Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7FFF02F87611EEBEA7F6F8007001B1.roa
File: BF7FFF02F87611EEBEA7F6F8007001B1.roa (raw, json)
Hash identifier: H3jVz/galVPy7hptNg5siItqBGH5W7pt3Hzqjk4jHHA=
Subject key identifier: 19:A7:A6:6D:6A:10:39:AB:C0:31:D9:4D:19:A7:C0:90:22:AB:6A:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7FFF02F87611EEBEA7F6F8007001B1.roa
Signing time: Fri 12 Apr 2024 02:45:40 +0000
ROA not before: Fri 12 Apr 2024 02:45:37 +0000
ROA not after: Mon 22 Apr 2024 02:45:37 +0000
asID: 5065
IP address blocks: 154.85.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 02:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43962 (0xabba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 02:45:37 2024 GMT
Not After : Apr 22 02:45:37 2024 GMT
Subject: CN=6618a054-b2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:5a:ca:d1:a6:0c:1a:6a:c6:3d:85:2c:d3:
9d:ff:c5:26:1f:84:1a:8a:b8:a8:12:16:5c:8b:b4:
4f:bd:88:f6:0b:8f:3c:40:58:1d:ea:9b:ef:5d:bb:
48:53:90:3d:a4:e5:29:e5:dd:08:cf:d8:2d:91:79:
b9:ac:51:82:09:f4:f4:fd:7b:1f:d6:17:60:96:72:
55:81:64:ae:89:20:21:1a:07:d1:c5:26:07:83:40:
18:cc:9d:8d:5a:77:fe:5d:d0:21:0b:d2:74:cc:9a:
e1:48:11:f4:26:07:72:09:1a:c4:48:d0:85:af:4b:
2a:1a:4e:50:ad:46:01:60:3c:61:02:8f:5f:1a:34:
c5:33:0f:0a:c7:e2:57:f5:f1:9d:4d:e5:c6:49:f6:
53:c4:39:66:c8:ab:a6:33:ea:6a:d7:d3:da:ff:23:
a4:06:0d:14:f7:af:fd:0e:db:04:cb:f7:72:e1:cc:
34:11:e1:39:cc:88:d8:6d:dd:ef:b6:32:49:46:12:
9d:06:1d:93:1d:4d:e5:f9:10:2f:4a:dd:72:58:d3:
a7:75:14:a5:ff:c8:9a:32:4a:f7:d0:76:3b:2f:95:
08:26:9e:4c:4f:f1:c4:13:a0:61:5d:48:4c:f7:8b:
60:81:4b:48:9f:e1:e1:bd:23:b5:ec:a6:ff:cc:e9:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:A6:6D:6A:10:39:AB:C0:31:D9:4D:19:A7:C0:90:22:AB:6A:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF7FFF02F87611EEBEA7F6F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b8:30:ab:52:52:06:c5:43:0b:c9:e4:03:1d:e4:37:66:9f:
98:ed:ef:ef:b6:96:83:7b:79:21:28:d9:d0:67:c3:4b:16:d1:
4c:a0:0c:cc:56:71:52:09:12:d9:9a:39:06:cd:6f:e7:43:79:
d0:8e:11:ad:1f:74:4c:36:99:b7:19:0e:56:37:29:4c:2a:3c:
03:75:ed:2f:89:6b:b6:39:8f:5a:41:79:1c:e2:4f:3c:c5:d8:
85:f7:87:78:f6:64:6b:eb:d4:f1:a5:93:cb:0d:7a:66:a7:10:
96:dd:4c:93:0c:17:23:3b:7e:54:bb:67:82:41:25:ae:5c:54:
bd:23:2e:65:a4:7e:f9:5e:35:3a:ff:43:71:68:7d:46:8c:3d:
96:f8:b7:f1:8f:6b:3e:89:c2:69:1f:49:6e:4f:be:3c:a5:e9:
51:e4:2f:4b:91:19:17:cb:87:5c:c6:f6:7e:ea:ae:40:f1:fc:
71:56:96:77:18:ed:cc:45:16:19:16:10:28:42:8e:fb:f3:35:
58:e4:bd:50:ef:f1:c2:06:bf:be:fe:eb:43:2c:39:e3:df:33:
3b:e2:1a:f5:3b:1c:f9:d6:85:09:72:c1:02:32:f4:dc:68:b0:
bc:e6:64:09:2c:33:e4:9a:7d:26:63:56:d1:e0:d7:ac:0e:d4:
9f:2b:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org