Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC2B1CC0B4C11EFB29B096D017001B1.roa
File: 1CC2B1CC0B4C11EFB29B096D017001B1.roa (raw, json)
Hash identifier: dhVE+OGN6ZGrl6GjWTG+9+BHKvOUsy8anfAUzdENTPc=
Subject key identifier: E6:2F:88:6F:C2:1F:DD:BE:BF:8E:71:21:05:ED:2B:2F:99:E8:70:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B464
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC2B1CC0B4C11EFB29B096D017001B1.roa
Signing time: Mon 06 May 2024 01:58:20 +0000
ROA not before: Mon 06 May 2024 01:58:17 +0000
ROA not after: Tue 11 Jun 2024 01:58:17 +0000
asID: 138915
IP address blocks: 154.205.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46180 (0xb464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:58:17 2024 GMT
Not After : Jun 11 01:58:17 2024 GMT
Subject: CN=6638393c-109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:0b:99:60:ad:31:1c:3e:fb:79:cf:41:e1:
8d:24:ac:b8:be:75:d4:1e:cf:c5:b6:aa:f6:50:21:
e3:eb:26:a8:bd:1f:e4:b3:31:2c:1a:6b:11:78:1b:
d0:14:85:f9:d6:18:38:28:e9:d0:0c:82:48:81:2c:
c9:8d:f9:99:5f:2a:f6:5d:d2:fb:64:0b:47:fd:62:
62:ef:47:13:cd:70:c0:d6:b1:84:b0:62:d2:19:0f:
10:19:a3:94:4f:bf:90:3c:e9:86:c4:54:91:fa:c2:
f4:af:32:ff:de:01:c5:61:d0:a6:04:c4:b9:0d:58:
d3:54:d7:18:66:68:52:25:04:6a:a9:86:da:c7:51:
15:f5:56:cc:e7:eb:f3:8b:59:fc:22:72:08:38:42:
86:8f:a1:52:1d:fc:29:5f:b1:ed:42:d0:42:57:97:
70:f3:c3:43:ed:01:3a:6c:2e:5d:6f:9d:b8:d0:25:
f3:e6:6b:6c:9a:71:e2:c5:0e:f7:91:aa:d5:9c:21:
fb:11:0d:8f:d3:c2:5a:f8:44:0d:96:54:5e:41:e6:
b7:ae:28:8c:5e:46:99:c3:d8:9a:1f:d5:94:e0:2e:
bf:dd:2d:56:0b:51:4b:42:66:10:d8:9a:74:6e:8d:
b6:89:ff:58:ff:eb:bd:9a:87:65:00:86:37:12:fe:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2F:88:6F:C2:1F:DD:BE:BF:8E:71:21:05:ED:2B:2F:99:E8:70:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC2B1CC0B4C11EFB29B096D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:6f:2a:8a:4e:b4:5d:63:00:c0:80:3c:18:f7:07:b2:af:
6a:76:c5:fc:6b:83:b4:29:16:fd:f1:25:e0:1c:ae:24:ff:cc:
90:24:bf:67:50:b4:7a:1b:15:f1:00:df:5e:1f:91:31:ec:39:
15:c1:7a:7e:b6:6d:ee:35:ad:69:bc:ac:f4:1d:7d:a7:b4:6a:
ad:67:0f:92:c0:96:7a:97:4d:a4:cc:61:a5:79:80:64:ea:cf:
a4:aa:8b:0a:ad:26:e9:b3:95:cf:85:d0:fc:a1:9b:fb:25:e5:
cc:37:28:64:a5:5d:7f:8d:45:9e:f0:01:8b:30:3f:91:fe:86:
f4:30:eb:58:3a:47:d4:e4:7c:f4:79:f2:c6:21:c9:a0:f7:45:
b4:0a:a1:bb:a2:e1:99:9e:84:6a:fb:af:ca:ce:2d:4b:64:e2:
59:57:7c:1e:e8:ae:0a:56:3b:0f:94:9c:22:5c:4c:f3:47:a4:
a6:ab:3d:42:7a:df:3c:3f:90:87:83:72:2a:71:e5:e0:10:f0:
af:b4:9a:31:e2:e2:45:c9:a1:f5:3a:92:92:9f:60:4c:6e:18:
ea:b3:4f:4e:1d:d7:23:f7:a0:49:3b:0e:55:a9:28:86:78:f9:
94:99:57:78:72:6a:76:32:1b:b0:ca:8a:2b:5b:3f:fc:0e:69:
dd:15:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:00:37 2024 by rpki-client on console-ams.rpki-client.org