Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE04664A82B911EEA3F3D82E4AD9E6FC.roa
File: CE04664A82B911EEA3F3D82E4AD9E6FC.roa (raw, json)
Hash identifier: L8DtqAd31iio3F/jBPARatqBITn4lY5LbGUQIjYgh7k=
Subject key identifier: A6:B4:68:4D:37:09:A0:32:1F:D5:2D:72:6E:6C:F2:EA:90:7B:64:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE04664A82B911EEA3F3D82E4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:48:23 +0000
ROA not before: Tue 14 Nov 2023 06:48:20 +0000
ROA not after: Tue 12 Nov 2024 06:48:20 +0000
asID: 397630
IP address blocks: 154.202.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20438 (0x4fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:48:20 2023 GMT
Not After : Nov 12 06:48:20 2024 GMT
Subject: CN=65531837-d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:7f:fd:62:a9:cb:31:80:ab:f7:83:78:6b:
58:cd:14:44:f7:f3:f0:d0:48:fb:4d:55:4a:30:e7:
37:5f:8e:bd:da:64:81:a5:ed:ba:57:45:5c:1b:8c:
c9:11:2c:92:67:cc:60:0e:60:72:ce:2f:d5:40:c5:
83:ae:68:6f:d1:56:d7:e3:76:17:54:7f:59:fd:bc:
df:c6:1e:ed:63:ee:04:84:f4:39:9e:be:7c:79:42:
a5:93:13:03:fe:88:7d:c9:9c:68:87:b3:30:ee:ac:
8a:ee:f9:05:3a:f8:40:a5:7e:5e:5d:1c:1f:89:d2:
2c:55:3f:aa:6e:37:de:f4:7e:77:06:4f:5b:e0:4b:
f0:2b:e9:5f:8c:e0:ac:3f:6f:4d:49:d8:3c:b6:97:
15:bd:81:9c:bb:a0:2e:b5:e0:97:62:95:70:b3:a4:
96:4e:37:0f:4e:50:ac:c0:f3:4d:48:88:1e:e7:6c:
7c:ff:9f:a4:dc:4b:38:a7:f7:67:e4:bd:62:fa:6f:
8e:ff:52:be:35:43:dc:a0:28:36:b5:99:b2:75:a8:
aa:a4:9c:9f:51:fb:4c:b9:5f:d7:7d:74:f1:2d:bb:
6c:c2:f5:23:4d:6d:e9:25:16:a9:e2:fb:a6:b5:bc:
ff:d1:2b:1a:4f:58:52:76:1c:c2:41:ef:01:1f:74:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B4:68:4D:37:09:A0:32:1F:D5:2D:72:6E:6C:F2:EA:90:7B:64:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE04664A82B911EEA3F3D82E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.121.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f1:08:e0:b9:7a:12:5d:cd:22:6e:95:9c:cf:c4:93:9b:c8:
8c:91:44:a7:bd:40:23:e4:fd:cc:a6:42:64:fb:ac:94:65:45:
f9:54:29:c2:52:33:03:5a:7c:1a:ec:67:a9:6a:c1:66:2a:c6:
a8:c5:20:fa:ab:a7:15:8f:e5:10:10:b9:12:bd:95:89:48:91:
23:85:c8:f2:40:07:10:05:b3:45:72:f6:b5:16:4c:06:4b:89:
29:c3:7b:ea:cc:de:04:e4:fb:f8:5c:34:88:ae:5e:94:42:f2:
f0:0d:8e:cf:34:91:c3:fd:7c:b0:31:d2:f5:21:29:05:32:22:
f7:a3:4e:e7:22:23:d3:9d:34:8b:5b:eb:8c:e9:85:fe:6b:14:
ec:a2:43:bf:05:cc:b6:bc:15:70:de:77:1d:c7:5b:19:d0:b0:
9a:4d:6c:41:e5:a1:cd:18:5f:7f:1a:64:e6:1e:22:fb:d8:10:
83:4c:7f:2b:10:48:51:dc:e0:c7:f5:39:65:bc:45:25:83:ed:
8e:03:e1:fe:af:b5:7b:18:9c:39:69:a6:5d:67:a9:70:6f:ac:
fe:f6:78:cb:5f:dc:bb:06:4f:8f:eb:0a:98:4f:73:f6:cd:8c:
b6:18:fa:0f:b5:75:f5:af:55:bf:dc:4b:ae:4f:b6:ce:e8:ce:
d3:1f:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org