Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0254A9640CE911EFA3D0B519017001B1.roa
File: 0254A9640CE911EFA3D0B519017001B1.roa (raw, json)
Hash identifier: HLOWWj+beOTvtGbishYwb0sK5FTAYEDhaViMhnpyCKI=
Subject key identifier: 8A:54:4C:27:B2:ED:69:56:AE:C8:C4:BD:00:C6:6A:EE:E3:10:7C:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B574
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0254A9640CE911EFA3D0B519017001B1.roa
Signing time: Wed 08 May 2024 03:13:58 +0000
ROA not before: Wed 08 May 2024 03:13:55 +0000
ROA not after: Thu 13 Jun 2024 03:13:55 +0000
asID: 138915
IP address blocks: 154.206.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46452 (0xb574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:13:55 2024 GMT
Not After : Jun 13 03:13:55 2024 GMT
Subject: CN=663aedf6-65d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:fc:e0:87:43:70:cf:bb:61:0f:a5:9e:19:
b5:e3:4b:a1:d5:f5:49:eb:38:b3:d2:c3:25:0c:22:
04:b5:34:d4:84:67:82:8e:f3:3d:c0:ec:f5:4b:c8:
f3:95:77:79:d0:36:03:96:b2:91:b6:ba:3e:01:0b:
0d:7c:72:4d:c7:10:c6:e6:6d:a9:ae:ce:ff:2a:48:
32:73:97:a0:40:af:6c:38:e0:92:fc:ca:d1:c0:65:
ce:d8:8d:66:5f:75:fc:c3:27:67:de:f7:26:d2:28:
80:99:dd:1d:bf:c6:77:ce:ce:71:a7:97:d8:bf:f6:
65:4d:2f:95:fd:e3:97:97:b6:59:71:16:47:2d:43:
8f:07:24:74:39:42:32:f5:e6:2a:25:1f:61:ac:b7:
0d:f7:db:4e:74:4e:25:80:76:d2:60:35:16:76:25:
7f:f4:e4:30:d1:9a:ba:9b:b1:e6:63:09:4a:0b:9e:
17:69:4e:3f:20:97:9f:1f:3e:0d:fe:a0:d7:44:36:
f7:85:fe:11:37:b5:0d:bf:10:81:0e:17:1a:4e:b6:
29:3a:f2:39:38:8a:21:26:65:5c:f6:00:50:9b:2e:
9d:93:cf:34:fb:d0:e6:e3:b9:75:c6:0b:54:41:40:
f5:b6:fe:8b:b7:ea:7d:3d:9b:7b:e6:31:de:e2:5a:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:4C:27:B2:ED:69:56:AE:C8:C4:BD:00:C6:6A:EE:E3:10:7C:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0254A9640CE911EFA3D0B519017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/19
Signature Algorithm: sha256WithRSAEncryption
55:44:e1:0a:ec:ec:6e:35:da:fa:6e:50:bd:b9:41:17:27:c5:
19:66:69:42:36:a5:60:5e:6c:22:cd:a6:20:ff:94:f6:40:3b:
6e:bc:52:db:d0:85:3b:ca:8c:6e:50:6e:3f:8d:2c:bf:2c:73:
51:cf:c1:12:34:77:eb:6f:79:50:84:78:d5:50:27:f9:48:3e:
0a:b2:e0:1b:f1:10:b1:aa:2d:0b:a2:a7:d9:3a:63:e9:b1:62:
4f:73:3f:02:01:ad:f8:96:cd:66:c4:39:83:dc:8c:3d:e0:ae:
56:b2:2c:41:98:49:fd:ec:a1:26:7c:dd:71:ae:37:0d:62:65:
de:23:b9:70:fe:fd:68:09:4d:d1:31:3f:ba:9b:2a:0c:c7:58:
29:8d:a7:56:d7:72:b7:f2:3c:d0:12:2f:14:25:89:55:1c:d6:
03:ef:a7:d0:4f:91:b1:c9:63:ba:96:68:21:8b:01:a2:2c:97:
85:14:06:56:5f:a1:d4:c9:8c:1a:d3:5e:08:9d:83:65:68:47:
22:b6:cc:f9:10:54:e8:7b:c1:14:0c:c1:5a:bb:eb:c7:d6:78:
ce:36:49:c2:f4:c9:0c:59:c0:c4:8a:0a:d9:96:17:53:a7:2b:
3c:f9:5c:a9:1f:ad:70:bb:eb:89:a6:0a:ae:38:44:63:71:5b:
ab:7b:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:10 2024 by rpki-client on console-fra.rpki-client.org