Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01927CB60B5611EFAA7FDD43017001B1.roa
File: 01927CB60B5611EFAA7FDD43017001B1.roa (raw, json)
Hash identifier: lSwTBYfwzjKKQnUUxPG+CVPlgVTBXudHpNhH1RDESpw=
Subject key identifier: A1:5E:7D:B5:19:CA:4E:11:BB:95:EB:3B:56:72:49:5E:64:DB:40:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01927CB60B5611EFAA7FDD43017001B1.roa
Signing time: Mon 06 May 2024 03:09:09 +0000
ROA not before: Mon 06 May 2024 03:09:06 +0000
ROA not after: Tue 11 Jun 2024 03:09:06 +0000
asID: 63139
IP address blocks: 154.203.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46298 (0xb4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:09:06 2024 GMT
Not After : Jun 11 03:09:06 2024 GMT
Subject: CN=663849d5-4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:29:f3:09:cb:21:15:b2:15:a7:78:8b:54:
a5:c4:6c:f5:13:c1:f6:7b:42:23:e7:9c:2a:36:f6:
86:ee:5e:0e:2c:98:b7:ce:9a:ef:39:59:bf:67:e2:
49:de:bc:dd:7a:3f:c0:4f:6e:f2:5b:55:3c:34:0b:
a1:80:1f:01:30:13:63:bd:d5:07:f3:9c:e8:a1:37:
15:ae:fe:44:76:d7:e3:cd:30:63:f6:7d:94:63:b7:
dc:51:78:43:cc:f7:5f:91:47:92:eb:7a:ff:8d:73:
9b:42:8f:4c:9a:b6:73:9a:55:96:42:c4:10:a0:14:
79:e2:6d:6b:25:4f:45:cf:bf:59:fd:c1:86:50:0b:
d2:98:7e:f0:c5:0d:58:2d:5f:51:60:ac:91:82:91:
8f:99:89:c2:b1:70:f7:54:4d:43:6e:e0:d4:8f:16:
46:d9:db:eb:c3:9f:5e:aa:74:f2:67:ff:3f:dd:14:
6f:64:bf:7a:a5:ca:d4:d6:b8:3f:db:4d:18:1c:d2:
8c:12:8b:88:f5:25:6b:19:a9:83:fe:d6:7e:5b:68:
71:be:70:53:d7:1a:5c:d9:78:7c:ad:8c:9a:e6:b2:
28:08:71:8c:70:3e:8a:86:0f:e5:14:fa:2b:37:a3:
21:ca:ca:ec:79:c0:21:d2:90:70:26:73:b4:02:80:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:7D:B5:19:CA:4E:11:BB:95:EB:3B:56:72:49:5E:64:DB:40:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01927CB60B5611EFAA7FDD43017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.163.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5b:25:03:ce:3b:af:81:24:cf:16:ee:d2:d5:9c:20:a6:23:
2f:b1:fd:ed:7f:69:51:52:29:7b:42:13:b1:ee:21:27:35:e6:
04:57:ab:94:ed:7f:9f:52:86:65:56:bc:6f:d7:48:5d:b7:3e:
ef:f2:da:c1:27:ae:5e:b0:c0:9b:de:5f:05:e4:04:14:6b:cd:
12:6b:28:c7:35:94:5b:f4:5a:ed:0c:d3:be:1a:4f:1c:df:46:
db:f0:bb:b6:dd:fa:72:49:9c:22:6b:1c:7f:bb:b5:ee:d9:96:
32:ba:50:77:00:c8:c3:b2:b9:b9:68:54:f5:31:ff:fa:13:5f:
6c:a3:bf:af:f1:1e:01:69:12:83:eb:eb:34:b7:e2:71:79:0e:
8c:2c:e7:49:05:e3:a1:81:c2:67:73:cc:8d:29:cc:26:8c:f5:
aa:f3:80:64:5f:9d:1e:f8:b0:a3:a2:99:75:a9:fa:fe:70:51:
c4:8e:aa:65:4e:49:3e:24:da:6a:41:7b:f0:c1:b6:ca:cf:18:
5c:db:05:4b:c9:42:64:a8:58:7b:bc:9d:c4:fa:f9:3b:b0:4f:
64:4c:c1:0d:c9:b9:26:cf:af:51:24:ca:63:d3:0c:30:aa:5f:
8f:9c:ec:cc:88:4c:a6:89:ad:c7:47:52:48:f8:fe:7d:68:e4:
f6:ec:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:16 2024 by rpki-client on console-ams.rpki-client.org