Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CAA10D806CD11EFA11AF057017001B1.roa
File: 0CAA10D806CD11EFA11AF057017001B1.roa (raw, json)
Hash identifier: +br2Ru61OaKbVp69sFo+DD54irjutYPQ1xrEBeEFvoM=
Subject key identifier: 6F:B8:CD:50:AE:2B:88:3F:A8:E9:A8:3A:7F:D6:71:C6:B0:10:6B:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B287
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CAA10D806CD11EFA11AF057017001B1.roa
Signing time: Tue 30 Apr 2024 08:38:42 +0000
ROA not before: Tue 30 Apr 2024 08:38:39 +0000
ROA not after: Sun 30 Mar 2025 08:38:39 +0000
asID: 23930
IP address blocks: 154.206.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45703 (0xb287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:38:39 2024 GMT
Not After : Mar 30 08:38:39 2025 GMT
Subject: CN=6630ae12-6a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:75:11:0f:8a:e3:a8:c7:f9:54:a4:b6:1f:
5e:02:df:93:0f:01:45:53:d6:2c:02:28:3c:8d:f1:
7c:d6:45:2f:f3:53:a9:3b:df:58:47:75:be:ba:c5:
f0:f1:09:83:d6:37:d9:7d:4c:93:70:7b:a8:9b:b5:
fd:ad:74:96:5e:2d:f7:a1:a0:23:df:d6:05:40:fa:
91:c6:6a:b1:0a:de:32:f0:67:a3:51:6d:61:8a:92:
5b:d9:81:81:35:eb:6a:e2:83:25:b1:ae:77:17:b6:
a4:fd:cc:9c:8e:85:de:b8:df:73:c2:85:fb:15:ae:
1f:34:0b:e2:56:b2:c9:c7:30:fe:bb:91:98:27:05:
81:63:f6:e8:9c:0e:58:c2:8d:bf:87:1b:84:e4:02:
25:7c:44:d1:1a:01:52:d5:e9:6a:b0:32:3b:e1:96:
37:0a:75:22:67:8f:5d:e4:4f:cc:1d:f7:a7:a1:62:
90:a5:61:2c:32:02:8d:96:c5:28:08:40:9b:59:a2:
e3:19:4b:57:d9:f3:55:a4:f6:e2:f0:30:1e:dd:d0:
ad:7d:70:ac:6e:e7:2a:93:19:05:ae:55:9e:1c:b4:
3c:7e:97:8f:cb:a0:91:18:93:19:8a:59:50:53:c1:
f3:33:9c:44:36:ba:36:24:fb:1f:b9:cd:33:96:b5:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B8:CD:50:AE:2B:88:3F:A8:E9:A8:3A:7F:D6:71:C6:B0:10:6B:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CAA10D806CD11EFA11AF057017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f1:fc:5f:d4:b5:53:ac:b7:a5:08:6d:3e:fe:fa:a1:38:c7:
57:75:4e:e3:e1:0f:57:3a:d8:9b:1f:ed:7a:84:52:c0:cd:18:
01:98:a4:21:26:c4:ef:a0:90:e7:0e:4f:d5:51:75:1c:69:b2:
c3:65:4f:5a:97:64:0e:48:a5:44:38:ee:e8:3d:c0:11:6d:34:
90:69:47:fe:3d:d2:7b:df:40:81:9a:9b:af:2f:6f:8a:ef:ed:
15:11:e7:a9:b1:5c:05:9b:bf:e1:50:e8:09:a4:91:f7:37:79:
ba:96:88:fc:2c:9e:a5:96:dd:b0:86:fa:6b:cc:5c:43:15:9c:
4b:74:ee:98:a2:9a:c1:1d:dc:80:15:bf:19:56:6c:52:c2:96:
1c:35:7b:7b:3d:24:b7:bf:c1:21:e7:59:6c:ef:c0:4d:96:77:
be:21:07:f1:9f:cd:16:1b:93:1b:1b:60:d3:b0:2b:f3:08:51:
d1:2c:e7:03:9a:17:6f:60:9b:02:a4:b9:ff:4d:ea:59:6c:ba:
0d:dd:c4:d9:37:a2:ed:58:be:34:24:05:a7:f7:b7:11:45:a6:
1a:90:48:62:51:23:4e:e0:74:ae:a3:f6:9d:63:16:c2:11:d6:
2b:1d:96:3a:25:b2:5a:59:00:67:a3:f6:c6:df:b5:f2:0f:83:
6c:00:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org