:81:81:1B:55:21:EB:64:1A:BC:86:F8:B7:73:CF:90:8B:FD:8F:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A30E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8997CB8E5C511EE97AB1885775412E6.roa
Signing time: Tue 19 Mar 2024 07:53:06 +0000
ROA not before: Tue 19 Mar 2024 07:53:03 +0000
ROA not after: Mon 22 Apr 2024 07:53:03 +0000
asID: 26383
IP address blocks: 154.91.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 07:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41742 (0xa30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 07:53:03 2024 GMT
Not After : Apr 22 07:53:03 2024 GMT
Subject: CN=65f94462-01c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:57:9d:43:73:06:e0:f6:47:54:f2:67:0f:
71:b9:19:85:e0:c0:40:00:f4:49:9b:ee:a3:0b:d7:
7a:86:06:75:fe:1d:c4:d2:c4:70:ff:66:8a:a7:de:
4a:d8:7e:8e:93:ce:af:9a:de:63:89:80:3b:b1:0d:
09:3b:d4:81:4f:7c:b6:8e:48:54:d1:23:4b:14:8e:
c8:d7:bd:ce:c9:2c:b0:95:fe:17:7a:1b:02:11:c0:
09:2c:5a:61:cc:ed:05:77:5c:6b:61:90:46:81:a1:
9a:97:96:2c:95:53:75:e9:b8:20:b2:4c:ee:13:dd:
d3:73:a9:5b:d1:87:19:e3:50:aa:9d:16:08:31:e7:
64:dc:61:86:50:ab:58:c5:df:dc:08:71:09:4a:3b:
0b:09:4f:40:f2:b2:3b:4c:05:e0:49:24:de:a4:bf:
68:9c:b5:57:16:a0:a8:c8:7a:3e:9c:03:81:a1:3b:
28:ac:87:46:b6:35:28:11:a7:18:2a:93:bf:10:fa:
2f:f6:73:c5:1a:7c:29:b0:e5:88:44:29:2d:a6:d4:
94:82:c5:76:2c:a5:df:90:4f:33:9b:75:10:98:ec:
3c:79:98:e8:57:ac:85:3a:39:7a:01:df:8f:8d:31:
dd:71:8c:fb:87:26:c1:34:fe:8a:bf:51:50:41:3b:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:81:1B:55:21:EB:64:1A:BC:86:F8:B7:73:CF:90:8B:FD:8F:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8997CB8E5C511EE97AB1885775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d3:47:1e:03:e7:35:a2:c6:e4:0d:70:60:f5:98:ad:45:58:
61:51:9d:54:ae:9d:1b:71:f0:b9:22:0f:59:ca:c3:ba:0e:2b:
0a:c2:89:29:dc:81:be:9f:29:e9:cd:c8:a6:6b:2e:28:86:7f:
f1:e3:5a:b7:64:6a:19:ab:5b:c8:27:d9:1d:67:34:2c:84:c0:
48:de:d6:58:00:e0:55:40:f0:39:19:60:18:71:f9:dc:9b:0f:
f9:a7:63:f5:64:ad:40:1e:72:45:20:73:7c:eb:a0:90:96:6d:
44:c3:cf:70:d8:c5:38:4e:d7:c1:51:fb:ef:fe:d6:f6:60:fa:
d4:fd:ac:ee:a3:93:4f:06:e2:cc:10:ed:fe:76:40:59:55:5f:
a4:3f:ef:ad:2d:c3:63:5a:44:f7:fc:79:66:ac:f0:b6:0b:d0:
01:5a:d0:13:08:3b:6a:e9:e9:19:ec:6e:0e:31:9f:48:9c:5a:
e3:1c:5d:d1:7d:c5:cd:3e:24:8f:df:7c:cf:b3:e0:5a:b8:01:
30:a5:a7:c8:68:12:08:2c:94:0f:0c:90:ee:66:00:82:5d:09:
0e:a3:1c:7e:5f:eb:ce:d0:59:51:e4:59:6d:fe:eb:a2:ff:43:
6a:f5:29:08:af:77:47:f9:18:2a:6e:9e:77:8d:f9:7f:89:2a:
ae:24:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org