Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D1C99882BD11EEA5623E3B4AD9E6FC.roa
File: D2D1C99882BD11EEA5623E3B4AD9E6FC.roa (raw, json)
Hash identifier: xVgiaWIn3SzHZkq9pH+0ekHOTFWT20sICNns81aoUJI=
Subject key identifier: 67:0D:B9:2C:62:9E:61:EF:02:EF:73:85:62:BB:D3:DF:2F:10:18:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D1C99882BD11EEA5623E3B4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:17:09 +0000
ROA not before: Tue 14 Nov 2023 07:17:06 +0000
ROA not after: Tue 12 Nov 2024 07:17:06 +0000
asID: 397630
IP address blocks: 154.201.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20476 (0x4ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:17:06 2023 GMT
Not After : Nov 12 07:17:06 2024 GMT
Subject: CN=65531ef5-1f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:5b:75:ca:ee:48:b4:b7:c5:e2:43:fb:b7:
d4:b6:77:35:b2:67:b0:70:90:07:f2:2a:98:70:f7:
fc:45:f9:40:73:aa:fa:37:66:19:3f:90:dd:64:d2:
ca:a5:8e:90:a6:74:7d:e1:8d:0e:14:ab:fa:1a:ec:
d9:4a:35:5f:ac:2f:44:dc:3a:32:b1:61:47:0f:59:
f5:a6:a9:55:59:98:0f:fd:46:da:4f:34:14:cd:fc:
b6:b6:e2:45:f1:26:c7:f6:90:ef:16:37:f0:9b:c5:
2d:3b:10:3e:04:82:d1:4a:be:b9:f8:17:c5:f3:e4:
d3:21:25:23:3b:72:95:ea:ef:eb:e8:76:2e:d1:2a:
bf:89:06:49:25:ae:8e:90:0a:67:98:6e:e9:06:d2:
15:c3:3b:49:22:02:35:89:4b:47:a8:7e:2e:73:ed:
5f:8f:42:86:53:f3:52:09:b3:45:a2:26:79:6c:be:
22:eb:ec:27:b5:bf:9f:d0:d7:bb:9f:9d:0a:16:d7:
c1:2f:d6:a9:f5:2c:b2:fc:79:5b:dc:79:d5:a6:5f:
f2:6e:24:fa:21:cf:8a:35:12:4f:f4:e9:61:8c:9a:
61:df:43:df:d5:d2:27:bc:c5:8f:53:07:26:79:29:
9c:0d:a9:c9:4b:c5:24:ca:4f:85:19:ed:7c:f2:6d:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:B9:2C:62:9E:61:EF:02:EF:73:85:62:BB:D3:DF:2F:10:18:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2D1C99882BD11EEA5623E3B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:91:f0:d9:f4:98:69:8d:a7:11:a8:c3:74:70:f0:69:e7:6d:
07:db:a2:d9:e5:b0:d9:34:60:bb:a3:dc:50:f0:af:b9:e8:99:
59:5b:a1:5d:a4:be:94:21:ba:82:9c:5a:47:b1:96:d9:b7:f3:
c8:8c:ac:27:6b:a5:06:fa:c3:f3:c2:00:9e:15:54:68:c8:f0:
7a:55:31:46:1b:99:68:72:f9:a9:22:14:d8:e4:23:65:8d:bf:
db:71:59:1e:31:6b:4a:67:7a:2f:cb:1f:7e:e5:f6:81:9c:fb:
b0:50:c5:78:1a:19:6a:3c:9c:3b:01:bb:8c:e2:99:13:cf:c5:
9b:1a:d3:58:34:aa:25:3b:d8:d9:9d:8a:ce:e4:4a:08:f9:56:
7b:d3:49:9b:e1:50:32:54:2e:29:09:96:64:e4:a3:7b:40:09:
1b:2a:2f:06:40:0f:c0:ce:5a:91:21:9c:38:ec:f9:88:0b:3b:
38:d5:e5:96:e7:ee:92:de:9b:36:fd:fc:4d:b5:2e:73:a2:39:
13:b7:40:dd:a5:d0:2c:e7:6b:6c:d3:69:cb:10:54:c1:2d:90:
0d:3d:d7:e9:9b:c5:d1:92:11:0e:82:2a:00:d6:25:22:0f:93:
7b:09:5a:4d:37:8b:a3:15:af:e5:35:7e:0a:62:4b:17:13:03:
b6:f3:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org