Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC4AAF81A3A11EEAC144B124AD9E6FC.roa
File: DFC4AAF81A3A11EEAC144B124AD9E6FC.roa (raw, json)
Hash identifier: FW4a9aGdvb+LTq0C+F8PqUOXa0jDoDDyRqd+vWLxsxU=
Subject key identifier: 46:66:F7:C1:6A:0C:B4:D0:31:D5:36:A7:57:E3:98:6C:B1:01:35:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 300D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC4AAF81A3A11EEAC144B124AD9E6FC.roa
Signing time: Tue 04 Jul 2023 07:17:46 +0000
ROA not before: Tue 04 Jul 2023 07:17:43 +0000
ROA not after: Sun 02 Jun 2024 07:17:43 +0000
asID: 137263
IP address blocks: 154.86.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12301 (0x300d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 07:17:43 2023 GMT
Not After : Jun 2 07:17:43 2024 GMT
Subject: CN=64a3c79a-f152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:9a:0a:90:dd:dc:32:51:3b:98:6e:03:7e:
82:a2:f8:3d:15:6e:cc:c7:eb:98:d8:c0:74:29:3f:
d8:1a:58:e0:23:02:f0:2c:2b:03:a3:2c:a1:b2:c7:
be:87:b0:1b:36:97:1e:26:a8:75:61:8a:c7:eb:fa:
22:2d:dc:ee:2b:0b:fc:58:65:8c:8d:ab:f4:17:f8:
74:b8:4a:9a:63:1a:2e:91:7c:a2:63:fe:ee:4f:e9:
85:11:23:1e:e1:e2:be:d1:3d:b7:ec:fa:41:a7:c2:
03:53:22:9a:e8:f8:e6:d3:33:10:6c:30:29:9f:21:
b9:90:7e:a6:8e:5c:aa:a6:19:6b:dc:60:54:54:65:
01:bd:63:30:80:bf:db:5d:f3:d6:62:c6:f0:73:e5:
45:b8:17:28:b1:a0:68:eb:91:e5:c8:80:07:4b:f8:
ec:4a:de:a5:ba:da:9f:1f:8c:2e:4a:96:42:e0:7d:
d0:da:90:79:1c:32:14:53:cd:fe:dd:11:00:96:0d:
7d:99:fe:38:50:ff:7d:fe:4f:7e:97:3b:ac:9b:31:
6f:c8:3f:98:28:32:3d:ff:65:27:10:0b:41:98:38:
0f:7b:02:7b:2c:aa:69:1a:d2:c8:dc:a9:c9:8d:33:
9e:1c:2c:18:01:f2:ad:c3:97:3b:6c:3e:7f:66:89:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:F7:C1:6A:0C:B4:D0:31:D5:36:A7:57:E3:98:6C:B1:01:35:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC4AAF81A3A11EEAC144B124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.5.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:3b:82:36:30:ef:95:f7:80:38:e3:d6:43:66:50:a0:c4:c8:
15:6a:bc:4e:00:d7:1a:09:c2:32:bc:c4:9b:02:00:d8:ae:c9:
b8:c7:37:d3:20:74:68:81:bf:26:05:0e:69:c0:d6:5c:49:63:
7f:ee:f6:fd:50:53:d1:59:5c:0d:97:69:56:d5:74:4f:18:57:
b4:9a:92:7b:dc:4f:a4:98:ee:b9:66:97:4e:55:64:67:10:7d:
cf:7e:90:ff:ab:8d:7c:57:1e:19:6d:29:32:ab:80:e8:f1:b2:
b8:3f:49:72:da:31:e7:5d:f3:ee:75:93:29:94:e2:6d:cc:14:
88:aa:d1:3d:5d:c6:fb:32:e7:16:0c:a1:ba:59:93:fd:99:3f:
45:40:ed:27:29:24:da:94:50:d9:46:87:4c:85:fa:ab:4e:cf:
a8:d4:8c:1a:4e:bf:97:f7:13:c7:31:66:72:1c:70:81:5c:24:
12:43:92:71:36:20:df:f2:1e:3b:96:93:f2:e7:ff:c9:1e:a5:
7a:e9:90:3b:10:74:18:59:e9:15:76:25:b2:32:d9:cb:76:b2:
bf:f5:c1:1a:44:ad:ab:90:f9:dd:08:93:93:c8:9b:78:ba:7b:
7e:45:8e:8c:01:f4:ea:9a:7b:e0:5a:b5:e6:87:bb:2e:ef:02:
88:88:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org