Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04EAB86C061311EFA0632A6A017001B1.roa
File: 04EAB86C061311EFA0632A6A017001B1.roa (raw, json)
Hash identifier: qZy02ZLO2tRzbH0Mt1hgjz2f+TFLGY/NCVOuBh7UM40=
Subject key identifier: 3C:17:68:A5:6A:63:F2:F0:00:F5:2F:A0:F3:0D:91:10:F6:CA:EE:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B24E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04EAB86C061311EFA0632A6A017001B1.roa
Signing time: Mon 29 Apr 2024 10:27:03 +0000
ROA not before: Mon 29 Apr 2024 10:27:00 +0000
ROA not after: Fri 07 Jun 2024 10:27:00 +0000
asID: 138915
IP address blocks: 154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45646 (0xb24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:27:00 2024 GMT
Not After : Jun 7 10:27:00 2024 GMT
Subject: CN=662f75f7-805b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:37:ee:46:61:d1:d8:1b:46:29:85:f1:6a:
cb:9e:99:d1:68:fc:f3:57:d4:f8:6a:1f:0a:ac:08:
0b:86:dd:36:c1:c9:80:02:78:aa:ad:3a:66:1c:a5:
11:eb:2d:6e:41:9f:19:85:bb:7e:de:2a:fb:b4:8b:
9b:8f:aa:85:32:ab:64:0a:6a:28:10:38:c9:8a:9b:
69:f5:de:9b:8f:c1:e4:b2:5c:f2:a6:6c:8b:02:3e:
a9:25:a9:0c:21:5f:e7:48:69:39:c1:36:39:82:a7:
97:0f:83:c7:78:ec:f6:00:7d:ff:a2:83:27:86:3d:
16:11:62:64:11:59:4d:d9:8e:f2:33:4b:b4:cd:bd:
43:b5:57:43:cd:eb:00:1a:1b:0e:1b:13:7b:c1:b4:
30:12:ef:8d:6d:b6:23:29:67:6d:a9:f4:51:6a:a2:
3a:03:98:72:15:03:36:91:91:3c:e7:a5:bd:4b:fe:
21:30:fa:a3:47:19:ad:aa:8d:9b:86:23:c6:15:f3:
b2:ea:79:c5:17:d8:8f:4d:f4:aa:9b:4a:21:81:a6:
e7:1b:95:79:bc:3e:4c:68:16:e5:14:97:45:5d:b5:
44:a4:d9:80:8c:1d:c7:c3:9a:94:01:69:e5:92:54:
84:e3:cb:61:41:ec:ce:68:71:10:6c:8e:8f:ab:20:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:68:A5:6A:63:F2:F0:00:F5:2F:A0:F3:0D:91:10:F6:CA:EE:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04EAB86C061311EFA0632A6A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:ad:09:41:73:46:81:e3:88:49:3e:ee:59:93:a4:25:c6:2a:
54:26:31:0c:c4:99:f7:4d:42:71:df:d4:a7:e5:1d:01:f7:4c:
55:42:23:54:b3:89:ee:d8:cc:0d:39:55:b5:5a:f9:42:74:5f:
31:bc:f1:2b:ca:12:64:6d:e8:09:03:e3:e5:26:73:b7:27:bf:
b8:1c:e1:7a:7d:92:58:10:ff:a2:5d:c8:a7:bc:2f:05:9c:aa:
0f:ca:14:5e:bb:0d:44:37:9c:98:0b:eb:cd:b3:c5:49:d4:eb:
b5:7c:96:82:d1:31:f6:42:ba:f6:a1:2c:4c:36:96:cf:c3:6f:
99:31:ed:e1:df:84:88:63:4c:2d:65:2c:a2:54:08:ad:ee:dc:
11:8d:8b:b6:5b:92:65:c7:b0:2b:66:dc:17:e8:1a:8d:cb:30:
be:2f:34:25:c3:7a:ea:f3:6a:77:48:b6:16:e2:4f:52:d1:ad:
af:12:6e:a7:9f:21:76:3c:59:54:cd:cf:4e:70:cb:18:63:17:
fe:0e:7e:d2:5b:b6:e7:15:7e:f6:8c:cc:08:e4:fb:57:75:16:
b8:81:f1:10:a4:fa:32:d9:2d:42:6f:50:b9:8f:a7:4b:5f:b6:
27:8d:d4:96:eb:6d:8a:c9:2f:dc:2f:d0:f4:41:3e:7b:18:52:
b6:95:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org