Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ED5F10277F11EEA33E59174AD9E6FC.roa
File: E8ED5F10277F11EEA33E59174AD9E6FC.roa (raw, json)
Hash identifier: B4oFUgkD7zbG4r6Ex1vrwSdFcK92y7aHxdv4zroaNJU=
Subject key identifier: C0:0F:95:AB:A0:87:B9:64:66:8C:46:50:7B:E8:4C:EA:66:CA:FB:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3383
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ED5F10277F11EEA33E59174AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:34:42 +0000
ROA not before: Fri 21 Jul 2023 04:34:38 +0000
ROA not after: Thu 13 Jun 2024 04:34:38 +0000
asID: 22773
IP address blocks: 154.84.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13187 (0x3383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:34:38 2023 GMT
Not After : Jun 13 04:34:38 2024 GMT
Subject: CN=64ba0ae2-29ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:30:5e:ee:8b:2f:98:57:85:33:bd:95:ae:
ea:98:fe:7a:bd:7a:0c:c7:9c:18:64:7f:de:2f:bb:
e8:b5:16:63:c4:fb:46:3e:0f:06:c4:02:38:40:59:
6b:dc:5c:a3:4a:33:e0:25:9a:f7:12:e9:42:54:dc:
c8:47:30:42:90:f5:b2:9b:65:2b:fa:db:65:9c:2b:
21:b1:c7:7e:3b:72:da:cc:73:17:09:41:7e:65:be:
3d:d9:13:36:a6:14:e0:fc:be:02:f2:0f:be:fa:32:
99:c2:8a:40:9b:8f:4d:4d:e0:60:f4:e4:a8:ac:33:
25:cb:7a:ac:26:9f:e3:f8:26:13:64:24:86:fa:70:
98:ee:33:0c:08:48:c5:9d:8e:8c:83:ab:02:38:96:
4c:2a:03:c6:a9:57:6e:5a:31:be:22:12:e1:85:fc:
3d:dd:c5:f1:25:21:de:2b:39:61:e4:08:c8:e8:9c:
5b:62:61:0b:79:60:ee:3f:86:f7:f8:da:ce:21:0e:
fd:fa:8b:c9:82:bb:03:05:b7:d1:b3:1e:bb:2a:85:
9a:7e:08:3a:7d:33:1e:0b:75:5a:16:71:ae:47:6b:
ae:36:f4:15:a1:7a:32:f5:0d:cc:0f:7f:b9:0a:36:
d6:69:53:66:dd:83:3a:a2:64:aa:aa:90:d4:79:d8:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:95:AB:A0:87:B9:64:66:8C:46:50:7B:E8:4C:EA:66:CA:FB:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8ED5F10277F11EEA33E59174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.172.0/23
Signature Algorithm: sha256WithRSAEncryption
54:8e:59:61:3c:bc:fa:ad:c2:9f:5e:d2:b0:d1:7c:0a:73:13:
0e:90:c8:df:1f:46:e4:9e:be:03:fb:76:1c:5d:5d:75:aa:fa:
bf:c6:b8:3d:ae:c6:e0:33:d8:99:f2:2d:d5:de:84:b4:31:3b:
a4:0e:71:0d:be:59:dd:03:0b:64:4a:30:0a:0d:7a:3e:11:2e:
7f:37:01:da:c5:e0:4b:eb:ff:98:88:9f:87:4d:96:5e:73:6b:
6e:32:cb:fc:9d:b1:b6:bb:24:e5:ab:01:5c:f2:57:e6:64:bf:
25:99:61:1b:eb:00:95:ef:d8:fe:e2:d2:f3:2b:d7:f7:87:c4:
bc:6d:b7:64:ac:67:6d:2e:6c:89:6a:10:67:c9:cb:f3:1f:02:
6e:7f:ae:c7:26:6b:5b:82:59:23:c4:62:3e:fd:8e:6b:ae:d2:
55:00:db:b6:4e:71:17:16:a6:1a:aa:8b:d4:ab:33:fd:e6:d5:
9f:aa:9f:ac:65:3f:3c:f5:41:08:14:b1:16:c5:63:26:67:e0:
90:31:97:61:44:f8:f5:02:78:c2:0a:4d:a6:e3:14:33:d1:ea:
8d:c2:61:4a:4d:c8:a7:99:df:60:d1:2f:48:af:a9:96:8a:23:
d7:97:4e:0e:ec:98:31:df:48:74:8b:de:44:95:43:a7:ef:6a:
c8:f4:d7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org