Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEB95002B06811EEA88060C5775412E6.roa
File: FEB95002B06811EEA88060C5775412E6.roa (raw, json)
Hash identifier: jXl6/OpmcXST6djY8VY3/oEV6UUuv6wlHYAciXbabx8=
Subject key identifier: 8F:60:87:1A:E7:DB:B8:E6:9C:C6:EE:36:E3:ED:BD:C5:3E:51:0F:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 73D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEB95002B06811EEA88060C5775412E6.roa
Signing time: Thu 11 Jan 2024 10:05:49 +0000
ROA not before: Thu 11 Jan 2024 10:05:46 +0000
ROA not after: Mon 30 Sep 2024 10:05:46 +0000
asID: 211392
IP address blocks: 154.84.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29652 (0x73d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 11 10:05:46 2024 GMT
Not After : Sep 30 10:05:46 2024 GMT
Subject: CN=659fbd7d-273c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:27:08:fe:0a:4f:e9:fe:f7:18:14:11:75:
ce:74:95:e1:6d:96:a6:65:05:fa:de:c9:7a:17:45:
32:82:7e:db:06:b4:79:98:e5:9c:f7:78:87:9f:bf:
d9:85:36:03:57:6e:0d:72:1d:d2:3c:94:0a:55:ea:
df:54:3d:c4:b8:d7:55:19:c3:a3:2b:5f:f1:a5:4d:
21:75:18:fc:47:11:95:3a:8b:ab:91:92:e1:6d:84:
ca:8a:cb:ef:2c:76:4b:bc:a9:76:99:89:ec:7f:f0:
a8:43:93:c8:f9:08:b0:78:bd:41:48:25:02:31:3d:
bb:30:14:b4:80:10:e5:7b:95:3d:f7:08:c5:7d:43:
29:47:ed:fe:31:ff:5c:95:ae:df:c5:8d:28:1c:10:
07:77:ef:14:be:1d:cf:8b:70:78:bd:70:b2:73:f0:
c1:0b:b6:07:fb:4a:43:97:3a:d1:cb:80:de:3f:e2:
53:59:49:be:70:b7:9d:17:45:3c:4e:a7:05:9d:13:
79:9f:4b:ab:57:d0:b8:6e:be:06:50:fc:47:a2:7e:
dd:2d:dd:7e:eb:fc:a4:2b:ed:40:2f:d6:bb:3e:53:
fc:cf:ea:c4:0d:c7:22:2f:3f:4f:fe:b1:08:d8:da:
86:95:e8:18:7b:98:5b:c1:24:39:e3:43:e0:9d:cb:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:87:1A:E7:DB:B8:E6:9C:C6:EE:36:E3:ED:BD:C5:3E:51:0F:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEB95002B06811EEA88060C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:1d:1b:3b:76:82:79:e7:b6:86:ff:1d:20:fa:33:14:0e:cb:
e4:5b:f1:8d:29:50:97:ed:66:bf:97:f3:96:79:db:84:78:12:
b2:b9:8e:69:1a:a9:a4:90:25:71:a6:6b:95:a9:3a:c2:59:11:
31:e5:22:07:77:16:f0:72:4d:39:a3:46:3c:8f:d0:63:26:b4:
3c:b6:1d:df:59:ad:80:76:79:bb:b2:55:01:03:05:b0:cc:7a:
55:e1:05:42:cf:3b:c3:59:fb:19:32:fd:fd:0c:0e:6b:35:40:
b4:6c:92:c1:dd:aa:f0:d7:41:c9:d8:b8:a3:70:fa:49:c4:e4:
d2:cf:91:09:76:53:2d:79:8f:50:ad:d8:2b:a2:cf:a0:7e:4d:
9c:7e:ee:43:19:b2:10:4a:6c:e1:67:76:df:65:b0:8e:f9:83:
01:86:1e:b8:ac:33:a2:dd:4f:06:09:df:ec:16:b8:a0:fc:fb:
d6:7a:8b:e0:7b:a9:6b:6f:24:be:b8:a1:43:59:42:4d:0d:6a:
ae:c2:22:ce:c3:f4:2a:49:b6:cc:0a:78:4e:14:ee:03:6c:32:
bc:23:1e:4b:be:fe:43:be:66:d6:f4:c2:20:d3:8e:7c:6c:94:
97:7b:ed:d8:20:a2:62:fc:ac:2a:04:51:05:0f:4c:84:a9:56:
ef:70:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:25 2024 by rpki-client on console-ams.rpki-client.org