Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29A9D9E417811EEB29D0E884AD9E6FC.roa
File: F29A9D9E417811EEB29D0E884AD9E6FC.roa (raw, json)
Hash identifier: CRxZs2VW3vxH4OgSi7dqCU23qgA6WMYqJJ2roKoK95Q=
Subject key identifier: 81:FB:CF:3D:B6:97:AD:17:E9:90:45:EB:EB:33:79:34:7A:93:A5:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3793
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29A9D9E417811EEB29D0E884AD9E6FC.roa
Signing time: Wed 23 Aug 2023 05:50:22 +0000
ROA not before: Wed 23 Aug 2023 05:50:18 +0000
ROA not after: Sat 24 Aug 2024 05:50:18 +0000
asID: 5065
IP address blocks: 154.86.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14227 (0x3793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 23 05:50:18 2023 GMT
Not After : Aug 24 05:50:18 2024 GMT
Subject: CN=64e59e1e-18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:29:61:01:0c:c5:73:1f:64:68:e8:11:d3:
ef:81:fd:e3:dd:06:ac:71:1b:16:39:5d:e8:1d:35:
15:ad:af:5e:9f:cd:17:ed:a2:c6:b0:f5:6f:de:b0:
6d:79:36:60:89:ca:72:01:60:42:91:e9:61:a6:b7:
13:ca:84:8c:de:06:37:5d:43:91:71:fc:62:a0:99:
c1:18:de:84:4e:3e:5c:cc:5e:f5:9c:26:b9:7d:92:
c7:28:9a:10:1b:ea:eb:df:41:4e:a4:d3:87:b4:02:
10:d5:31:be:4e:7a:9d:1e:cc:6e:9a:3f:93:20:71:
5b:e3:1a:f7:fb:3f:d9:37:4e:3b:f5:02:48:0f:90:
ec:b4:db:3e:5a:c9:c6:01:8e:e0:7e:79:65:a8:98:
57:d7:43:61:82:3d:b2:75:0d:61:6f:a1:fb:5e:53:
f1:67:41:ad:8c:56:79:f4:d8:b4:a8:91:75:31:6f:
4b:16:4d:5f:4e:d3:14:5e:36:81:d3:47:b2:db:e6:
bd:b3:22:dd:f3:71:0c:c5:45:d3:bc:7d:0b:20:6e:
6e:e0:79:21:6b:d6:c4:5a:01:de:77:d9:5e:d8:bb:
8d:a9:91:12:59:7b:86:1c:4c:1c:63:fe:7d:05:7f:
ca:8a:e1:c2:95:25:41:94:85:12:7e:f8:45:7d:34:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FB:CF:3D:B6:97:AD:17:E9:90:45:EB:EB:33:79:34:7A:93:A5:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F29A9D9E417811EEB29D0E884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
be:6c:5d:c1:46:d0:d3:ac:83:15:07:89:45:db:4f:4c:a8:71:
a9:6b:ca:fe:65:4d:58:cd:f9:5a:95:33:05:7d:5d:34:18:eb:
b0:8a:7a:38:7c:f5:9b:f5:d0:a9:ab:cc:8c:aa:ab:e4:5b:a6:
48:b7:cc:0e:c0:94:73:f7:ce:13:a2:b0:95:d6:0e:7e:5e:30:
c0:62:67:bc:f6:c4:63:be:ab:ed:fc:1d:01:aa:d9:cd:4f:0d:
79:a7:16:9e:fc:aa:ea:f1:6b:e7:66:92:34:7d:c8:ae:c1:d8:
f4:17:65:2e:2c:24:7a:7d:ca:d8:06:0d:9d:8f:d2:d0:56:e8:
9a:d0:4d:d8:7c:a6:85:9f:82:28:27:07:4f:bb:cd:6d:ca:ee:
dd:f0:17:23:06:7d:e2:66:ad:84:8e:40:bc:dc:cf:6d:5a:31:
75:59:57:4c:ff:e5:86:37:b3:28:60:09:38:29:ac:fe:4f:c2:
07:c9:72:2b:58:1b:3f:44:32:9f:35:60:17:af:19:ba:ec:9b:
be:43:e0:10:a0:db:b7:91:d3:f3:01:da:ac:d2:a8:47:08:66:
28:01:f6:63:be:46:9f:3a:b3:cc:ea:de:c2:ca:73:8c:2a:a3:
ee:43:85:f7:2f:11:ec:f0:9c:82:9b:e2:c5:0e:56:be:49:b2:
93:7e:10:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org