Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009F95E223A111EFA733D2037DDC24C2.roa
File: 009F95E223A111EFA733D2037DDC24C2.roa (raw, json)
Hash identifier: KlFSFEyxERREaMNoLLw0eHH7Mpc9ejRBKBj6r/d9VRo=
Subject key identifier: F1:95:8A:B7:E0:06:64:D2:20:36:86:A3:9F:A3:B4:D7:71:EC:DE:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C06B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009F95E223A111EFA733D2037DDC24C2.roa
Signing time: Thu 06 Jun 2024 01:06:28 +0000
ROA not before: Thu 06 Jun 2024 01:06:24 +0000
ROA not after: Thu 01 May 2025 01:06:24 +0000
asID: 4809
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49259 (0xc06b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 01:06:24 2024 GMT
Not After : May 1 01:06:24 2025 GMT
Subject: CN=66610b94-94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:c7:92:7d:63:49:dc:3f:dd:a6:c8:b6:c9:
4f:80:82:ad:60:10:97:58:3c:64:f6:48:15:e5:7f:
5f:fa:a7:8a:4b:1a:60:09:09:36:ed:c7:6c:19:57:
27:dd:78:25:01:af:c4:eb:af:0a:48:b6:05:2f:57:
78:ad:1c:3d:c8:dc:40:a8:87:67:ec:36:c5:b5:91:
68:32:58:e2:6d:f8:d9:63:6f:ad:85:b9:3a:37:e3:
15:99:97:70:87:7b:65:8f:d6:a5:01:09:51:72:e2:
98:25:8d:62:43:c2:b8:e2:7d:9c:a2:44:bd:57:c0:
17:2c:0c:fa:7b:9b:83:0f:f4:60:d9:43:f1:91:8d:
3c:bb:57:3c:45:42:ac:9c:27:e6:e9:2e:dc:44:28:
97:83:00:a3:b6:27:99:c1:90:82:77:67:09:97:95:
c9:90:5b:b0:7f:df:3a:18:be:1b:b5:fe:34:bd:79:
cb:32:44:14:f8:11:eb:cf:b1:a0:c8:53:76:17:45:
0a:89:1f:5d:98:e8:82:d9:33:b3:35:3e:34:a6:06:
fb:f7:a3:a0:52:b8:13:15:f5:c1:5e:97:e4:de:3a:
af:4c:de:3e:d7:91:2c:5b:67:f1:dd:ec:24:56:cc:
63:bb:f8:cf:b2:24:c2:af:fb:77:73:93:f8:dc:d8:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:8A:B7:E0:06:64:D2:20:36:86:A3:9F:A3:B4:D7:71:EC:DE:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/009F95E223A111EFA733D2037DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9d:f0:a9:a7:44:53:c4:cd:cb:d2:1b:ec:a4:a8:c1:ae:8e:
cc:e8:a3:b4:a2:1b:98:0f:a9:e4:b2:f2:af:3e:3c:13:a1:7e:
02:dd:51:08:a4:e9:21:85:f3:a9:eb:d4:e4:a1:2c:95:3c:b2:
d0:9e:7b:b9:da:78:3d:cc:fb:6f:97:ad:85:0c:ee:24:17:45:
68:b7:7e:18:b7:61:85:17:dd:82:51:cc:08:a5:48:04:6b:1e:
c4:a1:9a:ff:5c:2a:77:f5:5c:99:1e:1f:3c:c2:c3:0e:c8:ae:
f1:d8:da:03:1f:a8:78:4d:5d:47:7c:9c:15:4f:0b:a7:46:1c:
f6:e8:4c:89:c9:84:0f:4e:7b:bf:ff:08:78:16:40:d7:dc:b4:
a9:38:42:66:4c:e8:3e:8f:6b:39:88:65:31:53:4b:dc:4d:47:
65:7d:ce:1b:44:49:22:c8:69:8d:d9:5e:bf:b8:36:c1:a3:02:
c5:f9:ae:53:57:95:4b:08:cd:a1:14:24:53:bc:b7:51:ed:25:
12:26:1c:c8:37:10:d2:b4:55:d4:0e:e4:96:cc:dd:88:a4:f7:
a9:ed:d1:47:c9:b9:2b:4d:bc:94:36:02:29:7d:8b:aa:23:68:
1b:3c:c5:da:e0:49:fa:f0:1b:dc:3d:2c:71:5a:e8:64:45:33:
dd:6a:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:44:52 2024 by rpki-client on console-fra.rpki-client.org