Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C0BF12A62E11EE995F7E9E775412E6.roa
File: F8C0BF12A62E11EE995F7E9E775412E6.roa (raw, json)
Hash identifier: Ypsiyzq1stqwT355sLepZUsnAn5E9fhkSFUwP7noTD4=
Subject key identifier: 7B:47:CB:56:D6:47:13:56:5C:EC:B0:0C:E5:B5:F4:F3:0C:99:9A:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6A24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C0BF12A62E11EE995F7E9E775412E6.roa
Signing time: Fri 29 Dec 2023 09:45:17 +0000
ROA not before: Fri 29 Dec 2023 09:45:13 +0000
ROA not after: Mon 04 Nov 2024 09:45:13 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27172 (0x6a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 09:45:13 2023 GMT
Not After : Nov 4 09:45:13 2024 GMT
Subject: CN=658e952d-d7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:9e:b3:16:c1:e7:0c:6f:8e:c8:2b:05:6a:
bc:1b:5c:ad:64:a1:43:bb:fd:4a:a7:33:7c:17:ff:
7b:18:0a:99:36:00:94:3e:1b:ff:eb:59:a7:ea:bb:
24:a8:61:15:51:ad:0b:de:11:f1:5d:2f:02:1d:88:
35:06:28:37:8c:4d:d3:36:86:ee:c6:27:ee:e9:50:
59:31:50:1d:13:6f:80:7e:26:a4:3c:a1:df:f4:fe:
7e:00:79:77:3a:52:38:92:29:67:0c:73:bd:62:7e:
ae:57:57:71:2b:ff:61:dc:f4:34:fb:21:68:c7:21:
95:62:16:79:2d:55:54:ef:4a:27:6c:b7:29:f3:04:
d9:49:2d:ff:de:47:b4:3c:42:93:59:0e:ae:3e:cc:
87:6a:f6:02:08:46:99:ca:68:37:ff:30:e8:40:40:
23:3c:4d:25:47:68:50:1c:e5:71:92:00:19:08:69:
65:85:eb:24:90:29:5d:ac:90:1d:4f:c6:3f:93:8d:
ed:d5:91:1e:de:a3:03:1c:e2:fe:df:36:0b:29:07:
27:29:08:09:b2:85:c0:ee:bd:fb:6a:e7:8d:a1:ca:
87:5d:e8:f3:7e:9c:0c:55:cf:be:54:2a:b5:c0:77:
37:78:40:49:be:36:ca:22:ad:82:ee:4f:4d:5e:c5:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:CB:56:D6:47:13:56:5C:EC:B0:0C:E5:B5:F4:F3:0C:99:9A:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C0BF12A62E11EE995F7E9E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e6:2c:9f:7d:d7:d1:45:2e:d5:b9:14:68:fc:85:31:8a:e2:
80:08:4b:55:32:75:84:da:4e:e2:b1:64:f5:e2:a5:e1:5c:91:
55:84:b7:04:ed:35:8d:ce:fe:fd:a7:f6:0a:b4:6c:59:8e:95:
ff:d9:27:a0:1e:d2:c7:34:4f:5a:c4:17:b3:29:26:ce:4b:ec:
cb:9f:12:7b:9e:97:de:fd:a7:32:4a:8d:1b:f9:2b:0f:dc:46:
41:72:10:cd:38:95:f1:46:e8:f7:76:b8:c2:f8:05:cc:e9:f2:
07:f3:dd:fb:c1:a8:89:1f:42:35:12:1a:e1:09:9f:63:fd:ab:
9a:06:59:56:de:65:b3:aa:b1:0b:a2:b2:e8:ca:d2:41:c0:51:
4d:8d:23:3e:10:04:48:95:be:53:a3:75:da:6b:2a:ed:2e:bb:
6c:83:2a:b9:69:f8:03:4c:bc:e9:f3:0b:b6:1e:1f:94:01:53:
66:e8:1e:41:b4:fe:a2:70:f6:5d:65:46:72:17:81:fb:55:29:
b8:bd:b5:05:7b:8e:e4:cb:18:f2:4c:14:e2:19:d1:13:a7:84:
20:f6:6a:b2:ff:77:d9:1f:fb:d0:ea:65:92:25:d4:73:bb:65:
c3:6a:18:00:ea:ab:28:97:c9:b8:ca:df:12:ef:a4:3f:86:c7:
a1:98:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org