Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFA96C653A311EEA1F33E6D4AD9E6FC.roa
File: FCFA96C653A311EEA1F33E6D4AD9E6FC.roa (raw, json)
Hash identifier: cSLrz2EnEsKAKjblzWskZmOqZztUe5SHJJo4jYhd5fU=
Subject key identifier: 48:85:62:DD:BC:C6:28:1D:EF:4D:46:1C:FD:DD:F3:9D:08:2D:F5:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFA96C653A311EEA1F33E6D4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:43:48 +0000
ROA not before: Fri 15 Sep 2023 08:43:45 +0000
ROA not after: Sat 08 Jun 2024 08:43:45 +0000
asID: 136970
IP address blocks: 154.197.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15797 (0x3db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:43:45 2023 GMT
Not After : Jun 8 08:43:45 2024 GMT
Subject: CN=65041944-5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:a0:d9:cc:8c:34:98:4e:ff:c3:f9:24:73:
ea:35:55:71:76:0d:69:5e:88:50:ba:f6:d0:62:59:
82:ca:25:97:95:c1:37:a4:fa:01:d4:0b:46:be:5e:
bc:5c:40:30:72:97:20:34:ec:34:93:f7:21:40:d6:
5d:e1:b1:6b:e6:5a:b1:23:77:2d:19:87:7a:c1:df:
51:12:3b:27:e9:ab:7a:00:8d:a9:3c:5a:bf:92:5f:
42:cb:67:df:9a:16:65:99:36:39:a0:ea:ac:97:92:
5c:61:b2:5b:26:5b:62:cd:47:89:e4:fc:37:bd:ab:
90:cf:b1:43:de:7d:99:86:0a:c3:a6:80:c4:f9:aa:
2f:35:5c:7a:c7:3b:ef:bf:c5:a0:d0:9e:b6:fa:16:
28:62:6e:df:46:e6:81:ab:e0:e2:10:c7:df:fb:26:
1f:c5:b0:22:ed:fc:ac:3f:84:19:e1:25:46:00:45:
89:87:9e:c1:a2:a0:9c:91:29:4e:34:4e:c2:58:6d:
c5:9f:0a:ce:b1:57:61:46:fd:99:ca:1c:7e:fa:02:
5f:e8:55:00:52:47:12:c5:bf:39:3a:ef:da:7b:d5:
af:27:60:df:eb:c9:64:bd:50:a3:a7:5e:8c:4e:fc:
04:ee:40:ce:0a:19:80:ad:04:04:da:0c:7c:47:17:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:62:DD:BC:C6:28:1D:EF:4D:46:1C:FD:DD:F3:9D:08:2D:F5:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCFA96C653A311EEA1F33E6D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.4.0/24
Signature Algorithm: sha256WithRSAEncryption
64:13:ac:d6:c9:39:3e:09:75:0b:f3:29:02:49:d6:96:01:2e:
04:f0:51:3d:0d:5e:16:ca:38:cc:7f:56:6a:7b:fa:1d:47:3c:
f3:13:8c:b8:ec:42:02:5d:9c:f6:2d:2d:b7:24:43:cf:d9:45:
f5:86:49:7f:48:3f:c2:92:71:4b:4a:c6:3f:aa:8d:d3:2b:5d:
c2:34:d2:c7:7c:5c:28:2a:f4:ec:18:37:bf:e8:5a:91:9b:23:
f3:37:01:63:46:45:4c:ba:d9:ba:ee:3b:af:25:20:c1:1e:8e:
be:c7:3a:d8:a3:71:d5:b1:c2:af:d4:18:69:0d:b7:dc:de:bd:
27:b4:44:b4:62:e6:ef:0a:06:0f:70:aa:e8:a2:ae:b3:a4:a1:
3a:b0:65:49:52:b9:01:1f:49:ed:c6:2d:fe:de:1f:c0:d9:9c:
71:35:d9:ab:cd:a5:87:4d:6f:07:92:5d:c6:11:76:bb:fa:71:
8a:bb:46:fe:c9:20:55:08:74:6c:3c:14:19:af:50:0f:7b:a0:
42:dd:ff:a8:60:79:36:bf:39:cb:a3:e7:80:88:7f:02:e0:a9:
4e:d3:3a:09:14:eb:34:20:e6:20:ef:c3:08:f8:94:e6:cc:c8:
08:ea:84:ad:4d:cf:d0:ad:3b:44:74:4c:9b:63:23:6f:57:83:
16:11:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org