Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E36F688008011EFACEA9DF9007001B1.roa
File: 2E36F688008011EFACEA9DF9007001B1.roa (raw, json)
Hash identifier: Jk4ozXHfSf+jiLRsmVjVtNcweDm37AGAifv2oBpLEno=
Subject key identifier: AB:AF:62:52:3A:84:22:03:B8:1F:51:91:97:5A:7B:1F:83:47:89:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E36F688008011EFACEA9DF9007001B1.roa
Signing time: Mon 22 Apr 2024 08:13:20 +0000
ROA not before: Mon 22 Apr 2024 08:13:17 +0000
ROA not after: Tue 04 Jun 2024 08:13:17 +0000
asID: 140869
IP address blocks: 154.81.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44696 (0xae98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 08:13:17 2024 GMT
Not After : Jun 4 08:13:17 2024 GMT
Subject: CN=66261c20-8267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:e8:5e:71:42:8b:64:33:21:b2:cf:00:44:
78:fa:2b:dd:3a:ad:81:00:5b:c6:f2:18:a1:60:fa:
ad:8b:e6:bd:59:46:2e:8f:0f:0e:6c:a8:28:ca:f2:
fa:38:34:b2:d4:15:69:e9:16:10:f4:8a:b2:02:c5:
24:17:ea:28:0c:c0:21:bb:44:c1:e4:53:bb:82:03:
35:5a:e9:1e:43:c9:c1:2c:2f:28:b7:47:dd:48:02:
73:9a:38:4f:25:e1:55:9e:61:08:8f:fe:f2:8d:50:
ae:2c:6c:0e:85:56:a2:89:7a:80:4c:6c:e8:ae:e6:
af:1b:b1:c8:88:05:fd:f8:f9:ed:0e:aa:e3:1a:c0:
35:48:3d:3f:83:96:1f:fd:1d:f3:f2:be:41:6f:74:
84:ae:88:3c:45:04:6b:dc:ce:36:24:20:f4:cc:92:
5b:86:d1:49:20:51:72:b3:2d:ad:75:10:ed:24:8f:
ef:5c:07:38:a0:89:ce:a2:aa:e8:05:5d:49:f4:f8:
6c:77:e6:7a:e9:e4:52:7e:fe:11:ab:16:96:0f:b8:
70:38:f0:ec:f4:77:1e:4d:be:a1:61:f0:81:3e:b2:
d5:77:31:46:60:c4:6b:2d:a9:5b:b8:14:a9:7c:56:
06:6e:c6:13:cb:de:5a:c1:ca:d3:7d:e2:6f:b1:ca:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:62:52:3A:84:22:03:B8:1F:51:91:97:5A:7B:1F:83:47:89:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E36F688008011EFACEA9DF9007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.33.0/24
Signature Algorithm: sha256WithRSAEncryption
31:52:53:46:dd:18:0d:4e:9b:1d:8c:09:6a:82:14:62:a6:5c:
ee:e4:67:82:60:a1:91:22:a1:95:82:bc:1c:2c:d0:bd:93:91:
35:7e:e9:06:7e:6f:97:b9:ec:5d:ef:43:f2:3a:78:6a:d3:1a:
81:88:fa:cc:6b:e6:f3:92:0b:53:fb:c8:f8:75:c6:51:26:c0:
70:bb:aa:88:eb:88:49:ed:57:ed:71:38:44:60:96:97:05:98:
e1:44:ca:45:91:92:35:8e:5b:84:56:2e:79:dd:ce:23:5b:2d:
c3:d8:88:f0:9a:87:e4:ec:9a:32:83:1e:4e:f3:2b:5d:e0:a9:
19:ed:e0:7b:a6:39:27:f7:3a:1d:82:8c:ca:e2:8c:6d:e0:f1:
1b:b1:68:dd:68:02:73:ee:23:4a:0b:d7:21:13:bf:7f:8a:ec:
01:cf:73:83:a2:9d:76:3e:73:13:d8:de:28:3d:52:42:45:3b:
d1:f6:2f:83:68:98:e9:9c:9c:25:57:a7:8e:b1:b1:f4:a9:c8:
64:6d:2a:96:84:9f:50:1e:80:36:89:ff:f4:68:d3:a9:b0:17:
7b:69:62:91:10:95:fe:66:4f:fd:8a:78:c0:5d:c7:86:e6:91:
f2:81:5d:5c:be:b4:a1:8a:15:96:fc:34:4c:c4:c5:8c:c8:56:
12:8c:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:13 2024 by rpki-client on console-fra.rpki-client.org