Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3696A13E0B5211EFAC5AAB23017001B1.roa
File: 3696A13E0B5211EFAC5AAB23017001B1.roa (raw, json)
Hash identifier: iiai3cm0HadOswdT1UO6ZYI6bsXDUwYBQfsAPx8/V7c=
Subject key identifier: A3:73:AB:44:71:F4:A4:68:BD:83:2B:C8:AA:72:42:05:77:A8:E9:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3696A13E0B5211EFAC5AAB23017001B1.roa
Signing time: Mon 06 May 2024 02:42:00 +0000
ROA not before: Mon 06 May 2024 02:41:57 +0000
ROA not after: Tue 11 Jun 2024 02:41:57 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46252 (0xb4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:41:57 2024 GMT
Not After : Jun 11 02:41:57 2024 GMT
Subject: CN=66384378-2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:1b:ac:ed:4b:62:41:c1:56:78:dc:41:f0:
d2:97:3d:f4:0e:8b:fc:98:c3:5d:44:e4:aa:ac:f5:
b5:eb:01:d0:cb:7d:69:c5:11:4a:fa:69:50:77:b1:
4c:44:00:f8:d0:17:35:3a:0f:5f:0b:db:90:59:2a:
b9:b3:a5:90:9a:b1:43:6e:a0:6c:18:0b:f3:14:21:
58:58:dd:96:48:5e:42:f7:45:45:f1:e8:e1:db:7e:
30:94:f9:d9:8e:1e:a4:74:f7:58:20:2b:d2:c4:95:
5c:82:4d:d2:80:62:34:bc:f9:3c:8e:51:8c:bc:a2:
c7:37:7f:2e:5f:aa:73:70:9a:b7:f1:62:4a:d8:e3:
9e:9f:9d:ff:93:c6:35:6f:e1:a6:a1:34:25:bf:93:
54:d4:61:dd:a3:6e:1b:78:fd:75:ce:19:0d:8f:1d:
79:29:94:af:92:a2:5a:fa:3a:be:0f:23:2a:ee:09:
6a:b3:12:5c:3d:ab:f8:75:e9:19:be:f1:36:08:86:
5c:d1:0d:10:20:60:b6:89:6d:ec:af:38:1c:53:ce:
ce:39:59:c4:a2:f0:ba:1a:82:6c:86:6a:d9:f3:28:
09:9f:43:c5:39:5c:d8:2d:f0:8b:a3:56:1e:e2:ad:
f9:9f:b9:04:53:1e:8e:91:07:8f:19:20:ac:f0:d6:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:AB:44:71:F4:A4:68:BD:83:2B:C8:AA:72:42:05:77:A8:E9:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3696A13E0B5211EFAC5AAB23017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c3:0f:b8:1d:2d:68:d7:f3:3f:6c:3b:b9:67:2a:ac:68:d3:
02:24:00:f2:d3:12:bb:39:c9:a0:9c:62:3f:47:d3:d9:a4:8c:
1e:c1:0a:8a:bb:2f:e6:ee:ca:a5:49:20:59:f1:60:b8:4b:eb:
2f:18:dc:08:b2:30:9a:76:21:9e:de:8d:f6:af:67:75:42:c5:
82:b7:a8:62:ec:ce:b6:00:64:03:e1:4c:33:fc:45:c3:e3:db:
df:98:bf:93:e9:8c:39:a3:1a:a7:03:b4:d0:a3:70:04:a7:8a:
d7:9b:bb:29:00:48:1a:22:12:8f:c8:87:d7:30:cc:00:0b:58:
f2:21:ba:cc:ff:6f:4b:6e:d2:f7:2d:f2:8a:17:db:31:d3:28:
f5:18:12:25:ee:c5:de:14:60:6b:56:27:ea:11:63:4e:9e:78:
11:20:a9:b1:94:58:16:0c:bb:9c:33:34:02:19:59:43:15:6b:
81:2f:08:bc:0c:d8:ee:a4:53:e7:e9:b4:05:b9:96:bc:bb:a3:
51:27:b8:cd:5f:92:be:34:14:1e:16:14:ce:28:52:76:1a:44:
f0:0d:89:d9:70:5d:6b:79:8b:dc:75:e2:ed:97:b6:50:10:0e:
d4:c3:11:cf:27:24:ce:e0:7d:68:93:9e:44:6a:42:f5:0f:26:
6e:37:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:20 2024 by rpki-client on console-ams.rpki-client.org