Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197FA0F807A811EFAD72434C017001B1.roa
File: 197FA0F807A811EFAD72434C017001B1.roa (raw, json)
Hash identifier: XONyHyg8iz+PTjq8m2W6yJbknBYZTuLdwuntNzWf6iU=
Subject key identifier: 48:E2:E8:A5:30:A1:04:43:83:93:7D:36:B4:98:C7:33:0D:74:1E:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B34A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197FA0F807A811EFAD72434C017001B1.roa
Signing time: Wed 01 May 2024 10:46:44 +0000
ROA not before: Wed 01 May 2024 10:46:40 +0000
ROA not after: Mon 29 Jul 2024 10:46:40 +0000
asID: 400175
IP address blocks: 154.203.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45898 (0xb34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 10:46:40 2024 GMT
Not After : Jul 29 10:46:40 2024 GMT
Subject: CN=66321d93-e75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:b7:52:f9:a8:d2:fd:c4:0e:c4:11:fb:aa:
7c:c5:ca:40:df:ab:ae:a9:11:0b:7c:4d:12:83:1c:
0e:22:4c:b9:c9:61:d4:a0:61:ea:b4:22:5e:10:92:
35:7b:00:a3:55:d4:b8:10:5a:1b:c5:58:a0:cd:e2:
0c:0f:bd:b0:bc:f3:17:57:9f:03:bd:f1:bd:51:0f:
4d:b7:4d:83:0c:40:44:36:a2:58:de:96:68:31:ce:
e3:85:33:d7:c1:7f:64:94:f4:67:e4:9f:ac:48:5d:
78:d7:41:64:80:97:4e:18:fe:78:76:e0:49:27:32:
37:75:19:e3:19:fb:2e:f7:b1:18:4a:72:b6:d0:59:
6c:aa:85:ec:cc:8b:d2:91:75:d8:50:46:00:bb:9a:
aa:6d:fb:20:2c:d2:46:90:ce:71:46:0d:03:80:df:
81:59:15:29:ce:87:60:2b:9f:fb:dc:00:e7:27:05:
1d:fd:7c:82:3c:6a:9e:42:5d:d1:11:1a:a3:46:03:
c9:da:8f:0e:bc:1e:ec:67:2c:94:5d:d0:92:d8:37:
2d:9d:ae:5a:da:6f:88:19:ee:e6:87:5e:c8:8f:b3:
22:a9:1f:a1:f4:ed:67:99:b5:e6:cb:40:c3:2a:43:
24:37:bc:4e:34:29:06:c7:90:81:74:1b:c5:1e:8b:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:E8:A5:30:A1:04:43:83:93:7D:36:B4:98:C7:33:0D:74:1E:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/197FA0F807A811EFAD72434C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:9c:96:1c:df:ff:fe:e5:07:18:d2:a7:e6:ea:9e:0d:a5:a7:
ad:ae:5e:e9:c1:e7:49:71:53:5f:49:2e:4f:83:54:07:68:f3:
b7:dc:34:8b:a1:d3:62:70:ab:4c:b5:d8:29:ca:b0:9b:25:05:
54:a8:98:34:9e:60:10:88:b1:ec:7a:82:be:eb:5b:a6:47:06:
d5:e1:10:79:1d:0f:d3:a6:1a:a3:f6:b5:09:a8:9c:c5:62:91:
c9:0e:c8:fb:bb:36:ed:b9:e9:35:b0:f3:84:05:d6:aa:60:eb:
15:58:a5:7f:e4:c4:f5:0f:e4:32:7a:95:08:2d:54:fe:fa:35:
1c:4d:c8:26:4f:eb:be:e8:62:9b:95:15:2a:24:a1:e6:62:d4:
c3:73:b1:d1:d5:76:69:65:92:fc:d1:6c:f4:48:5f:e3:7a:ea:
52:1f:01:51:5e:cb:2e:50:d6:2d:d1:5f:b4:1a:4d:93:b0:d7:
84:d1:86:c8:9b:c3:6b:65:9d:a2:51:3c:68:9d:5b:29:78:58:
8b:96:b4:fd:e0:5a:f6:df:39:20:4b:bb:90:c9:b6:24:d7:16:
0b:ef:48:d3:54:c6:d4:66:bc:23:37:1b:3d:30:6a:60:56:71:
c5:a2:58:93:29:07:17:bf:40:bb:f9:e7:0e:4d:a2:f7:d5:fe:
0e:45:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:00 2024 by rpki-client on console-fra.rpki-client.org