Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC35E024F74911EE997A3158017001B1.roa
File: BC35E024F74911EE997A3158017001B1.roa (raw, json)
Hash identifier: L8cAZAHWX1Ct133CTbhaIpfqY0yPoEQn0zSKujBWBFE=
Subject key identifier: 9E:C1:33:41:64:50:B1:15:E2:18:F7:B7:E9:44:AD:34:0C:8B:61:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC35E024F74911EE997A3158017001B1.roa
Signing time: Wed 10 Apr 2024 14:50:56 +0000
ROA not before: Wed 10 Apr 2024 14:50:52 +0000
ROA not after: Thu 17 Oct 2024 14:50:52 +0000
asID: 132813
IP address blocks: 154.91.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43762 (0xaaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 14:50:52 2024 GMT
Not After : Oct 17 14:50:52 2024 GMT
Subject: CN=6616a750-bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:08:3b:f3:a1:00:af:a6:eb:3b:21:e2:49:
41:81:88:06:db:f6:a3:6e:76:5b:4a:3b:85:7d:37:
7b:21:28:2e:d5:03:8d:82:ed:3d:0d:d8:62:2b:4a:
5e:d4:0c:94:ea:ba:22:9d:d6:f5:ed:ba:34:72:b3:
0e:72:4f:ce:60:bc:63:c3:88:95:d6:a9:e3:c7:33:
7b:d7:c2:ab:85:35:71:48:6f:21:33:90:d6:2e:ef:
c5:b3:a6:12:70:ad:45:f5:ba:bc:ef:a7:5c:2f:14:
65:df:be:d9:0e:97:05:29:f5:26:66:1e:53:b4:d6:
c4:db:53:1f:bb:3b:be:fb:40:da:25:35:69:be:6f:
98:e7:96:ed:69:95:66:b1:41:7d:d1:ff:f8:29:aa:
17:e2:44:21:30:70:02:df:76:50:7f:b0:40:5d:1b:
ae:54:82:a0:fa:b9:d1:21:42:6b:b3:07:2c:54:da:
ef:35:39:d0:98:2d:58:b4:c3:d9:3c:b0:a6:b8:0d:
ad:1b:7b:b7:ff:a2:dc:21:d1:32:b4:ea:a0:73:03:
4a:42:e0:92:0e:98:73:8c:2d:75:9a:c7:ed:d1:47:
bd:08:a3:96:d5:88:ed:97:d5:e7:23:2b:9f:10:8d:
6c:c9:a9:de:1c:e6:9d:ac:a9:3b:a6:ff:da:da:09:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:33:41:64:50:B1:15:E2:18:F7:B7:E9:44:AD:34:0C:8B:61:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC35E024F74911EE997A3158017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:18:fe:08:9a:a6:9a:7b:67:6d:23:17:19:9e:31:a0:22:16:
36:b1:bc:47:bc:1e:ee:57:8a:80:9f:bb:c6:44:64:2a:4a:61:
3b:ce:e8:ca:3d:3f:fa:c2:37:87:41:52:19:4d:a1:9e:6e:c3:
03:5f:bb:ab:41:22:80:36:b8:04:ff:df:d5:0c:db:ba:14:19:
9b:4a:df:d5:88:8b:bc:65:75:4e:17:da:80:15:1c:db:bc:d3:
39:d3:b8:7a:88:ab:27:6a:0e:c5:78:f6:6e:06:3a:ed:af:c9:
3c:7f:e4:30:f6:cf:f5:d6:2e:a7:13:fa:f0:f7:95:5c:2b:48:
92:22:24:ba:82:16:fa:c8:21:26:29:12:61:dd:51:7d:85:25:
02:1f:4f:70:88:8c:cf:72:08:07:86:37:37:4e:fd:96:b1:ba:
4a:91:f6:fd:3b:d6:85:21:34:cc:ac:d9:45:79:8d:69:bc:54:
91:9b:28:12:22:73:ce:82:e7:77:a6:e4:4a:2e:66:ad:be:bd:
f0:50:0b:f5:c8:40:4b:e5:53:32:24:ae:0c:57:43:71:38:60:
7d:65:12:74:ae:44:7e:e3:fd:04:c9:46:1d:9d:d7:64:71:ee:
c6:5e:55:b6:48:4b:90:c0:f3:0f:3f:35:87:06:c8:ab:1c:5b:
7e:a2:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org