Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF503B68014C11EFBE34BFFE007001B1.roa
File: FF503B68014C11EFBE34BFFE007001B1.roa (raw, json)
Hash identifier: YziQNG9DV6dzC6leJCYBTeHCxX9rWk8FQvR611ocFeg=
Subject key identifier: C9:6C:1C:87:10:48:03:5B:A1:E8:EB:F6:08:BD:40:24:23:1A:B9:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF503B68014C11EFBE34BFFE007001B1.roa
Signing time: Tue 23 Apr 2024 08:39:29 +0000
ROA not before: Tue 23 Apr 2024 08:39:25 +0000
ROA not after: Sat 11 May 2024 08:39:25 +0000
asID: 3561
IP address blocks: 154.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44837 (0xaf25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:39:25 2024 GMT
Not After : May 11 08:39:25 2024 GMT
Subject: CN=662773c0-faf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:76:e2:d0:e0:cc:a4:52:11:8a:ae:9c:cd:
ba:1f:61:6a:31:73:10:23:ce:6c:f8:71:f1:b9:36:
ba:a3:a9:06:a3:ff:2c:b5:a6:a6:72:34:66:65:65:
d3:76:75:dd:67:61:0f:27:73:61:35:36:ba:8d:e4:
22:14:bc:e0:58:0a:ab:cc:89:19:79:49:ac:4a:7d:
8e:58:c8:e2:1a:0d:28:8f:7f:e8:1e:31:73:f5:67:
28:d9:4c:11:38:20:b7:56:34:35:ad:2b:cd:e0:92:
4a:02:58:c0:44:c7:08:20:8d:89:1d:60:c6:2b:dd:
9b:fa:a1:7e:8d:9c:c6:b3:bc:2e:2f:f1:6a:b1:ba:
4d:5e:7b:ac:38:1a:a3:d6:8f:4f:3b:cd:73:57:5c:
13:80:d5:7c:c5:88:c0:ec:b8:ae:40:1f:a5:eb:42:
92:ef:66:15:16:af:4a:46:56:54:96:6d:73:cb:7e:
57:6d:b0:78:4b:93:9b:8b:d3:5e:ca:5e:29:32:af:
ed:86:8a:6e:92:31:fd:3d:55:32:e4:3c:d1:74:09:
d7:a6:77:96:cf:45:6b:aa:6f:31:f4:55:4e:e5:f4:
3e:93:f0:31:6c:52:f5:67:1f:61:04:9c:7c:9a:c8:
5c:2f:b9:67:85:88:af:f4:c7:c1:29:03:7e:c3:28:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:1C:87:10:48:03:5B:A1:E8:EB:F6:08:BD:40:24:23:1A:B9:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF503B68014C11EFBE34BFFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
55:0e:65:bb:54:9f:8d:d3:2d:15:84:3a:32:1a:4d:37:a4:4e:
e4:6c:65:1a:c2:ed:e9:ba:69:f1:b5:b5:96:e7:d4:78:f2:c3:
21:7b:da:43:2b:f7:59:54:d5:99:7c:8f:f6:be:4e:00:a9:c6:
0e:30:25:40:fb:1f:b7:39:80:e0:2e:37:aa:ef:0e:ce:61:51:
66:dc:30:cc:06:69:2e:32:ef:fb:e6:e6:1a:14:a8:3b:e9:02:
4a:89:88:54:19:21:e5:60:37:1d:6f:f7:e1:aa:89:2f:0c:8a:
71:ae:2c:a5:41:57:05:67:e6:6d:fc:29:cf:c0:55:86:59:e4:
cb:ee:25:69:72:e6:3c:97:f1:57:fb:95:b7:d6:51:1f:d6:45:
cf:82:e8:34:9b:d0:61:94:33:64:2d:e1:d9:63:b0:69:13:f0:
f6:1e:ac:fe:d1:26:e5:25:c4:49:11:e9:2e:13:78:07:85:6d:
11:22:9b:64:fa:b6:bd:4c:76:d6:9a:35:1e:cf:a0:f9:66:c1:
15:ef:8c:03:00:f6:fb:e0:c8:9d:0a:29:71:7e:25:0c:22:67:
8f:76:bf:38:f9:41:f5:5d:f7:82:73:19:12:d8:60:8b:a3:3c:
29:6b:02:ec:24:1d:7e:45:19:ed:bf:c6:03:bf:34:c1:9a:b7:
38:d3:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:03 2024 by rpki-client on console-fra.rpki-client.org