Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0033AE009B911EEAF76C87E4AD9E6FC.roa
File: C0033AE009B911EEAF76C87E4AD9E6FC.roa (raw, json)
Hash identifier: 4KeWSH61jpq53e6vW+toxqFUwChXYCAoa53saryrMZs=
Subject key identifier: 47:A8:92:CC:3A:F2:1A:48:AC:4B:20:52:A1:9E:43:DE:51:27:BF:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2B7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0033AE009B911EEAF76C87E4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:13:09 +0000
ROA not before: Tue 13 Jun 2023 07:13:05 +0000
ROA not after: Sat 15 Jun 2024 07:13:05 +0000
asID: 134687
IP address blocks: 154.197.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11135 (0x2b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 07:13:05 2023 GMT
Not After : Jun 15 07:13:05 2024 GMT
Subject: CN=64881705-765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:27:a9:b9:ad:0b:f4:8c:c1:d3:61:72:e3:
0e:56:4a:ce:81:22:67:1a:60:6e:52:3e:74:e5:fa:
68:38:26:7f:25:b7:3c:08:4f:03:f9:5d:ed:5f:18:
d7:9f:72:f6:21:e2:f2:2d:68:91:27:36:a2:5b:ff:
54:6b:2b:90:a4:8f:84:63:a5:b4:35:68:8a:a3:f4:
24:fd:97:33:81:57:35:37:b1:95:89:97:e6:c7:44:
d9:c8:cf:b8:92:1c:e4:c6:07:32:1d:10:1e:88:d0:
e6:ae:a0:9c:d4:c5:ee:16:6a:0b:f3:8b:cc:42:49:
7f:13:f0:35:c8:70:15:5e:9e:54:86:ef:9e:92:aa:
ac:5b:0d:42:84:ba:67:ae:de:b6:95:a7:66:c2:1f:
af:eb:85:e7:74:3e:cc:e0:d9:0d:fe:91:2f:4b:49:
0c:a4:80:3e:93:41:c4:96:35:63:b5:19:a0:ef:bb:
83:cd:d5:5c:48:05:36:81:42:74:63:57:c8:cf:a1:
7e:0d:ec:87:5e:e0:95:f2:bb:bf:bc:5c:84:a0:26:
08:a3:14:64:83:ed:eb:e5:db:69:5d:41:3f:51:62:
c7:4c:98:51:2a:be:44:b4:ec:74:fc:37:53:b4:24:
e2:e5:bd:b4:9b:f9:e2:21:57:5e:3e:67:ae:ca:d2:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:92:CC:3A:F2:1A:48:AC:4B:20:52:A1:9E:43:DE:51:27:BF:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0033AE009B911EEAF76C87E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:18:d6:f8:be:5a:8d:81:e5:d3:61:52:b0:3b:e5:6b:4c:30:
25:f5:25:61:ed:2e:08:8e:5a:78:07:b5:5d:33:53:34:7e:42:
dc:64:ba:c2:1a:69:a8:4a:f0:72:43:2c:ad:1e:b8:a6:1e:a1:
2e:91:ab:21:48:63:3b:12:82:b7:19:6a:11:7b:ba:61:43:2e:
af:d7:62:72:77:ec:ce:c3:69:4d:2c:f8:84:3d:b8:9f:07:07:
f8:52:c0:72:8d:cb:60:f0:1d:4b:50:86:77:82:b7:4b:c1:bd:
58:10:28:8a:c7:f4:99:a5:f9:a1:1f:72:ea:d9:37:0d:97:f1:
8f:de:7a:8f:9b:ce:8e:1f:d3:01:7e:81:c9:8b:05:be:ee:ac:
b9:10:ea:fb:14:4e:10:95:5f:69:e0:c5:49:f4:bd:38:21:8c:
59:df:e6:0f:f4:f7:de:77:55:75:a1:00:22:4e:95:bb:38:27:
15:af:e8:6f:5c:b3:eb:12:b8:d8:83:da:47:1d:72:82:3f:25:
1b:3a:c4:8b:c5:f3:72:93:98:73:b2:64:ef:38:8c:99:59:ee:
f4:66:29:21:64:a5:d8:b7:34:a7:e8:be:ff:d6:d7:40:e8:8f:
32:62:77:40:85:a2:52:37:11:f7:60:bc:be:39:4a:bb:5e:82:
9a:0e:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org