Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB4BEF006CE11EFB41ECA5E017001B1.roa
File: 1CB4BEF006CE11EFB41ECA5E017001B1.roa (raw, json)
Hash identifier: +CDlPMKjYp+hI/dBxFII3hfWVt4etfhKJrWjCXNoV8Y=
Subject key identifier: 03:46:74:51:D6:3E:57:8E:79:4D:6E:D7:7C:4F:59:DE:C5:20:69:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B295
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB4BEF006CE11EFB41ECA5E017001B1.roa
Signing time: Tue 30 Apr 2024 08:46:19 +0000
ROA not before: Tue 30 Apr 2024 08:46:15 +0000
ROA not after: Sat 25 May 2024 08:46:15 +0000
asID: 5065
IP address blocks: 154.206.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45717 (0xb295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:46:15 2024 GMT
Not After : May 25 08:46:15 2024 GMT
Subject: CN=6630afdb-aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:aa:85:cf:65:17:64:c3:7e:3e:72:85:01:
74:ee:1a:10:8a:79:70:fe:06:0e:b1:bc:e6:a5:7b:
df:42:ef:aa:03:1d:4b:ee:6c:2e:e2:cb:f6:db:eb:
eb:00:04:57:c3:1d:17:c8:e4:cb:89:16:7a:6d:d9:
b7:1f:a8:2f:a3:08:48:80:c7:30:f5:30:f9:57:c6:
b7:71:f8:0c:31:63:ef:7f:54:a5:f8:de:ab:ca:18:
c5:73:5e:7d:b8:69:c8:57:d8:01:cd:8c:b0:9d:1d:
c8:8d:f2:7f:5b:1c:5a:f2:51:f3:db:f6:da:1e:07:
4e:8a:32:c9:6c:0c:a6:23:2a:aa:87:f8:6d:93:64:
9d:ab:00:99:87:ce:aa:b6:0a:49:a4:ad:36:1a:86:
37:47:a7:b5:cd:7e:59:9f:d6:71:06:cc:c5:b0:b4:
7e:16:b3:2d:3b:47:a2:00:cf:64:e7:ae:85:bf:78:
93:15:ca:cb:04:6d:da:b8:15:5c:1e:41:75:c9:f5:
ea:39:9f:84:32:c1:7f:67:cc:8f:49:34:6e:00:31:
b5:62:71:3d:a3:d3:81:fb:c2:37:da:c7:6c:f4:f0:
31:f9:e6:8a:c0:a9:e9:c2:f1:58:48:6e:ea:07:74:
7d:46:24:4a:c9:12:65:55:10:71:12:84:5b:bd:7a:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:74:51:D6:3E:57:8E:79:4D:6E:D7:7C:4F:59:DE:C5:20:69:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB4BEF006CE11EFB41ECA5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e1:ce:74:66:a7:1c:14:f0:a8:42:ef:83:5b:8c:40:24:7b:
64:7b:9a:b8:fc:47:8b:95:35:6a:49:95:f1:93:3c:69:b1:71:
77:41:9e:72:38:67:20:9c:62:40:e0:9a:48:7b:0a:38:e4:47:
cf:12:c2:d0:a2:91:8b:37:1d:59:14:b3:13:e4:fd:1c:55:34:
95:65:52:ad:50:21:0b:9a:e5:24:58:c4:b5:c0:76:d2:35:72:
e0:f3:a4:91:ea:35:fa:a6:b0:8b:16:31:91:79:47:21:ef:3c:
4f:a6:95:3d:d7:71:0a:e8:33:35:6a:36:10:a8:54:1c:14:02:
17:59:2a:3b:bc:1e:10:01:7f:ac:f5:69:ec:78:4d:61:9d:21:
ce:0b:19:93:8e:25:d1:33:34:52:a8:e8:6a:21:33:4e:97:ce:
1a:14:4c:cc:6a:87:41:37:76:a4:8a:7e:de:12:3d:e1:6f:36:
69:51:2d:1a:7a:9f:23:b6:59:0e:af:a1:fa:49:ee:1d:72:9f:
be:ef:16:bb:dc:8b:74:f4:c2:4d:f0:c4:7e:bc:3d:60:2e:f3:
2a:1b:f5:25:6d:98:3b:05:75:23:2a:92:f1:f2:31:87:47:29:
93:75:c1:06:69:06:4f:a2:9c:bb:4d:6e:c7:05:e5:cc:b2:22:
49:57:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:12 2024 by rpki-client on console-fra.rpki-client.org