Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBE75940E59311EDB09BAB764AD9E6FC.roa
File: BBE75940E59311EDB09BAB764AD9E6FC.roa (raw, json)
Hash identifier: b692vaoDj3kSIyM+6w2lV66ik66rwVo1NOCgCPIC/vI=
Subject key identifier: BF:44:F1:98:9A:3D:29:FC:C1:F3:3B:AB:A2:16:25:83:7E:D3:73:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBE75940E59311EDB09BAB764AD9E6FC.roa
Signing time: Fri 28 Apr 2023 07:10:20 +0000
ROA not before: Fri 28 Apr 2023 07:10:16 +0000
ROA not after: Tue 30 Apr 2024 07:10:16 +0000
asID: 140224
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 07:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8225 (0x2021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 07:10:16 2023 GMT
Not After : Apr 30 07:10:16 2024 GMT
Subject: CN=644b715b-592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:2a:63:d8:02:de:e4:1f:64:aa:d5:45:08:
59:3c:20:10:a3:ab:ab:5b:e1:30:56:bf:34:a5:51:
3a:7b:57:d5:98:ec:4c:5b:5a:ad:9c:9c:c3:b0:13:
f8:ca:58:1d:70:d5:03:a2:10:13:37:f1:d3:91:96:
c9:cd:f2:47:2f:09:33:d4:3b:25:66:79:3c:45:06:
31:aa:a1:56:41:13:8a:27:a2:7c:db:c2:3a:fb:48:
0b:10:d3:d9:5f:a0:f5:6b:cf:75:ea:46:34:73:34:
f5:97:8f:9c:fc:4c:8e:57:ba:d8:0f:41:76:aa:0d:
c4:df:41:6c:55:5f:2c:75:e6:8e:b5:c5:18:2d:da:
c0:a1:4f:18:03:1c:d4:0a:69:5e:47:da:7a:07:76:
2e:24:13:c8:ca:d7:82:b3:26:73:fa:88:4f:fe:b0:
db:aa:af:c2:ea:61:bb:22:8e:0e:87:0b:51:98:06:
d6:0f:30:59:52:f4:c4:3d:94:f3:35:76:86:dd:d0:
08:29:64:91:54:d3:c0:72:c9:2a:18:7c:f7:b7:89:
a4:f8:2a:b2:d8:ff:1b:a3:0b:45:91:ba:7b:0e:ce:
a7:7d:cf:32:d9:f9:9f:4f:50:3f:3e:df:e5:bd:06:
14:e7:f3:35:88:37:58:3e:c3:1a:0d:94:44:36:cf:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:F1:98:9A:3D:29:FC:C1:F3:3B:AB:A2:16:25:83:7E:D3:73:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBE75940E59311EDB09BAB764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
44:8d:19:96:55:5e:f6:f4:ed:e4:ed:3f:12:44:37:24:a4:72:
54:45:4a:7f:f7:cc:5f:9e:5c:b0:c0:2d:70:40:b0:47:42:6e:
ea:85:c8:60:f2:dd:5d:da:08:6c:32:aa:ea:78:5e:61:69:71:
ec:d1:58:44:01:54:48:9e:72:65:05:19:5f:b5:52:e3:3b:d1:
5d:ed:fc:cc:d6:2f:4e:85:9f:35:39:d8:66:78:7e:98:51:36:
1e:87:b3:65:94:b4:73:7f:5b:9c:18:5f:1c:21:e9:f5:50:18:
44:7a:04:f2:c9:a5:cd:8e:32:30:9a:e7:18:7f:6d:38:b1:57:
29:13:eb:fd:d7:43:29:f2:17:f7:e3:b2:e9:c5:36:61:2f:50:
c1:9a:80:d5:24:06:a4:87:82:8d:73:aa:00:f6:6d:5d:33:b7:
04:a8:ae:61:d1:4e:c8:d9:86:27:19:c0:05:88:f7:df:ff:bd:
e9:5f:b6:cf:71:b6:59:cc:a8:ff:c5:c3:0c:f8:97:8f:d2:89:
1d:28:e8:85:f6:6c:2d:b1:b5:45:aa:e6:bc:39:40:ab:65:36:
7e:4c:9d:88:d2:6d:6d:c4:db:cb:c5:45:4a:81:01:6f:64:36:
78:a7:af:8c:69:87:ea:41:97:e0:c8:00:15:af:68:a4:65:6c:
e3:91:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:15 2024 by rpki-client on console-ams.rpki-client.org