Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEFB6A8F70511EE98D8638E775412E6.roa
File: FFEFB6A8F70511EE98D8638E775412E6.roa (raw, json)
Hash identifier: vB1YRqeXOCsQlY8u/GYr34lA/VTfVtv6VvDNbarfXIY=
Subject key identifier: BB:A8:E3:EC:0A:F1:F0:16:6D:4F:60:C9:AA:DB:4B:8C:C4:20:AD:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AACE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEFB6A8F70511EE98D8638E775412E6.roa
Signing time: Wed 10 Apr 2024 06:46:04 +0000
ROA not before: Wed 10 Apr 2024 06:46:00 +0000
ROA not after: Sat 20 Apr 2024 06:46:00 +0000
asID: 133180
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43726 (0xaace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:46:00 2024 GMT
Not After : Apr 20 06:46:00 2024 GMT
Subject: CN=661635ac-8b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:c2:3b:64:dc:74:68:f2:e9:da:f6:4d:63:
10:37:26:61:a0:07:33:42:22:3f:cf:07:9c:1e:fb:
d4:f2:5f:52:53:5b:c9:71:a1:53:55:b4:8c:9b:67:
cc:b9:d3:ee:88:3f:70:b3:48:3a:1d:13:1a:39:52:
8d:a5:77:da:56:07:a9:1b:dc:a4:b4:cb:29:62:82:
db:0b:d1:1f:d5:f3:8a:db:41:23:53:ce:82:af:ef:
4a:db:1c:42:5c:66:14:8f:47:be:11:2e:46:2b:ed:
91:d7:47:c1:85:f5:52:7a:a2:22:ae:9b:7c:1c:55:
cc:23:8e:7c:3d:f6:51:c8:00:24:2b:a1:34:33:33:
69:49:7d:40:5e:1a:ab:76:4c:a4:d1:39:15:a0:00:
47:38:9e:8e:53:c1:e9:66:cb:4d:61:40:75:80:c0:
cb:67:de:39:f8:92:fb:43:fa:e3:24:ec:fb:fe:07:
5a:09:88:09:9a:d9:9f:5e:28:21:66:1b:6c:4d:b7:
74:a5:76:ac:bb:1f:b8:6a:ff:c9:5f:74:d2:0f:03:
fe:ed:d4:43:99:0a:2a:3a:06:f2:8d:4e:65:58:69:
d9:db:6f:db:85:6b:cc:ec:a3:b5:dc:4b:ab:ad:55:
90:d5:9d:0d:4a:e5:f8:df:72:11:4e:fd:f3:7f:92:
6e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:E3:EC:0A:F1:F0:16:6D:4F:60:C9:AA:DB:4B:8C:C4:20:AD:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEFB6A8F70511EE98D8638E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
10:85:0c:eb:87:91:e4:25:b1:93:47:9b:42:86:51:ff:93:66:
ac:fe:76:41:de:98:8f:c2:46:81:6e:f4:3f:ae:f0:19:1c:54:
d2:14:72:68:ae:f7:ba:6d:1e:3f:81:8b:34:4f:f5:fa:9d:5a:
9a:99:a9:93:cb:d8:5b:02:89:7e:70:62:8a:ff:d4:e9:76:58:
79:9c:97:80:a3:d1:a0:65:e2:81:10:85:74:cd:3c:2d:5b:16:
14:e4:9f:5e:45:f0:70:fb:f9:9c:ff:4d:33:41:6b:e6:69:e2:
fa:45:a8:60:f9:44:42:e7:0d:d8:b3:7b:16:47:db:14:82:6d:
4c:e4:7b:7c:e7:5f:30:03:d4:b2:b3:3d:22:5b:b0:0c:9d:40:
a2:87:71:25:a1:cd:a2:83:ba:21:5c:0d:e9:4f:43:31:5a:cd:
14:96:b1:68:7c:22:10:52:76:5f:9e:9f:41:d3:91:90:b5:dd:
11:17:c4:f0:95:c3:17:e8:43:26:2b:a6:0a:6d:42:e3:30:3c:
56:ba:aa:cb:61:7f:e5:a3:b6:6a:7d:6c:1a:1e:2f:28:1a:e1:
9a:54:01:b9:69:04:46:6a:04:8b:c3:5f:41:92:9f:2c:73:da:
2d:68:66:70:a8:f2:9d:0a:3f:2b:45:be:b1:72:81:fe:3a:4a:
9e:69:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:24 2024 by rpki-client on console-ams.rpki-client.org