Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8B16C6E84F511EE899E1E4E4AD9E6FC.roa
File: B8B16C6E84F511EE899E1E4E4AD9E6FC.roa (raw, json)
Hash identifier: KUVwvOsdX8Rrbt+p9aHgmyWxoiGe/sDrxxz8xEkWUM4=
Subject key identifier: C7:A5:D6:2D:78:48:39:9D:D1:C4:33:0A:63:F4:DA:5B:8C:39:64:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 505B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8B16C6E84F511EE899E1E4E4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:02:20 +0000
ROA not before: Fri 17 Nov 2023 03:02:16 +0000
ROA not after: Tue 12 Nov 2024 03:02:16 +0000
asID: 54252
IP address blocks: 154.202.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20571 (0x505b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:02:16 2023 GMT
Not After : Nov 12 03:02:16 2024 GMT
Subject: CN=6556d7bb-5b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5d:31:9e:d2:a4:8c:66:70:cc:93:a0:88:da:
5d:29:cc:d2:6d:40:e5:02:50:ee:b9:84:63:a9:78:
af:d2:d4:cf:87:06:3d:3e:78:a1:e0:fd:56:f9:66:
05:f1:0b:f1:81:0d:2c:af:5f:c9:35:d9:dc:b0:f2:
ba:66:c0:72:c6:a0:7c:95:43:51:75:0a:02:da:f1:
e6:a6:81:e6:40:6d:57:d7:40:6c:7a:bc:2f:88:3c:
a3:60:4e:05:65:05:ba:f1:3d:7f:fa:79:c5:34:d1:
7e:c3:cc:0c:d5:0f:de:44:a1:f6:70:41:89:82:c9:
d9:b5:3f:2f:d5:20:47:91:69:56:71:3d:40:56:55:
0a:45:d7:5a:03:cd:64:a4:ef:16:34:3f:27:7a:3c:
cb:66:56:17:6e:7a:8f:c2:4c:88:c7:c1:ae:fa:b0:
03:47:4b:3d:94:e6:10:c1:ee:84:fb:7c:d9:74:e7:
7f:d7:fc:2b:9d:a1:03:a4:a1:df:a2:d7:20:7e:f0:
6d:d8:f3:4e:ff:37:cb:a5:37:45:4e:31:23:e8:c3:
1e:a2:4b:41:56:10:17:35:c3:f1:b7:ea:d4:82:60:
59:dc:7a:92:78:08:ce:ee:48:8b:7c:05:6d:f5:06:
57:06:fe:d9:ef:4b:74:9f:64:96:05:ba:dc:e0:4e:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A5:D6:2D:78:48:39:9D:D1:C4:33:0A:63:F4:DA:5B:8C:39:64:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8B16C6E84F511EE899E1E4E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d7:d2:be:02:4b:11:56:5f:78:91:a1:48:13:87:44:ed:0c:
45:e4:34:82:ca:bb:98:68:02:04:3c:47:b7:6a:d6:95:3e:d5:
ed:4f:d2:9d:d3:9a:a2:42:1d:67:4e:d4:4c:b5:c2:89:88:2f:
39:e7:78:54:ab:99:44:e3:ac:0d:50:e5:d4:ab:ab:74:bd:15:
20:13:80:88:a9:0f:cb:f6:f5:d4:95:e8:37:f9:18:87:94:52:
35:1c:f2:56:2d:a3:1a:87:1d:3f:bc:0e:01:c7:ad:9e:54:38:
c1:0a:f3:43:60:de:c7:2d:e6:86:6f:41:92:d2:24:73:b4:50:
27:69:7d:1c:ba:00:e8:c6:68:1f:dd:2b:d1:bf:a5:ed:68:c8:
83:25:c8:58:79:a8:f5:03:99:c4:05:45:21:0b:db:97:37:6a:
00:d7:49:93:46:23:90:38:bd:9a:c2:21:c6:10:1a:7b:0c:91:
89:36:a0:77:e7:7a:37:24:3b:4e:4c:ab:d7:e7:81:53:3c:43:
7b:8a:91:a9:fb:d0:e3:c4:15:f3:25:24:7a:dc:98:65:32:f3:
21:14:8e:80:f9:59:87:0a:69:40:53:89:ae:ae:ca:9c:4c:76:
04:50:ac:a3:3b:d5:d3:81:11:15:f2:df:a2:dc:a7:bf:cb:c4:
e2:35:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org