Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7A9992037C11EF8DF8524C017001B1.roa
File: 1B7A9992037C11EF8DF8524C017001B1.roa (raw, json)
Hash identifier: eY+YeVdngUp3TWGqngZTABHE4v7WiJxZrsF973VB25w=
Subject key identifier: 27:81:38:A4:36:85:74:A9:3F:84:A1:45:6B:EF:68:36:A9:24:3F:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B126
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7A9992037C11EF8DF8524C017001B1.roa
Signing time: Fri 26 Apr 2024 03:21:44 +0000
ROA not before: Fri 26 Apr 2024 03:21:41 +0000
ROA not after: Sun 26 May 2024 03:21:41 +0000
asID: 62240
IP address blocks: 154.194.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45350 (0xb126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:21:41 2024 GMT
Not After : May 26 03:21:41 2024 GMT
Subject: CN=662b1dc8-a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6f:a9:45:e9:de:02:cf:d8:3f:e2:32:a5:fe:
83:59:19:e0:21:62:1d:d4:00:ea:fc:27:67:f2:03:
a8:cf:f7:d0:c4:f0:a2:16:9d:8d:4e:6f:90:1f:15:
23:d6:d2:43:42:9c:b3:63:11:7e:56:26:1b:e3:58:
d2:aa:ee:2e:bc:c0:7c:91:47:cb:a6:de:bb:21:32:
b5:a7:7d:af:bb:75:14:4a:d8:bc:60:c3:12:dc:80:
1c:c1:23:39:92:3f:cd:9b:3a:86:a9:85:c9:2d:2c:
cf:b5:c3:9e:bf:d2:a8:f5:76:07:4b:9f:cb:74:ef:
6b:ba:bb:f9:b5:ed:e8:ab:47:03:e6:82:f9:1e:e7:
86:21:3e:fe:a8:8d:cf:46:b1:50:34:5c:88:0a:bf:
e6:a8:ab:a3:20:ac:f7:f0:a7:84:ff:20:8b:1e:d2:
77:a3:bf:27:ef:1a:63:f2:1a:76:ae:0c:a8:37:5d:
b1:27:c0:30:23:d7:8d:78:05:6b:ac:95:8a:11:12:
71:53:91:01:fa:9f:eb:14:d5:aa:0a:26:52:9a:6a:
87:2d:63:2a:f2:c9:80:05:32:23:56:d0:74:e5:b2:
4a:02:d2:dc:49:ae:2b:e2:89:bc:b3:91:86:48:e0:
72:b5:02:11:e5:44:d2:b7:fc:07:03:88:f4:61:54:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:38:A4:36:85:74:A9:3F:84:A1:45:6B:EF:68:36:A9:24:3F:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B7A9992037C11EF8DF8524C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:26:13:11:32:1a:db:ff:3e:94:05:85:b6:72:44:16:e3:59:
8f:ef:c4:0c:04:f6:0d:2c:02:cd:0b:b4:be:5c:36:d5:c1:96:
aa:67:cf:37:4e:1b:af:2b:4c:91:55:f8:e0:86:90:a5:4e:32:
7d:a7:87:dc:37:2c:e3:b9:f0:19:4b:aa:45:60:d9:3c:de:e4:
ac:0a:78:78:92:52:34:ec:2b:d5:df:81:9f:59:ec:57:65:b9:
ee:bb:dd:27:85:a8:17:0c:f8:a3:74:3a:7c:44:60:34:e5:31:
10:4a:e2:32:5d:f4:2a:f4:58:27:93:10:10:ca:8d:b4:c1:fa:
43:d7:b5:2b:93:f9:d8:e3:eb:58:54:b0:45:a3:41:ab:e1:ac:
a3:cb:7e:2b:8f:01:bb:c9:db:78:a8:1a:cc:48:b7:2f:ce:24:
03:e8:f2:c9:34:6c:bf:d5:b6:0c:1c:2c:5d:0e:84:bb:fe:87:
f7:0d:a6:a2:ef:d9:b4:4f:1c:61:a3:ac:50:47:52:b3:c0:f3:
1e:a4:02:46:ba:ae:cd:a0:8d:1a:f1:94:e2:bb:60:12:a2:9b:
35:6d:5b:ed:92:8c:87:ff:5a:f0:18:76:95:89:c3:96:5b:ce:
b3:91:a1:85:1b:17:f5:8b:b7:c6:85:a3:31:ae:fd:58:d4:58:
a1:20:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:12 2024 by rpki-client on console-fra.rpki-client.org