Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F993E550E28C11EEABDF33BC775412E6.roa
File: F993E550E28C11EEABDF33BC775412E6.roa (raw, json)
Hash identifier: wJxhD+WsMPK6HsT1bCzGhPeR3wkKxRw5i2zFGbHdgsE=
Subject key identifier: 63:D3:24:25:DE:89:D9:68:A0:80:8D:BE:E3:78:D9:41:84:C5:50:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A193
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F993E550E28C11EEABDF33BC775412E6.roa
Signing time: Fri 15 Mar 2024 05:29:21 +0000
ROA not before: Fri 15 Mar 2024 05:29:17 +0000
ROA not after: Fri 20 Sep 2024 05:29:17 +0000
asID: 47890
IP address blocks: 154.214.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41363 (0xa193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:29:17 2024 GMT
Not After : Sep 20 05:29:17 2024 GMT
Subject: CN=65f3dcb0-9a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:60:e6:24:9d:16:68:a4:cc:63:28:10:48:
32:21:8c:17:df:9a:bf:42:2a:76:d9:15:db:68:69:
ce:40:53:2d:21:57:05:3c:22:ea:13:68:0a:e9:23:
9f:20:dc:dd:9d:86:31:9d:17:56:b2:32:62:78:a9:
6e:b2:d4:5a:fd:57:50:e9:84:0e:e5:9f:ed:a9:a9:
7a:a3:4b:94:9d:f1:c6:cf:5d:da:c0:8b:ac:5b:bb:
eb:f5:3f:27:35:5f:3c:00:f5:3e:9a:f0:e2:46:60:
5d:17:2e:0f:27:a0:c1:69:b9:91:e4:63:41:34:0d:
da:0a:f6:e7:9e:c8:70:ac:0c:94:81:26:57:92:52:
4a:11:a9:63:c5:83:f6:50:d4:bf:0d:6c:f8:fc:fc:
7e:00:7f:7a:59:35:ec:c9:71:5e:96:d4:b6:5c:2d:
72:8c:27:52:41:ce:ca:32:19:d8:49:a2:91:79:aa:
71:ba:ee:e7:bd:a8:fc:7b:4f:ca:8c:9e:7e:ab:d8:
e0:b6:d7:e2:03:d9:14:e9:70:ca:ac:d9:6e:3f:10:
f1:d3:0b:ee:a1:14:52:18:70:ff:6e:46:f0:d7:4b:
e9:6c:86:37:98:c8:30:49:ed:76:2d:4e:b7:7f:58:
12:16:31:68:b8:8e:ac:92:cd:82:9a:b8:00:43:eb:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:24:25:DE:89:D9:68:A0:80:8D:BE:E3:78:D9:41:84:C5:50:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F993E550E28C11EEABDF33BC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5c:2f:2c:26:c9:ac:d6:d5:d2:01:7e:ef:60:e5:08:08:09:
d5:8a:ac:a7:dc:ff:fa:01:50:b3:9e:2c:a6:23:01:46:4e:87:
ce:44:26:c7:ef:77:25:4c:a0:fd:e9:6c:a2:1a:af:3d:d2:f2:
b2:d2:ca:cc:0d:df:3e:41:27:13:68:b4:b9:d8:3c:4a:60:b6:
82:52:94:d9:48:57:e1:6d:27:54:19:d6:c1:eb:b2:17:fe:8a:
c9:37:69:5d:ae:2c:4a:1c:5c:32:13:d4:e9:5e:4c:62:9e:81:
d1:5a:d6:3d:c5:b9:09:20:c1:57:80:f6:3d:9a:f4:4a:7a:74:
3b:5f:01:24:81:64:d4:60:d1:40:f6:78:6a:af:2a:a1:69:9b:
ac:06:1a:49:ab:e0:a1:05:6e:4d:c5:00:95:0d:6a:14:bb:ab:
4d:e6:90:56:f2:38:95:70:c3:d1:a6:17:d4:19:5f:4c:4a:21:
5a:63:c7:d3:9f:36:a5:e1:77:39:0a:5c:c1:7c:0f:81:6d:13:
34:f4:9b:d1:0c:c9:ef:74:7b:63:72:dc:88:61:bb:71:c7:d4:
8c:e2:6e:4e:eb:b8:9f:22:6d:d4:0f:85:22:38:60:8f:dc:6b:
5a:f8:53:6b:7e:ea:3e:28:2a:f6:fd:02:0f:d2:f8:2c:8d:c3:
8b:bc:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:29 2024 by rpki-client on console-ams.rpki-client.org