Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD7F86C82B811EE9A334E2B4AD9E6FC.roa
File: BFD7F86C82B811EE9A334E2B4AD9E6FC.roa (raw, json)
Hash identifier: G/OBPyQkRn/M667umgXnw/TCXk3radXjW8JdwO+zKes=
Subject key identifier: 1A:D7:45:08:7B:01:E5:02:A4:56:CE:26:8D:D7:1D:D0:04:59:1C:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD7F86C82B811EE9A334E2B4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:40:50 +0000
ROA not before: Tue 14 Nov 2023 06:40:47 +0000
ROA not after: Tue 12 Nov 2024 06:40:47 +0000
asID: 397630
IP address blocks: 154.201.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20428 (0x4fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:40:47 2023 GMT
Not After : Nov 12 06:40:47 2024 GMT
Subject: CN=65531672-ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:27:d1:b0:fe:4e:93:c5:8a:03:a0:d7:bb:
39:9b:72:dc:8d:42:af:5e:4e:87:7c:c7:22:7b:6a:
96:07:13:f7:39:12:70:3e:c0:60:b0:3a:eb:96:8b:
f5:76:e9:b9:ec:e4:fa:7b:a6:3f:b9:08:6f:ad:43:
d5:b1:4f:79:c0:00:a2:88:97:df:0a:ba:e5:b2:cb:
f4:e8:b2:e8:49:9e:ca:b4:97:13:4f:12:e5:08:38:
c6:2e:5b:d0:ba:b0:07:85:6b:b9:29:07:42:e8:c5:
02:08:ee:a6:40:e5:e4:67:2c:0c:25:be:66:94:3c:
65:0c:33:53:91:ee:a7:97:1f:8f:09:9c:11:83:64:
c0:7d:82:ec:70:33:df:d6:16:22:f4:46:d1:38:aa:
b3:20:c1:97:33:d9:b3:22:02:af:33:53:22:51:95:
66:fb:59:16:e7:85:b3:c5:05:18:3d:6c:18:88:51:
4f:29:28:7c:60:d2:13:23:8e:61:b9:90:d1:9b:21:
0d:18:7b:c4:0a:11:d1:1b:5e:18:a9:7d:0c:71:01:
49:78:0a:22:25:58:ce:9e:10:cf:0d:5a:28:29:09:
ea:49:97:4c:c2:54:75:6f:be:ab:19:d4:ac:16:e2:
42:09:98:3d:b9:22:7f:a4:82:80:d7:ce:27:64:ae:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:45:08:7B:01:E5:02:A4:56:CE:26:8D:D7:1D:D0:04:59:1C:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFD7F86C82B811EE9A334E2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:23:10:2c:53:55:25:f5:be:34:6a:e7:6e:05:b6:00:15:02:
9b:04:e0:97:0e:b7:ed:26:06:b9:9e:20:3c:29:ff:9a:f4:03:
f0:0e:5c:0e:a0:f9:35:6d:86:c8:b1:17:ca:a7:a5:67:c0:38:
99:c6:f3:72:97:0f:9b:9e:e3:78:68:f9:91:3f:d1:b9:45:e1:
81:2f:b5:2b:d2:d2:45:c0:68:93:f9:5b:67:c4:2c:5a:5e:ea:
01:ad:29:4d:33:98:2e:39:83:62:73:7a:f6:22:fc:62:9a:64:
da:ae:3f:36:bd:22:16:1b:d4:c4:a0:7d:e1:02:64:6c:21:40:
73:b7:57:a2:71:94:1c:60:e2:07:e2:c2:ea:e4:fd:22:80:bf:
38:cc:da:21:3e:5a:a0:30:d9:c1:56:ff:91:07:b0:7c:d4:38:
85:91:13:7c:76:b1:8b:87:9a:49:42:4d:80:f1:f3:bd:30:59:
23:fc:e7:64:45:f8:b8:69:27:2b:7f:bc:39:b1:7c:05:55:89:
ea:b2:a4:4c:8c:9f:c1:3e:8a:c8:36:1a:89:ab:db:9c:79:84:
fc:6f:27:fc:eb:0b:2a:f2:c3:73:b1:44:59:a7:0b:aa:25:a0:
93:7d:b0:b5:1e:b6:25:cd:68:ff:c3:b3:b8:04:53:c7:84:44:
02:0d:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org