Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF6405A430F11EE84867C184AD9E6FC.roa
File: FEF6405A430F11EE84867C184AD9E6FC.roa (raw, json)
Hash identifier: IVFwSUdRd2pM65aRMVfkzmYWGgq/ZlGl25AX1JJHcR0=
Subject key identifier: 96:B9:B8:D5:C3:3E:17:51:D3:FB:C5:26:7F:99:43:C0:28:34:0F:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 37F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF6405A430F11EE84867C184AD9E6FC.roa
Signing time: Fri 25 Aug 2023 06:24:08 +0000
ROA not before: Fri 25 Aug 2023 06:24:04 +0000
ROA not after: Mon 30 Dec 2024 06:24:04 +0000
asID: 984
IP address blocks: 154.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14323 (0x37f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 25 06:24:04 2023 GMT
Not After : Dec 30 06:24:04 2024 GMT
Subject: CN=64e84908-7469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:db:41:41:8c:71:4a:13:cf:8d:10:ed:bd:
a5:a5:e2:c0:39:a6:70:27:30:bd:38:62:ad:37:db:
1e:26:e2:34:16:9d:11:ec:b8:ba:c2:16:64:fc:24:
c3:1a:36:e1:39:e9:aa:2f:34:d9:b2:52:e5:df:5e:
9d:eb:63:3a:ef:3b:59:cd:21:fd:aa:df:f4:67:42:
df:14:32:d7:d6:1a:0e:28:f5:95:c0:58:90:f9:39:
08:f9:a9:79:da:30:e1:97:78:86:11:be:bf:67:6e:
a7:60:9b:dd:c7:9a:0b:80:c6:05:3d:f6:c8:38:c4:
35:2a:41:42:d0:a0:b3:23:26:a0:f2:c4:48:e9:84:
8a:84:5a:d4:3e:6d:0b:bb:0d:d1:72:92:ca:5d:07:
ff:74:d8:ce:a6:47:87:4a:33:74:a7:e8:bd:19:b7:
cb:b0:f6:13:08:b6:1a:2e:76:61:26:0b:cc:40:47:
9c:e7:c5:8d:87:ab:4b:97:29:58:e3:ec:1f:59:eb:
c3:f1:11:9a:6c:bc:fe:3e:1c:ca:34:55:fb:7c:d2:
f4:46:f3:7a:01:31:42:99:df:d2:11:61:0d:f4:11:
28:9f:65:4e:82:c6:6e:05:29:29:0c:9b:f2:a7:52:
3a:e0:13:54:ed:21:62:63:78:99:3e:87:c1:1d:89:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:B8:D5:C3:3E:17:51:D3:FB:C5:26:7F:99:43:C0:28:34:0F:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF6405A430F11EE84867C184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
44:82:5c:13:b4:96:77:05:b1:15:73:06:e1:48:fe:94:f5:07:
cb:fb:d7:f2:3b:53:4b:f2:44:af:c7:20:e5:5d:34:b2:db:53:
d4:1f:2c:2e:b6:67:3a:9d:20:80:31:c6:16:21:ad:fd:90:99:
6c:5e:26:09:e3:28:b7:00:14:44:44:61:90:08:37:6a:e0:7e:
7b:db:b0:de:01:c8:81:cd:09:4b:57:af:ae:47:e9:83:fe:d2:
9b:fb:de:de:42:97:26:33:08:55:30:d1:08:99:5a:fe:ea:a9:
77:11:57:1c:39:4f:ef:e0:05:be:17:91:d4:c0:ef:70:70:b0:
ed:86:64:5f:56:ed:3d:7e:dd:f9:4a:00:04:cd:81:6a:00:b3:
2b:36:ac:5b:a8:4d:00:2d:a3:34:d8:82:94:fc:a0:8e:09:15:
a4:74:94:fe:70:3b:8d:26:bf:7f:59:13:2e:b7:f8:27:c9:72:
0e:e9:38:d6:b8:e4:48:c2:b5:32:fa:66:3d:11:46:1f:f4:89:
c0:42:6b:8e:68:b1:09:c2:2e:0c:0b:84:8d:cb:36:34:5f:b7:
8a:79:44:d7:80:69:9e:e6:19:3d:45:c6:90:6d:5a:cd:b1:67:
c8:bb:38:f7:d9:10:fb:97:09:a3:54:c1:5b:78:2f:d1:17:68:
09:a8:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:36 2024 by rpki-client on console-ams.rpki-client.org