Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE891B5A277F11EEA1BA0A174AD9E6FC.roa
File: CE891B5A277F11EEA1BA0A174AD9E6FC.roa (raw, json)
Hash identifier: M8wFjYAs8RbY1zhJJaQ/2uz4+l1WQWzk65vCj9c3k8Y=
Subject key identifier: 79:63:96:8B:82:22:8B:D1:B8:A8:04:C6:C2:13:85:3F:7F:F2:D2:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3381
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE891B5A277F11EEA1BA0A174AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:33:57 +0000
ROA not before: Fri 21 Jul 2023 04:33:54 +0000
ROA not after: Thu 13 Jun 2024 04:33:54 +0000
asID: 7018
IP address blocks: 154.214.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13185 (0x3381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:33:54 2023 GMT
Not After : Jun 13 04:33:54 2024 GMT
Subject: CN=64ba0ab5-d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:93:e8:34:79:28:41:1b:c0:86:66:a2:21:
18:7d:b1:f0:bc:e5:e6:5e:ef:47:f0:88:fe:22:c3:
48:dd:35:8a:ff:bd:9e:d2:7d:24:f3:e4:5e:e1:5a:
72:a1:14:01:bc:e0:07:9c:17:59:89:48:00:d3:e5:
1a:6b:c7:47:6c:a4:06:48:92:e8:fc:81:06:67:a4:
f6:01:b6:2b:ec:65:0a:b1:58:70:74:4a:2e:c2:77:
61:df:bd:b9:49:af:c0:4e:f1:7c:cc:29:06:36:32:
a0:be:26:8a:56:47:cf:88:e1:b3:2c:d5:f5:70:a8:
d4:2b:b9:3c:45:92:bf:31:c7:cc:2e:e5:fb:33:66:
a3:33:26:14:bc:cc:8e:e3:51:c8:80:48:ac:44:c3:
b8:ee:59:1e:3f:dd:73:37:4e:60:43:b0:a0:6b:05:
64:13:5e:41:3e:8f:6e:41:ac:30:a7:88:46:30:e4:
62:22:53:eb:b0:6a:08:7a:dd:97:4a:7a:27:b6:f8:
de:45:55:85:e1:b8:f6:a1:7b:9a:63:39:18:a5:e7:
07:ff:ba:d6:3a:a3:0d:38:2a:cc:81:3e:f7:1a:b6:
6b:77:47:9e:34:00:42:f5:4b:6c:83:ac:7e:40:c6:
62:56:4e:51:63:5e:90:0c:de:54:89:d4:13:f3:9d:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:96:8B:82:22:8B:D1:B8:A8:04:C6:C2:13:85:3F:7F:F2:D2:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE891B5A277F11EEA1BA0A174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.16.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:e0:c2:2b:fb:2f:a2:1a:c2:b1:49:9f:03:ea:8d:24:ee:4d:
54:b5:65:05:0a:96:4e:c4:de:3c:44:ac:ca:08:99:fb:34:81:
78:7c:12:89:7f:e4:b0:93:e3:0e:cb:bd:ab:68:b6:22:3a:20:
fb:ba:54:78:80:61:07:8f:94:4d:8e:6b:a0:32:9c:47:a1:db:
61:e3:ae:df:49:80:19:1d:a9:b7:2f:f5:26:a1:79:53:cc:74:
17:ad:5a:42:24:ad:b3:a9:9a:44:10:1e:6e:9b:b8:5a:43:cb:
76:cc:7f:01:dc:4d:54:ab:07:20:96:c0:08:8d:53:cb:0e:1d:
8f:95:ee:d8:58:bb:c8:9b:2b:14:dc:9b:56:b6:81:d5:c4:3e:
15:73:3a:0b:c8:f3:ee:0f:f4:52:74:a6:c1:53:53:6f:6c:24:
07:2d:b8:c0:7d:7a:99:4a:1e:57:6a:1e:7c:6c:7d:99:60:38:
01:a6:e1:8f:52:a5:9c:15:ef:dd:45:1b:d8:91:1a:54:4f:c9:
fa:9c:62:ce:3a:07:6b:70:af:0a:b3:dc:06:62:82:a2:a0:ea:
82:c2:19:ff:78:07:60:44:9b:a5:72:3d:6f:e6:35:44:bc:4a:
b7:7c:4f:da:92:c4:af:da:68:1f:ec:76:a4:c8:0e:41:df:37:
ee:21:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org