Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6BA465E1711EE8CD949484AD9E6FC.roa
File: D4F6BA465E1711EE8CD949484AD9E6FC.roa (raw, json)
Hash identifier: 8bjVBkRYRptffKvq8EmEOvdNG4iZwlEb7525HTP8QTc=
Subject key identifier: 8E:14:D7:F4:60:7D:2B:3A:7A:45:BC:36:FD:3C:B8:A6:87:A5:B7:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4377
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6BA465E1711EE8CD949484AD9E6FC.roa
Signing time: Thu 28 Sep 2023 15:58:14 +0000
ROA not before: Thu 28 Sep 2023 15:58:11 +0000
ROA not after: Wed 21 Aug 2024 15:58:11 +0000
asID: 211392
IP address blocks: 154.219.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17271 (0x4377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 15:58:11 2023 GMT
Not After : Aug 21 15:58:11 2024 GMT
Subject: CN=6515a296-8a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:52:84:0c:53:74:ed:c3:8c:b7:91:fe:d4:
70:24:98:99:84:9c:58:41:5d:47:f1:59:8c:a5:dc:
dd:04:02:d4:12:7c:1b:e0:37:59:4b:d4:6c:09:a1:
d2:d6:d5:5a:0e:d2:72:93:00:d0:07:f1:25:05:f4:
e6:2f:44:b0:6c:1b:9d:29:70:41:ef:2d:d3:ef:b3:
8f:73:1a:43:b6:ca:43:ea:f2:59:f4:fc:d6:70:95:
4e:d1:d8:c2:37:e5:35:24:cb:4c:10:ae:d7:59:39:
7d:c9:b6:ab:a4:d0:bd:7b:6e:9c:ae:44:75:fb:3c:
09:89:3f:17:2d:5d:33:71:b2:d3:4f:79:5c:c3:56:
4f:51:e4:e5:9c:02:53:31:c6:a2:1b:ba:54:0d:01:
d5:ac:42:c9:3b:17:90:41:bf:74:32:fd:25:f6:b8:
2a:9f:f8:1a:9d:37:16:2a:e7:fc:4c:a2:ab:dd:aa:
e7:d8:2f:85:5e:ff:78:e2:0e:df:ab:6a:f4:d9:fe:
49:77:7f:b6:7c:77:c4:04:f6:e0:d4:9a:3b:79:08:
9d:22:ce:25:e6:1b:7a:0c:ff:65:e8:e0:6a:ff:d0:
fb:0a:42:34:f3:ed:55:ca:65:9e:2e:b8:88:16:91:
85:d6:97:f4:18:88:54:63:b9:7c:a2:8f:d0:68:ba:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:D7:F4:60:7D:2B:3A:7A:45:BC:36:FD:3C:B8:A6:87:A5:B7:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F6BA465E1711EE8CD949484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a0:f9:50:bc:95:69:99:d1:56:e8:49:61:b3:66:33:15:6b:
f3:34:20:ff:d7:1f:c3:28:f8:0b:45:da:5c:3b:08:bc:d2:16:
c7:8a:6a:6f:c5:82:5e:98:74:7c:5a:7f:67:a7:12:6e:d3:52:
4a:0b:77:4b:3a:89:75:d4:1a:d0:f5:4c:ab:05:57:49:f1:f0:
a0:d3:8e:42:57:eb:47:8c:12:1d:3e:de:16:25:33:0b:27:ba:
4c:24:29:90:ae:00:22:ed:d2:30:e7:a5:b7:ea:2b:b0:bc:74:
db:34:ab:da:0d:ba:45:9a:01:f7:16:f7:f9:ed:4b:22:f2:80:
3b:f5:3c:29:90:61:f4:9d:f5:1e:25:b0:91:4b:95:8a:8f:89:
72:13:12:83:39:5d:62:53:51:d7:b3:42:8e:58:04:db:c2:30:
94:3e:29:70:92:82:7b:00:82:c2:b1:df:90:80:b9:c2:c6:cb:
c4:2e:b5:e2:b2:9f:44:0a:9d:07:2d:3d:d2:69:9a:7a:7b:b7:
eb:22:5a:04:20:f4:87:6f:7a:46:8f:23:a9:7a:de:5b:34:6f:
09:1e:ec:81:07:47:15:08:53:21:84:cb:35:f8:0e:43:94:55:
58:dd:0c:1d:ad:4b:42:2d:b7:4a:f5:f6:ea:44:5a:0a:fc:aa:
6a:fc:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org