Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49AACF8506711EEACB518204AD9E6FC.roa
File: F49AACF8506711EEACB518204AD9E6FC.roa (raw, json)
Hash identifier: yzk6Ty1AmTdMbSnXdnOW2GUWUPnzruguDTtqAhopdMk=
Subject key identifier: E5:76:54:9B:C6:B8:71:11:BA:CB:31:E6:F8:8F:F3:83:B5:F4:8E:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3CDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49AACF8506711EEACB518204AD9E6FC.roa
Signing time: Mon 11 Sep 2023 05:56:31 +0000
ROA not before: Mon 11 Sep 2023 05:56:28 +0000
ROA not after: Fri 30 Aug 2024 05:56:28 +0000
asID: 212552
IP address blocks: 154.91.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15580 (0x3cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 11 05:56:28 2023 GMT
Not After : Aug 30 05:56:28 2024 GMT
Subject: CN=64feac0f-f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:d5:29:33:fe:8c:d4:2a:79:54:e9:31:d2:
b9:36:8a:b0:a9:01:d4:0c:df:bd:76:5d:a0:c7:8b:
66:b5:b1:c2:7d:2f:13:1c:5d:2d:04:b3:9a:40:2f:
50:40:e7:d9:a3:29:73:eb:07:fd:1b:7d:f9:a3:e1:
15:45:f7:1d:8d:a6:67:a1:f5:e1:04:58:6f:95:ec:
9a:67:ff:6e:7e:6c:a4:43:8f:4b:7d:02:a4:f6:e6:
ca:7f:b2:4d:87:55:ec:28:98:c8:30:d4:d1:d9:ad:
39:02:63:8d:20:19:d6:51:d3:c7:e6:46:46:2f:61:
7f:03:45:6a:94:6b:d6:48:a5:12:87:19:cd:0c:37:
d0:dd:12:9e:f6:54:ef:a4:f5:e3:c4:6d:7b:86:7d:
05:cf:d5:45:fa:f8:81:34:e8:7a:f3:32:32:b2:3a:
e0:8a:fd:7a:34:df:cd:4b:3c:40:0c:86:b9:98:32:
63:41:46:65:ef:50:27:05:3d:4a:eb:7d:ef:9e:25:
57:a6:fa:b2:63:e5:69:e4:3d:53:5a:16:38:cd:77:
53:55:44:f3:a1:51:e8:6b:e6:10:02:17:f4:8a:96:
ad:4e:b4:11:72:41:5b:24:03:dd:61:a3:18:20:f8:
5b:c2:c6:c7:9c:94:56:ab:5e:66:e6:86:9a:f7:dc:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:54:9B:C6:B8:71:11:BA:CB:31:E6:F8:8F:F3:83:B5:F4:8E:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F49AACF8506711EEACB518204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:60:bf:c4:45:b2:92:dc:be:fa:87:31:82:4b:25:6f:46:b6:
cc:88:3e:2c:4c:1f:18:d3:fa:e7:58:da:77:c6:00:8c:fd:9a:
8a:e4:93:9c:03:79:28:3f:8c:a0:34:fd:1c:05:d1:f1:e9:52:
55:c5:8d:b4:cc:fd:2f:b1:88:c7:f2:8d:d4:b9:86:67:ed:dc:
fc:a0:e3:0c:60:f2:17:6b:0a:fd:40:a8:63:e8:1d:4c:37:02:
9b:0b:b2:7e:31:25:46:15:45:0c:0c:b6:66:3c:cd:06:12:ed:
a8:56:43:4a:93:2f:bf:6e:03:a3:82:40:45:3f:25:29:1b:25:
81:5f:65:a2:0c:fc:bc:a5:ea:97:85:3c:42:98:f0:22:34:fd:
77:00:e7:6c:1c:ea:44:b6:59:d1:ea:b8:8a:fa:8d:b7:88:83:
ff:4a:9b:e0:d9:60:08:6c:82:b4:11:4a:cc:1e:0c:96:2f:6a:
11:fa:0c:40:30:2f:c0:16:28:69:48:b2:ef:bc:57:0a:e7:d5:
53:9e:b1:53:41:88:23:69:76:2f:29:6d:49:89:b2:c8:a1:be:
a5:19:36:4a:84:cb:e4:e1:9c:44:e0:25:b4:06:8f:ce:2b:aa:
ef:6a:9b:8e:e7:cd:d1:44:f0:d3:26:bc:95:cb:e9:55:17:24:
c8:29:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org