Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8380D147C5311EE81C7ED2D4AD9E6FC.roa
File: C8380D147C5311EE81C7ED2D4AD9E6FC.roa (raw, json)
Hash identifier: qkiTvs9UCZ+0TON6IywP8Tk6sijeFRJtbKwlR1GYjR0=
Subject key identifier: 44:7D:BD:CB:8C:88:00:50:CF:7B:3F:D0:5D:81:1C:B1:EF:CE:FE:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4BC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8380D147C5311EE81C7ED2D4AD9E6FC.roa
Signing time: Mon 06 Nov 2023 03:22:58 +0000
ROA not before: Mon 06 Nov 2023 03:22:55 +0000
ROA not after: Tue 05 Nov 2024 03:22:55 +0000
asID: 133448
IP address blocks: 154.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19393 (0x4bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 03:22:55 2023 GMT
Not After : Nov 5 03:22:55 2024 GMT
Subject: CN=65485c12-15f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:54:c3:08:98:1a:c0:87:71:06:ef:5d:cb:
ee:e9:8e:e4:f9:03:e0:a3:01:f9:4a:2a:6c:8c:fa:
70:4c:98:00:3b:d0:3d:db:11:35:ba:6e:b2:f8:6f:
bf:ca:a7:8e:b5:61:09:63:36:e5:63:eb:7c:37:4d:
6e:a6:8b:63:87:4a:af:c9:86:cb:77:44:47:31:ac:
d2:a7:bb:83:fd:1e:a0:0b:c0:c9:4f:fb:b8:3b:bf:
9c:a2:90:4b:be:e8:b8:f8:50:fe:37:24:e5:67:d5:
a9:4e:11:bd:a6:df:fb:e8:e6:99:df:31:c8:fd:f6:
ed:6f:73:17:a0:d8:20:33:57:15:2a:88:b2:46:f1:
07:88:e1:ab:bd:5b:cb:fc:d2:20:5f:72:35:c3:76:
33:00:67:39:00:6e:fb:ff:45:4b:df:de:3f:4d:e7:
39:17:c3:78:52:20:a3:71:90:7e:8d:4a:66:8a:a0:
bb:00:6b:32:c8:61:db:47:39:62:15:eb:a9:57:b6:
4c:ca:1e:7c:98:c5:f9:ae:42:be:42:91:53:96:c9:
6b:82:87:d1:a5:c6:bc:1a:6b:64:73:69:51:ac:bc:
a8:38:fd:c7:30:1e:6a:99:78:f2:60:05:09:96:19:
43:d7:89:b6:3d:16:ad:58:d8:a0:73:f5:01:76:41:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7D:BD:CB:8C:88:00:50:CF:7B:3F:D0:5D:81:1C:B1:EF:CE:FE:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8380D147C5311EE81C7ED2D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:70:43:1e:49:5f:9d:e7:4c:ef:76:a4:ed:72:74:9c:4c:31:
9d:1e:1d:dc:96:da:b8:f7:d8:a5:26:34:de:a9:db:11:b7:0c:
b4:82:78:b8:5d:5e:9c:e0:37:c2:12:e5:1e:76:9c:25:87:1f:
b2:ec:b7:2f:60:7d:30:ee:12:5f:32:fe:68:b0:ff:98:bf:fa:
23:95:35:ee:5d:3d:f9:09:78:2d:de:a4:0f:74:1d:e0:0c:6b:
db:b0:b7:81:9d:ce:8b:c4:b0:a5:ab:02:ce:f1:0b:1f:a8:7f:
b4:c5:a3:ad:b8:47:20:15:b6:10:8e:ea:51:43:12:88:f7:74:
b2:36:b8:da:5d:18:e6:39:9e:96:6d:a5:0d:e5:d0:82:aa:46:
f9:c8:1b:4a:53:f3:8a:45:99:01:30:a1:d9:07:75:ea:d5:ca:
51:17:78:05:e2:3d:c9:33:d8:42:5f:30:2b:b1:21:47:fd:a6:
6f:da:41:4f:42:33:76:1c:8c:3a:bc:56:21:69:2f:f0:90:b3:
3a:e5:6a:8d:e1:40:0d:37:99:0a:3c:0b:78:97:3b:2f:63:09:
e9:4b:f2:2a:e2:f5:46:b6:30:4d:e5:78:64:9f:a8:e6:ac:09:
da:d2:11:1b:88:c9:f1:f9:9e:4e:50:7f:65:ba:b3:74:46:bb:
b6:29:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org