Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3381F4C6FF9A11EE9A86FB26017001B1.roa
File: 3381F4C6FF9A11EE9A86FB26017001B1.roa (raw, json)
Hash identifier: 8i5mwo0LOJVDnzuqtRL8BjFb7o7aubE+8OHugG59/Ro=
Subject key identifier: B4:1B:A0:68:07:F1:BC:27:5C:96:CE:23:23:45:21:39:6D:D2:9B:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3381F4C6FF9A11EE9A86FB26017001B1.roa
Signing time: Sun 21 Apr 2024 04:47:05 +0000
ROA not before: Sun 21 Apr 2024 04:47:02 +0000
ROA not after: Mon 27 May 2024 04:47:02 +0000
asID: 138915
IP address blocks: 154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44666 (0xae7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 04:47:02 2024 GMT
Not After : May 27 04:47:02 2024 GMT
Subject: CN=66249a49-cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:b6:79:dc:1a:23:61:7d:a2:e4:b2:f6:f3:
a4:10:5e:61:8f:dc:a7:91:57:23:e7:ce:17:03:0f:
a2:b5:98:87:c3:be:a0:70:1d:4c:a2:cb:89:34:82:
b1:46:80:6d:03:31:14:55:9e:6b:e6:c2:dc:f7:cf:
84:9c:2c:f5:a4:bc:2a:4b:a3:46:0e:8b:a6:52:35:
a8:35:2a:dd:f3:07:dd:c0:54:2a:11:4f:74:96:dc:
2b:d7:34:84:84:97:aa:14:7d:93:f7:a7:7f:8a:f6:
29:79:10:5e:71:e8:8f:e5:e8:20:c1:1b:c2:8f:0c:
6c:73:65:c1:f7:11:86:49:3f:b2:28:5b:92:bb:a1:
48:35:28:bc:44:2e:f9:cf:83:ab:26:2a:94:6c:0f:
96:24:64:21:a0:3b:a2:ec:e4:f1:9a:30:5d:e5:de:
36:88:37:ac:da:43:28:78:4a:df:53:d2:12:a6:40:
7a:31:65:fd:f6:43:43:18:2b:ed:8b:09:c7:a2:b4:
3d:ea:97:2b:e2:b6:99:d0:4f:ac:54:23:66:d0:be:
94:06:a4:de:93:26:10:57:63:4d:1e:31:37:00:78:
01:e5:58:cf:1e:49:a3:11:74:04:f0:9e:ac:e4:e6:
24:cb:fd:cf:55:8a:14:3e:12:8a:7b:87:9c:67:10:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:A0:68:07:F1:BC:27:5C:96:CE:23:23:45:21:39:6D:D2:9B:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3381F4C6FF9A11EE9A86FB26017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5d:cd:20:ea:fd:3c:65:28:79:a3:a3:19:a5:00:20:5f:f2:
46:2f:18:1d:b1:14:a5:07:c0:ae:05:35:f9:9d:8e:22:c7:c2:
b5:0d:dd:c7:c6:2d:8d:0c:c6:26:52:1d:3d:3f:47:de:76:eb:
00:c0:b1:82:45:84:29:f9:96:41:a1:54:d2:ac:9f:46:3c:61:
2c:c5:c7:24:f2:b0:02:d7:7a:21:f2:25:da:53:14:5a:de:3e:
9b:fc:70:b5:49:6e:39:8e:4f:69:ef:3c:8d:49:7c:30:5c:fc:
8c:15:8e:46:03:6a:7c:fe:b0:29:78:68:4a:0a:21:a9:60:a5:
72:b4:65:07:20:70:77:7d:3f:68:fc:3f:bb:c3:e1:e8:e8:dc:
47:2c:c4:46:24:d3:99:54:1b:75:ac:93:da:72:f5:23:6f:8e:
96:7f:1a:84:63:fc:65:e2:92:bb:ac:13:06:bb:db:ca:e1:9c:
14:eb:47:2b:df:72:a3:41:b1:e3:8f:76:ce:9a:42:92:a0:89:
6e:42:ba:54:cb:94:e0:cb:53:94:c0:c9:e5:48:82:e8:c8:fa:
7f:88:fd:64:be:ec:7f:cd:f3:0c:a2:e9:01:30:0a:2c:49:aa:
c9:69:67:4b:64:10:4e:07:80:5d:4b:5e:f0:64:35:85:fd:97:
93:db:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:20 2024 by rpki-client on console-ams.rpki-client.org