Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7384F28060F11EFB8C95852017001B1.roa
File: C7384F28060F11EFB8C95852017001B1.roa (raw, json)
Hash identifier: 79FSG8pNrqjk29Ve8gCX6l7LWqcxzuZDqWOy/aqlTZw=
Subject key identifier: E9:40:9F:E2:FB:14:55:42:21:BE:6B:BC:C2:CD:80:DB:0C:CF:1D:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B220
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7384F28060F11EFB8C95852017001B1.roa
Signing time: Mon 29 Apr 2024 10:03:51 +0000
ROA not before: Mon 29 Apr 2024 10:03:48 +0000
ROA not after: Fri 07 Jun 2024 10:03:48 +0000
asID: 138915
IP address blocks: 154.223.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45600 (0xb220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:03:48 2024 GMT
Not After : Jun 7 10:03:48 2024 GMT
Subject: CN=662f7087-51bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:71:b8:63:6a:c7:51:12:fb:13:cc:ae:15:
48:6e:2c:92:70:1b:a0:9b:5d:40:dd:40:0d:da:53:
01:ff:f9:24:bb:17:9a:52:1e:b9:c1:58:3c:3a:ef:
a4:86:d5:3b:49:d3:71:7d:10:12:7b:a7:6d:0e:c6:
a6:08:e6:bd:fa:b8:01:1c:54:a2:9d:03:a0:15:8a:
f8:da:43:4e:ed:ef:52:94:89:b0:18:20:b7:22:83:
e2:b3:fa:32:af:1d:02:b6:57:7c:56:2a:ff:64:82:
57:be:cc:56:cd:7d:50:7a:ed:46:fd:79:54:37:2b:
7a:ef:cf:9a:db:0b:d6:be:94:85:e6:e1:9b:e1:2d:
c7:a0:be:f2:10:2c:7e:95:19:30:fe:2e:49:3f:a5:
c8:fc:4c:b9:70:af:2a:59:03:48:0c:b7:f9:81:bd:
aa:5c:8e:45:50:b6:33:18:e2:76:e0:a9:0e:f2:ba:
bc:dc:8a:cf:1f:a0:b4:56:b6:f1:41:81:02:08:68:
07:5e:33:e5:3b:7d:db:8b:5c:89:6b:79:71:30:1d:
53:58:97:87:9c:ca:89:fa:c9:90:f2:6d:47:fc:74:
5a:75:80:77:09:9a:59:36:af:32:0f:2c:c0:cd:92:
73:c6:23:46:5e:c0:9b:29:bb:90:d8:8c:0e:70:12:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:9F:E2:FB:14:55:42:21:BE:6B:BC:C2:CD:80:DB:0C:CF:1D:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7384F28060F11EFB8C95852017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:60:b9:c7:e6:15:9a:fb:e7:33:2a:12:68:2e:01:c3:4e:9a:
9d:78:79:83:b2:84:18:30:cc:47:58:af:9d:7c:90:22:d9:d6:
d7:fd:b0:aa:a8:05:09:d7:83:ae:5d:9e:e1:f8:c8:4d:4e:5b:
9d:1f:52:53:15:ee:55:83:5b:48:07:17:02:4e:d8:65:bc:ad:
bb:36:d2:7a:4f:04:82:c7:a1:c1:fa:c3:bd:a6:ae:1f:60:72:
ff:4d:21:10:f3:45:b6:ca:ad:d1:b1:84:37:ff:bd:0e:7a:a7:
a2:39:81:58:cb:7a:44:64:78:3a:15:c2:f2:54:5f:75:0d:53:
24:7d:47:b8:f1:e5:ef:d3:50:d7:2e:12:79:4b:67:49:31:bc:
80:3f:bc:36:88:93:48:e1:08:0c:6b:68:2f:50:e1:73:dd:d0:
d7:35:35:73:13:8e:41:76:5e:90:b9:3d:f5:3f:b6:f3:8e:a0:
af:4f:22:46:1c:21:cf:69:b3:ac:35:98:3a:1a:30:47:33:60:
e1:5e:12:60:61:6d:29:9c:ea:39:ae:1c:26:a8:4b:c4:8f:a8:
d5:a1:b2:4d:53:da:10:d1:5b:c1:68:ad:f9:61:fe:07:08:6f:
a4:e9:f2:06:35:09:a2:da:42:f2:a8:c6:dc:11:f6:64:1f:55:
b9:a9:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:49 2024 by rpki-client on console-ams.rpki-client.org