Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5D095E278711EE8A4BEC2D4AD9E6FC.roa
File: BF5D095E278711EE8A4BEC2D4AD9E6FC.roa (raw, json)
Hash identifier: 09a3lI1XNTLLrQGX+DkPhl21El5a6aEeTef5YQc6nHQ=
Subject key identifier: 7A:4C:5F:C3:D9:69:9A:20:0B:3B:73:CB:7F:CF:F8:EF:7A:E9:D6:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 33BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5D095E278711EE8A4BEC2D4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 05:30:48 +0000
ROA not before: Fri 21 Jul 2023 05:30:44 +0000
ROA not after: Thu 18 Jul 2024 05:30:44 +0000
asID: 55020
IP address blocks: 154.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13245 (0x33bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 05:30:44 2023 GMT
Not After : Jul 18 05:30:44 2024 GMT
Subject: CN=64ba1808-b66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:89:ac:5e:cb:2b:35:31:0a:3d:63:12:4e:31:
f4:9d:64:ec:1c:a5:1a:27:0d:b1:67:6c:e8:b1:94:
75:af:b8:57:d0:cc:04:b3:84:df:a9:21:6c:2f:fd:
62:c3:f5:d2:a1:2c:48:a6:ef:13:6a:a8:99:68:54:
1c:73:67:bf:6b:9e:56:a6:b1:71:c3:fa:47:dd:b3:
9e:ee:95:e5:63:6a:29:a5:df:af:58:3b:40:a9:fb:
d8:94:ab:7f:58:06:6e:bd:a3:30:a5:d7:7b:47:4a:
c7:41:28:7d:8b:21:b2:c5:3a:39:5c:29:28:a1:1f:
bc:db:1f:3a:46:26:6c:49:68:1d:d6:94:04:d9:90:
71:dc:91:7e:10:87:ca:fb:72:a2:2a:48:91:3a:4d:
b1:c0:95:0f:6d:4e:4f:d2:11:42:98:6c:da:37:93:
76:8a:72:f2:ce:3b:ed:02:dd:93:2f:0e:95:00:c2:
8c:d1:ee:68:c1:60:71:d0:46:2d:17:ca:ce:84:fb:
a0:33:cf:b6:c6:db:83:71:d6:d3:c4:37:bc:90:6d:
ea:60:6b:8f:3a:45:22:aa:af:50:0c:ea:ac:57:cf:
04:77:40:8e:99:b3:00:e6:bb:c3:16:7b:36:7b:21:
7e:4d:29:ab:e7:6a:43:05:e7:66:26:45:ae:2a:45:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:5F:C3:D9:69:9A:20:0B:3B:73:CB:7F:CF:F8:EF:7A:E9:D6:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5D095E278711EE8A4BEC2D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
29:bc:8a:74:52:be:96:b4:7f:a7:31:1c:95:90:be:95:ba:88:
cd:f4:8b:82:3d:91:d5:be:9b:41:f4:42:64:73:38:9b:6a:12:
12:9d:62:b9:b1:58:af:36:56:74:85:a9:68:fc:5e:93:86:2b:
84:a3:c2:20:64:99:d6:8c:fc:54:c6:65:26:04:b5:6a:12:05:
63:5f:2e:cc:b0:58:fe:61:43:30:ca:eb:5f:7c:7b:a6:28:b9:
6a:3d:ba:9f:2a:f7:7f:88:55:1c:8b:2a:73:25:ef:a3:8b:a7:
5e:7e:bf:27:bd:ab:cc:70:58:0a:6c:51:e9:fb:fa:60:87:06:
e2:ba:18:1d:d2:b7:5c:57:48:6a:e9:bd:1c:b7:e7:94:71:c0:
0e:38:56:2a:b1:2c:ba:1b:2c:b2:45:15:10:47:b7:20:d0:29:
9f:e4:34:36:eb:e0:e4:e5:b2:7c:c0:0d:9b:ae:11:e2:a8:ee:
15:aa:3a:da:43:1a:6a:cb:e2:e8:c7:49:fa:49:17:54:58:7d:
6c:c8:b8:29:e3:23:90:cc:41:a9:04:40:c6:d2:dc:82:1e:ed:
86:f6:5d:63:f9:23:19:de:26:a8:ae:6c:58:e6:01:f1:34:84:
04:68:6b:8b:8e:cd:cf:94:eb:9a:72:fc:44:ef:27:86:c0:e2:
8f:d9:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:01 2024 by rpki-client on console-fra.rpki-client.org