Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1401CD7C088411EFBEA1BA4A017001B1.roa
File: 1401CD7C088411EFBEA1BA4A017001B1.roa (raw, json)
Hash identifier: vkE3kuv/ecnZPVJIxyyzbreOYMDmHYZoBvoTxvPRpLU=
Subject key identifier: 61:72:09:29:49:88:7D:D4:BE:25:47:F6:28:83:92:01:52:8D:D1:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1401CD7C088411EFBEA1BA4A017001B1.roa
Signing time: Thu 02 May 2024 13:01:24 +0000
ROA not before: Thu 02 May 2024 13:01:20 +0000
ROA not after: Wed 05 Jun 2024 13:01:20 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46006 (0xb3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:01:20 2024 GMT
Not After : Jun 5 13:01:20 2024 GMT
Subject: CN=66338ea4-c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:a9:f5:55:73:97:ad:a4:5e:81:d8:6d:85:
f2:ad:b9:62:24:3c:bf:d8:3d:02:2d:29:02:e5:78:
38:0e:37:e7:0b:81:63:df:f8:86:f6:97:aa:9b:8e:
18:86:02:b2:2d:fb:f4:e0:f0:40:34:04:02:74:90:
0d:5d:fc:b0:f2:f2:ab:e5:89:85:d2:52:6b:fd:3d:
22:da:35:65:f1:02:f3:9b:46:40:e2:89:69:c4:0c:
31:d8:b6:c3:f0:b0:6c:4b:46:42:1c:12:12:57:0b:
71:13:43:07:90:20:29:f7:6d:4b:37:c8:5d:05:52:
f0:49:b1:9d:35:9d:14:5b:86:56:27:ff:fd:e6:92:
09:81:05:83:42:be:31:e5:aa:12:c3:e7:62:87:08:
08:53:91:3a:ac:6b:5b:6e:a0:d7:a4:4f:02:35:46:
5d:f8:72:6c:09:04:c7:72:86:8c:04:83:e0:05:9f:
97:68:76:bf:1e:a0:e9:0f:00:c1:48:ab:4f:77:96:
ba:e4:2c:3f:1c:f8:07:fc:86:fb:e9:98:ae:7a:55:
4e:aa:2d:90:3c:bb:7f:c2:0c:45:39:dc:0f:c4:64:
14:35:82:16:b0:1d:ea:40:68:47:61:d3:29:d3:91:
b0:1d:c3:22:d9:f5:d7:da:a7:39:d8:c3:ad:e6:7b:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:09:29:49:88:7D:D4:BE:25:47:F6:28:83:92:01:52:8D:D1:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1401CD7C088411EFBEA1BA4A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c7:e6:2b:0d:58:b9:ce:f1:02:75:37:7d:52:b2:66:d1:ff:
1f:9a:db:94:66:52:61:5c:d5:8c:bb:ea:af:1e:d2:f3:7f:3d:
9a:06:02:0b:cc:85:1f:c9:b7:8f:6f:dc:bc:a9:e6:44:65:3e:
6d:ed:9c:8e:75:a0:b1:af:d8:cb:6e:92:9f:92:e3:e4:f8:26:
b2:1d:85:47:03:4d:0c:78:ba:14:ec:20:a4:e2:34:34:ce:42:
11:f0:84:75:ef:2e:6e:dd:e0:a2:8e:e0:51:52:60:6d:15:d8:
06:ff:c3:4c:99:3f:97:e5:3d:95:fe:52:8e:11:ae:f6:b0:1d:
bc:d7:58:bf:7a:ea:88:7d:3e:9a:38:2d:2b:1f:03:8c:f0:31:
71:5b:04:a0:c1:fb:9d:26:6c:b5:78:ba:8c:91:a5:0c:de:59:
11:0d:61:b0:ba:d5:44:c5:e9:e6:f2:90:ad:f2:99:bd:bc:ee:
45:f9:34:23:cb:c3:63:6b:c2:39:89:b1:01:b4:a3:5c:36:74:
26:03:0d:6f:dd:23:1b:da:51:ca:24:ca:66:7d:7d:de:58:fb:
27:a1:51:31:79:b5:0e:8c:f3:c1:8d:f7:e8:f7:18:c0:c7:06:
74:d4:f4:05:1e:06:f0:a1:e2:18:a8:65:02:c2:36:0e:d6:ef:
ff:b8:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:11 2024 by rpki-client on console-fra.rpki-client.org