Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EF2D8CA62E11EEA50FE69D775412E6.roa
File: C3EF2D8CA62E11EEA50FE69D775412E6.roa (raw, json)
Hash identifier: AJObOYaB+IcE8Q22LW7O1P7uFID/68KXMXDrN8GRQdk=
Subject key identifier: 05:F6:4F:04:02:BA:9C:1A:5E:F5:26:DE:D8:A4:74:0B:46:7E:49:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6A20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EF2D8CA62E11EEA50FE69D775412E6.roa
Signing time: Fri 29 Dec 2023 09:43:48 +0000
ROA not before: Fri 29 Dec 2023 09:43:45 +0000
ROA not after: Mon 04 Nov 2024 09:43:45 +0000
asID: 5065
IP address blocks: 154.86.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27168 (0x6a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 09:43:45 2023 GMT
Not After : Nov 4 09:43:45 2024 GMT
Subject: CN=658e94d4-671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:41:d5:55:e2:54:64:cc:01:80:ad:9e:e1:
f1:de:31:0a:b8:54:8f:d9:5b:b4:54:7d:29:8c:ff:
b1:8d:5f:09:71:60:01:7a:92:be:df:ca:cc:82:26:
08:02:0a:44:f1:e9:a5:56:b2:7a:15:00:07:f0:d6:
61:0d:28:9d:37:e2:da:29:be:d5:f2:04:3b:14:fd:
ef:66:5c:a5:e8:00:c2:c8:05:dd:b7:a7:b7:76:7c:
6c:f2:89:1d:39:b7:b6:fc:8d:76:e7:3e:84:b6:03:
12:91:bd:b1:06:05:7e:12:b9:99:01:3f:79:70:cb:
67:9f:ac:f6:b2:60:af:52:cc:65:4a:96:fa:0a:48:
59:29:71:98:1a:49:fd:d1:28:9f:5c:cd:65:bd:b2:
7b:41:74:f4:97:bf:33:b8:3b:c9:1e:4b:67:22:f6:
d3:e7:87:b2:52:1e:23:20:7c:24:d9:14:6b:8d:34:
f6:60:1a:11:07:0d:f2:6d:8d:f4:7b:35:a6:22:b8:
02:4e:bb:92:a2:a7:1e:0e:ba:c1:5a:14:be:ca:b0:
06:dd:ee:53:ff:db:2b:69:60:24:f2:91:3a:32:40:
53:1b:76:cc:5f:c9:9d:b6:7a:80:79:b6:d5:18:ba:
9e:60:e0:23:a4:da:9c:39:4a:1b:6f:6f:49:d5:17:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:4F:04:02:BA:9C:1A:5E:F5:26:DE:D8:A4:74:0B:46:7E:49:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3EF2D8CA62E11EEA50FE69D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.9.0/24
Signature Algorithm: sha256WithRSAEncryption
90:03:99:93:b3:b0:ec:1d:50:cd:47:2e:40:7b:3d:4f:6c:f8:
3e:55:70:77:04:b1:de:b6:b1:15:4a:31:35:a8:45:43:76:cf:
96:61:e6:77:f1:5b:7d:1b:0e:87:55:fa:71:e4:e9:5c:7a:5c:
93:e5:57:4a:ba:97:54:94:fa:91:97:cc:fd:aa:1f:c6:59:38:
b7:ab:c3:e4:92:72:2b:f1:20:ed:63:88:01:89:15:b2:70:e8:
fc:58:6b:d4:7f:17:5a:60:65:11:88:05:18:72:a0:0a:6f:ab:
aa:34:c6:64:78:9e:c2:78:ad:40:97:bc:41:d7:26:8f:69:8c:
53:4c:0e:82:c3:e3:53:eb:58:27:f6:e5:a9:20:6f:43:07:1b:
60:a8:fa:f9:dd:26:67:d3:39:4e:c0:27:fa:ae:d8:ad:c9:bf:
df:d3:fd:c9:6a:8b:cb:77:07:fc:91:e1:74:32:8b:ac:cd:17:
f7:70:72:7e:96:cb:f6:65:10:84:bc:2b:e4:70:ac:05:5d:f1:
16:55:b9:d6:bd:d3:e1:65:e0:10:7b:b4:ff:c8:ac:9b:b0:65:
dc:64:bf:1b:1c:5a:f1:ec:74:23:76:3d:10:e4:53:15:6b:c0:
08:ca:a9:e8:e7:e5:af:15:73:99:06:23:5a:c4:50:33:76:bc:
47:79:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org