Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC6524085F9911EE9FB737184AD9E6FC.roa
File: BC6524085F9911EE9FB737184AD9E6FC.roa (raw, json)
Hash identifier: TKAsNRZwu5HFqKtVdL9mzAKpsJJO3OMJoDVPVyUg7Gw=
Subject key identifier: BF:C6:75:56:DA:AE:83:84:78:E1:9A:97:AE:F4:C5:45:91:52:AA:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 443F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC6524085F9911EE9FB737184AD9E6FC.roa
Signing time: Sat 30 Sep 2023 14:00:39 +0000
ROA not before: Sat 30 Sep 2023 14:00:36 +0000
ROA not after: Mon 30 Sep 2024 14:00:36 +0000
asID: 209242
IP address blocks: 154.84.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17471 (0x443f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 14:00:36 2023 GMT
Not After : Sep 30 14:00:36 2024 GMT
Subject: CN=65182a07-839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:29:aa:25:38:bb:dc:7f:bd:70:d1:50:4e:
1c:13:b4:65:b4:9e:d5:59:c3:29:d8:a3:18:10:a7:
68:8d:f3:51:ce:d6:c3:ea:b9:05:0e:5f:5d:9c:38:
76:4e:38:1c:a3:04:1b:6c:b4:02:cc:d9:ea:e0:aa:
af:00:96:25:ec:c7:21:4f:f7:c0:4b:95:aa:68:44:
df:94:d6:b4:bb:03:2b:a5:d0:c0:c5:6c:0b:f1:66:
49:24:27:ab:49:05:37:74:4d:5d:2b:72:31:51:10:
3c:b9:2c:29:ab:9d:ca:67:4f:97:a7:49:72:14:d0:
f1:17:20:7b:4d:2f:a4:c6:10:c2:a4:42:ad:d2:50:
0a:ac:39:a8:9b:59:45:8b:b2:71:2f:d0:71:7b:f6:
3d:4d:7a:d0:bb:ee:52:db:f6:ef:cd:43:9b:1c:bf:
6a:ea:5e:25:8e:f1:8d:3f:41:72:de:4b:58:89:2f:
0b:da:dc:66:bc:a7:8f:a5:d3:93:d6:6c:84:1e:69:
9a:ca:e1:3f:09:a5:c8:5a:c1:84:39:76:a0:52:bc:
e6:c2:c6:a1:ff:c4:90:bd:f4:a1:cb:3a:32:8e:6e:
81:ae:1f:48:33:bf:1e:87:11:77:86:4d:ba:9d:7f:
64:c1:73:74:10:75:85:90:0d:04:5d:d5:49:da:43:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:75:56:DA:AE:83:84:78:E1:9A:97:AE:F4:C5:45:91:52:AA:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC6524085F9911EE9FB737184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:37:47:bd:97:b9:f4:9d:ed:fb:ff:b7:e1:f3:be:a2:a3:c2:
33:43:01:db:c1:17:fb:b6:01:f3:ba:0b:db:cc:38:23:90:a6:
1b:e5:48:dd:9c:f2:56:1a:7d:16:a6:e4:08:8f:02:73:82:34:
be:0d:78:16:2e:88:16:eb:ed:90:05:46:4f:e7:68:ba:52:8c:
e5:66:00:84:f7:31:94:b1:01:59:10:5d:01:f8:40:f1:ae:32:
92:32:7f:e9:85:b8:6a:be:83:85:c6:70:ed:fb:2d:03:70:e3:
1d:29:f4:de:7b:4f:c9:7a:e1:9e:b2:18:00:e7:53:ce:b3:9c:
70:67:aa:26:61:c9:f8:64:b6:ea:cb:1e:a0:0f:82:50:d0:b3:
4b:e2:0c:56:51:6b:fa:b1:a4:dd:8c:a1:6c:2f:3e:df:1a:09:
c3:5f:2c:d2:12:02:a4:ac:d4:85:bc:69:62:a9:f6:c7:54:97:
08:2b:7d:93:75:3e:c3:4c:27:07:28:1e:38:ed:0d:6c:da:f7:
0d:b0:d5:47:68:a1:0f:cc:0b:ac:14:ee:27:1f:b1:42:17:74:
96:44:7b:a6:9a:fb:f3:96:bb:1d:6b:c7:07:73:09:58:c3:c6:
a9:e8:74:e2:4a:b8:b6:f0:3e:92:c8:dd:15:aa:03:5e:5a:9e:
f9:c5:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org