Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4401867EB811EE9D1DF0594AD9E6FC.roa
File: CB4401867EB811EE9D1DF0594AD9E6FC.roa (raw, json)
Hash identifier: Rxg0Rgi8bVQ5GzqnWKKhwwFW/P6s7pGOkCJpMEqE9Ac=
Subject key identifier: 09:E1:EC:69:C5:3E:FA:BA:41:5C:CE:27:7E:C4:BA:CA:1D:77:0A:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4401867EB811EE9D1DF0594AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:31:05 +0000
ROA not before: Thu 09 Nov 2023 04:31:01 +0000
ROA not after: Thu 08 Aug 2024 04:31:01 +0000
asID: 133861
IP address blocks: 154.204.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19895 (0x4db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:31:01 2023 GMT
Not After : Aug 8 04:31:01 2024 GMT
Subject: CN=654c6088-35e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:b8:92:7b:a7:53:5a:25:9b:c2:c3:ae:0f:
11:38:bf:89:e4:3a:7e:ef:1d:2b:00:e1:0d:48:58:
62:ea:0d:17:a1:1c:33:bb:5e:35:85:a9:1f:8b:e2:
cc:99:0d:15:87:c4:7e:58:90:9e:9a:4e:a6:f8:5f:
79:14:1f:69:b3:f4:f5:8e:34:bd:b3:ab:25:7d:e0:
bb:92:28:3e:28:3d:2a:b3:f5:8c:f4:d9:de:f1:de:
10:80:8b:89:da:91:82:fc:52:e2:9c:c1:14:be:b9:
4b:e8:1d:a2:3b:31:12:b6:b0:eb:5b:5c:ff:1a:07:
6d:79:11:9b:27:71:b9:4b:d7:ce:0a:a2:4b:9b:c4:
81:3c:c6:0a:8d:c8:7c:f3:81:48:ea:05:c4:31:9a:
6d:9c:ec:74:e5:06:3e:39:1b:d3:7a:26:a3:0c:3c:
e0:29:2b:e7:0f:97:b0:bc:24:8a:22:46:56:37:c3:
21:7e:ec:37:9b:87:02:27:cd:81:38:ea:9f:e7:e9:
5e:24:44:c3:dd:f9:52:7c:b1:9c:c3:7d:8b:42:bd:
0b:6c:b3:b0:4c:23:68:05:d9:52:69:8b:ec:f7:59:
ac:64:d2:93:f5:5b:75:e3:5c:19:c5:df:56:80:55:
11:ea:85:83:19:15:03:f4:7a:94:a8:09:15:1e:4c:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:EC:69:C5:3E:FA:BA:41:5C:CE:27:7E:C4:BA:CA:1D:77:0A:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4401867EB811EE9D1DF0594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.43.0/24
Signature Algorithm: sha256WithRSAEncryption
50:90:43:0c:fa:a2:9a:16:13:25:38:6b:a1:51:33:b3:f9:bc:
99:75:cb:3b:46:ee:0b:c5:c2:ad:17:ec:cc:da:76:8e:7d:bb:
97:4d:f9:c6:73:1b:2a:3d:6b:00:66:e4:ef:16:ee:69:9d:79:
0f:65:a6:44:50:54:22:5f:2c:63:c1:72:f4:84:a8:f4:a9:84:
4b:20:0d:63:cd:88:38:29:92:b5:1f:e5:35:bd:fc:f9:4c:84:
01:54:61:a2:8c:ba:35:17:6e:e8:aa:ad:8c:02:1b:57:e5:f4:
c7:9e:27:f5:af:35:6f:b9:04:ea:07:fc:f2:01:58:33:0c:d5:
cd:ac:8f:40:ee:0d:d3:f3:2d:ce:e4:12:93:e4:23:31:7d:81:
cd:84:de:6d:e4:40:2a:6f:6b:ec:49:15:8a:19:f0:01:9f:ba:
c9:ae:fd:69:39:aa:74:60:e0:25:cc:d4:93:95:e3:46:39:6e:
39:79:3d:53:95:6f:b0:5c:79:64:ae:7c:4b:5e:4b:95:32:2e:
0e:f3:3c:33:6f:4c:50:2a:27:f8:ff:3d:c7:50:be:e9:b8:82:
2d:51:e7:6d:58:81:36:0b:dd:43:82:2d:7a:40:d9:4b:d9:59:
69:dd:0f:0f:20:48:50:bb:10:c2:e9:0d:25:d8:04:b3:b8:5b:
8d:0b:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org