Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCD41F25EB911EE8CF75D514AD9E6FC.roa
File: FFCD41F25EB911EE8CF75D514AD9E6FC.roa (raw, json)
Hash identifier: vapAFeTV/D+GpKfMKbduCJWnIVBnYSHDOoFZPqQO3DQ=
Subject key identifier: F6:FC:87:54:3C:05:36:A6:B3:0E:3B:BC:B3:01:E8:04:09:D5:41:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 441C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCD41F25EB911EE8CF75D514AD9E6FC.roa
Signing time: Fri 29 Sep 2023 11:19:05 +0000
ROA not before: Fri 29 Sep 2023 11:19:02 +0000
ROA not after: Mon 26 Aug 2024 11:19:02 +0000
asID: 23764
IP address blocks: 154.198.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17436 (0x441c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 11:19:02 2023 GMT
Not After : Aug 26 11:19:02 2024 GMT
Subject: CN=6516b2a9-7ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:2e:f7:3b:83:0e:a7:d0:71:9b:5c:9c:69:
4e:f7:b2:79:e1:1a:1b:0d:dd:42:4b:e3:f5:56:a7:
40:cd:39:0e:08:57:9d:2e:36:c6:a4:de:29:ad:42:
29:6d:8e:cd:8c:60:2f:8a:0c:99:2b:eb:dd:dd:7f:
a5:e8:57:ff:bc:26:4b:17:ad:e7:24:8f:43:34:3a:
18:c9:70:87:dd:21:2f:ff:29:fb:84:c6:97:e1:94:
2e:8a:72:dd:f2:61:1d:e2:40:2a:0a:36:de:14:e0:
78:8f:b0:6c:63:78:cc:17:a2:38:c2:d4:72:0e:44:
2a:de:67:4e:98:4b:7c:11:cc:c0:c6:26:94:e9:87:
ff:ac:cc:ef:22:c4:12:e3:6b:73:f8:98:a9:78:d2:
02:25:32:2c:2f:6b:42:8b:56:29:3f:52:e7:ed:b3:
b0:91:a6:1a:66:60:75:4f:09:07:88:cf:04:66:58:
26:84:23:53:22:3e:fe:37:97:c1:08:d6:91:fe:0f:
20:4b:5c:86:d4:fb:77:e9:0a:fd:6e:96:b3:a6:4e:
9f:36:c0:18:d3:a1:4d:b4:ed:3b:10:b9:e7:e6:5d:
f1:a5:09:fe:db:54:8a:f8:7d:2f:c6:45:52:2b:b3:
c4:cb:06:49:2c:86:cb:48:14:70:6a:2f:b8:84:e3:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:87:54:3C:05:36:A6:B3:0E:3B:BC:B3:01:E8:04:09:D5:41:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCD41F25EB911EE8CF75D514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:55:be:39:32:3b:29:77:26:97:11:bd:2e:0f:5d:0a:ce:b8:
01:bb:3c:44:1b:d2:b6:6a:9f:72:61:c1:e0:82:f4:5e:ff:02:
29:e4:aa:c0:87:1d:a7:2f:65:5d:06:11:59:e8:20:2e:f4:3d:
2c:48:68:39:29:db:e7:ba:ae:2d:ff:30:e3:8d:66:46:10:41:
e5:ed:d4:3b:a5:9a:77:36:2f:57:0d:2b:18:08:39:d4:06:33:
fe:70:32:94:8e:4b:85:4a:15:59:35:29:70:4d:7d:c5:2e:21:
34:26:14:74:46:b1:f3:2c:0f:00:36:0f:04:a0:13:93:94:13:
62:8c:b5:6d:d3:e5:b0:dc:fe:98:99:2e:e6:aa:a1:b0:8e:d4:
d6:61:47:46:44:e3:6f:43:94:eb:99:8d:fb:e9:a6:44:a0:7d:
ec:18:f4:89:6e:d6:c3:64:a5:20:4c:e7:03:a9:d8:cf:80:8c:
ea:f8:64:59:3b:a5:e9:d6:47:31:1a:0b:ac:92:f0:2e:4b:7a:
58:59:96:2a:56:cb:15:af:d4:4a:e6:ab:5f:99:5d:fd:42:c3:
c3:5b:b4:11:c1:d5:24:4c:70:e1:fc:67:61:b5:f6:af:b7:f7:
5e:cf:01:e0:7c:57:9a:40:7f:50:fc:3c:39:21:69:60:de:69:
77:d9:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:44 2024 by rpki-client on console-fra.rpki-client.org