Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E82005C06D011EF9578C66E017001B1.roa
File: 0E82005C06D011EF9578C66E017001B1.roa (raw, json)
Hash identifier: hagkv8hGx+fx0TBXCNQIbXu7wJUA17Vy2VzS45HFQqs=
Subject key identifier: 93:3B:51:69:C8:35:EE:E4:9E:7A:76:E9:76:3E:F3:4E:89:C2:D6:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E82005C06D011EF9578C66E017001B1.roa
Signing time: Tue 30 Apr 2024 09:00:14 +0000
ROA not before: Tue 30 Apr 2024 09:00:10 +0000
ROA not after: Sat 25 May 2024 09:00:10 +0000
asID: 5065
IP address blocks: 154.206.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45731 (0xb2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:00:10 2024 GMT
Not After : May 25 09:00:10 2024 GMT
Subject: CN=6630b31e-a114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:0a:68:1c:5e:36:75:b1:42:71:35:67:00:
41:38:02:ff:0c:cf:a6:4a:23:84:d8:5e:cc:d3:bb:
18:46:f8:50:d2:c9:dc:cd:8e:10:ee:71:81:54:f1:
c5:25:ff:10:db:6f:fa:ec:23:70:f6:f8:76:78:f4:
f0:3e:7a:7d:a1:75:79:bc:c2:7d:34:e6:c9:86:c0:
ac:a3:83:4a:03:3d:6b:d2:07:9e:9c:d2:62:16:84:
c0:de:05:e5:9c:e2:2d:4d:32:cc:2a:3f:47:d2:d7:
a3:e6:f2:f7:60:c1:7f:85:97:4d:90:96:8b:25:c1:
a9:38:52:44:43:99:5c:f4:c7:a1:bf:52:6e:e9:f9:
89:6b:8a:f5:af:3a:a1:a3:11:e9:0c:07:d6:b3:0b:
d4:b2:a4:fe:ed:1f:9c:6d:14:c7:21:f4:77:19:ec:
ae:6b:48:08:95:57:87:eb:59:54:59:ff:44:c9:32:
3c:2b:ea:8e:3c:79:3f:63:47:92:a0:a2:04:89:32:
7a:f4:23:31:d8:74:3d:38:c1:1b:cc:09:d1:69:4c:
aa:0e:ff:85:62:6e:bb:92:85:d5:17:b3:19:d2:03:
f0:5f:fc:61:ca:e2:cf:4f:82:6d:34:c4:d3:61:4e:
9e:b2:12:e8:2e:44:7f:db:8f:96:b4:2c:45:5d:e6:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3B:51:69:C8:35:EE:E4:9E:7A:76:E9:76:3E:F3:4E:89:C2:D6:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E82005C06D011EF9578C66E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.39.0/24
Signature Algorithm: sha256WithRSAEncryption
42:df:27:8b:00:11:3d:d0:1f:16:d5:5a:b7:d6:d1:d5:11:1a:
d7:4f:78:00:a1:6e:21:74:d3:54:bd:b5:11:78:f4:85:7d:61:
f0:d7:bc:40:4b:fe:41:11:83:8c:20:37:73:a4:45:8f:b7:e6:
01:78:5c:5c:1a:ce:c6:54:0c:84:59:42:98:4e:5f:63:a7:05:
e8:6b:75:ea:0c:93:24:11:54:38:42:49:5b:d5:12:82:a7:96:
f8:5b:3a:dc:19:b2:be:07:81:c1:0f:49:36:2a:84:39:43:82:
68:f9:b7:80:85:02:8a:59:bf:b6:ef:d0:1e:3f:f8:f7:63:0e:
1c:fd:a4:d1:23:fa:5e:de:c6:28:d7:77:20:2f:99:f6:16:41:
76:82:5e:bd:d9:a1:88:8e:23:38:9d:c4:b0:0e:17:36:07:a8:
17:e9:d5:27:b8:99:30:dc:30:0a:8f:16:80:73:a4:0d:6e:cf:
35:f1:7a:a0:36:6f:74:8f:aa:18:37:b0:de:e4:af:1a:56:2a:
0e:c0:51:3c:fb:c8:37:f9:14:cf:24:df:07:df:71:7a:04:db:
f9:c8:e1:99:6f:2e:51:ab:dc:ca:14:98:d4:38:66:78:1a:39:
d3:c8:d7:d2:de:90:d4:fd:45:a3:2b:03:70:ec:43:66:5c:41:
65:2e:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org