Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA254DEFE9611ED912F18494AD9E6FC.roa
File: FAA254DEFE9611ED912F18494AD9E6FC.roa (raw, json)
Hash identifier: 2cEKHiKUS0Vj69JRCFQewx3+/Yuaxp8bKUgycTsQPiI=
Subject key identifier: D8:28:F3:C8:C2:97:49:72:86:46:4E:0F:90:6B:39:72:E2:01:0C:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 283A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA254DEFE9611ED912F18494AD9E6FC.roa
Signing time: Tue 30 May 2023 03:06:32 +0000
ROA not before: Tue 30 May 2023 03:06:29 +0000
ROA not after: Wed 15 May 2024 03:06:29 +0000
asID: 63888
IP address blocks: 154.207.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10298 (0x283a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 03:06:29 2023 GMT
Not After : May 15 03:06:29 2024 GMT
Subject: CN=64756838-0926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:39:c6:d3:9a:da:61:b4:a9:43:a9:65:ea:
04:27:3e:0d:af:97:44:0d:be:9c:e7:29:c6:39:2c:
96:3a:d0:0c:31:6f:1a:e2:26:4b:4f:ca:ae:32:2b:
13:43:28:40:cf:ef:9f:3f:47:66:a0:99:14:0f:36:
72:bb:be:aa:f0:ba:05:7e:4b:2d:52:09:88:a6:6d:
d1:c9:95:50:3d:83:89:98:75:8f:ff:1b:8f:42:8d:
52:6a:81:00:6e:fb:57:a2:d3:ee:d4:af:2b:32:cd:
45:c7:51:a2:2a:78:6d:be:a9:02:9e:da:7f:05:36:
b9:be:f8:b8:e3:a7:16:cf:cd:f8:20:21:8c:5b:14:
ec:5d:1d:63:1e:55:29:c6:99:da:35:57:24:0c:06:
b5:bf:30:a7:57:b9:4e:ba:e2:1a:89:35:0e:68:7f:
5c:13:67:f5:ee:6b:74:e1:bb:39:1d:af:a2:d8:78:
72:09:78:1d:90:95:a7:ab:99:67:58:83:a1:f0:9f:
8d:7a:eb:10:10:64:8e:52:f7:c4:23:44:5a:45:9f:
9b:b1:2a:0c:32:03:ce:e1:da:87:fb:be:31:71:60:
d6:a4:c3:bf:7a:14:d8:46:c0:01:c2:a8:99:56:c5:
cd:e4:4a:2f:32:db:8e:99:9f:33:94:73:75:8b:1b:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:F3:C8:C2:97:49:72:86:46:4E:0F:90:6B:39:72:E2:01:0C:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAA254DEFE9611ED912F18494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.105.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:43:22:97:7e:da:38:c4:53:91:26:16:f5:8d:a6:c6:fd:7f:
15:b5:23:2b:41:10:9e:d2:12:5a:c7:e8:2c:03:a1:c6:8c:88:
ab:9a:0e:4d:95:d0:92:46:bd:e3:0b:29:10:1b:d8:18:77:65:
d3:a5:6f:2d:d0:f8:d7:90:38:90:bd:48:e6:f5:68:be:ae:bc:
a2:a3:0f:2c:93:fb:ec:d3:ae:4b:66:2a:43:2b:df:10:7c:cc:
11:a3:e7:2e:26:6c:f1:13:85:5b:de:39:27:23:a9:20:17:d2:
80:c9:ae:e2:ce:a3:e3:a1:88:95:20:56:32:a1:17:69:a2:9c:
41:88:d4:8e:3e:38:ad:30:96:54:59:f6:91:55:77:f7:bd:d1:
b3:39:51:c0:20:cf:27:62:5d:f4:6a:3f:87:45:22:26:a3:01:
96:4d:3f:7e:c3:26:f5:14:ad:7f:b1:15:2b:b4:57:f8:42:3e:
d1:dc:b2:ea:98:61:cc:6c:be:de:fa:f1:bd:8b:c4:80:2f:65:
61:a2:38:94:9e:6a:a5:1e:2a:a5:7f:ea:9b:ff:48:04:35:25:
e9:eb:cd:0b:35:5d:a6:e6:ef:af:d9:af:ee:66:4d:83:b2:3c:
17:fd:d6:6f:c7:4c:01:8b:b9:af:ab:b8:c7:7f:31:97:1e:25:
c4:08:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org