Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19123CFC0B5E11EF85733607017001B1.roa
File: 19123CFC0B5E11EF85733607017001B1.roa (raw, json)
Hash identifier: 6vG8RmznJJN/6YeTTZz8Fo9TzSucYofYjA1FsH/wU+c=
Subject key identifier: 87:0C:93:60:11:E1:CE:E3:DC:B2:6E:04:74:CD:F2:CF:D4:EB:70:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B500
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19123CFC0B5E11EF85733607017001B1.roa
Signing time: Mon 06 May 2024 04:07:05 +0000
ROA not before: Mon 06 May 2024 04:07:01 +0000
ROA not after: Tue 11 Jun 2024 04:07:01 +0000
asID: 138915
IP address blocks: 154.203.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46336 (0xb500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:07:01 2024 GMT
Not After : Jun 11 04:07:01 2024 GMT
Subject: CN=66385769-87d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:6d:b9:13:fe:73:46:6f:ee:59:b4:c3:a3:
22:2d:01:1e:93:a1:ca:9a:cb:2a:32:92:6a:bd:c2:
4d:e1:05:78:01:f8:4b:f5:b9:f3:6a:b0:fd:39:d4:
af:55:a3:f0:79:d2:5c:0a:bc:ac:38:99:33:da:a9:
ba:94:b2:b0:2d:27:d5:5d:38:4a:fa:d6:b0:51:f8:
18:a6:3f:81:9b:89:5d:d3:75:a3:31:cf:af:a5:ad:
88:da:04:84:8f:d6:ea:dd:74:cb:62:f7:51:0d:46:
04:75:02:78:f5:67:26:5c:13:30:b9:74:b7:7f:54:
58:d1:cb:ee:e4:cb:d0:6f:a5:d9:50:51:50:ad:5c:
e6:f7:9c:58:01:2f:b9:70:03:57:57:c2:74:ce:59:
cf:f8:9b:9e:01:50:40:ba:2c:2e:a9:9a:83:2a:43:
c6:dc:d4:96:ef:46:b5:a4:12:b5:89:b5:ae:23:a0:
9d:a8:0a:7d:d5:d8:e3:c3:19:d3:7f:3e:85:b3:da:
c9:03:7f:47:c3:dd:c9:c9:4f:4f:b2:ce:fd:ae:95:
47:07:0e:d8:7c:6a:0f:b9:22:49:eb:15:f3:43:b0:
d9:33:4c:2d:38:18:3b:8c:e0:6f:18:71:75:bf:97:
c6:ea:9a:78:05:5c:4c:6b:0b:5f:fa:99:a5:18:c4:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:93:60:11:E1:CE:E3:DC:B2:6E:04:74:CD:F2:CF:D4:EB:70:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19123CFC0B5E11EF85733607017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.154.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:87:3b:07:7f:a4:b7:49:4b:65:11:05:bd:41:f2:7c:17:cf:
0b:6a:b6:49:1b:92:90:66:50:ee:d8:48:18:5d:8e:d7:9b:e2:
2f:ce:62:37:e6:07:0e:d9:08:f7:03:fb:fa:21:e7:08:a7:f0:
bb:cf:79:94:05:a2:9a:9f:54:80:26:cb:09:4a:6c:9a:30:38:
0d:88:74:53:a1:61:b5:fa:dd:04:0c:38:e8:ec:82:25:cb:cd:
f5:4a:de:d3:7a:83:f7:f1:ce:42:69:6f:27:41:a2:2c:78:3c:
40:49:dc:a3:42:eb:c0:e7:8b:76:bd:e9:03:75:df:e1:d2:cc:
01:4d:87:97:c4:69:38:b3:03:73:ef:a0:2b:4f:4a:e3:85:b9:
37:c8:c4:f9:90:c5:8a:0a:66:32:69:c1:ef:66:9a:18:1c:19:
31:4b:36:7f:49:5e:68:87:9e:d6:89:f9:0b:41:83:09:0c:8e:
6b:b0:a6:26:ba:0b:12:ee:2c:fc:ce:49:a2:b2:f7:12:a6:bc:
d4:39:25:5e:60:7b:9c:cb:5c:99:ff:29:d8:d4:d0:00:61:fc:
1c:05:cf:f4:1a:f7:ca:78:29:bd:48:17:df:90:98:39:f7:cf:
a7:70:e4:fc:40:bf:35:c7:83:a9:90:54:cc:f9:ad:cb:53:dc:
1c:4f:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:18 2024 by rpki-client on console-ams.rpki-client.org