Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E92D9F80B5B11EF9AD5D56E017001B1.roa
File: 3E92D9F80B5B11EF9AD5D56E017001B1.roa (raw, json)
Hash identifier: uCSCAxGjthP0p9Y0HFlr9qxB4khtaeZuhoFp4D/TBfQ=
Subject key identifier: D1:0C:B1:09:28:83:34:9C:5E:0B:A8:5D:BB:0D:1E:DF:4E:5C:2E:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E92D9F80B5B11EF9AD5D56E017001B1.roa
Signing time: Mon 06 May 2024 03:46:39 +0000
ROA not before: Mon 06 May 2024 03:46:36 +0000
ROA not after: Tue 11 Jun 2024 03:46:36 +0000
asID: 63139
IP address blocks: 154.203.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46304 (0xb4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:46:36 2024 GMT
Not After : Jun 11 03:46:36 2024 GMT
Subject: CN=6638529f-99dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:00:c1:51:59:0d:dc:bf:e9:79:20:18:96:
5d:df:fb:03:e6:97:4d:c3:09:06:bb:22:5e:77:02:
2b:33:82:07:79:58:4f:4b:30:5a:9b:2c:d2:e7:c9:
69:b1:1d:b3:95:cc:6d:2c:f5:ea:3e:28:fd:4e:66:
f3:09:cf:23:00:38:d1:08:66:ad:83:80:9a:fe:68:
ee:c4:3f:1c:2d:cc:3b:42:e3:82:cb:db:ca:34:0b:
14:86:06:d3:07:28:bb:53:72:b1:50:e7:4f:21:ca:
e1:29:dd:ff:22:44:a3:14:84:d3:ee:b0:4d:4c:7b:
a5:97:c7:f2:41:6f:13:29:da:c3:00:c3:11:52:27:
68:ae:21:9e:df:6b:22:74:35:ac:cf:9c:16:6f:8c:
68:18:37:41:a8:d4:d0:fc:f6:2c:0f:77:f3:a5:8d:
2e:4b:f1:34:59:43:6c:2c:6a:64:11:15:c5:db:ec:
67:50:a0:9f:89:84:a9:69:38:c6:8c:f2:b7:fb:23:
b1:6b:11:d6:f6:69:6c:23:46:9c:c1:93:e0:7e:f2:
48:c6:87:b5:7e:44:5e:58:76:4c:6c:05:ff:a4:d1:
ec:d7:a7:1f:03:cb:49:c9:79:05:fc:e6:f2:ea:97:
3d:35:f8:61:fe:c8:0d:e1:87:d9:7f:8e:ef:1b:da:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:B1:09:28:83:34:9C:5E:0B:A8:5D:BB:0D:1E:DF:4E:5C:2E:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E92D9F80B5B11EF9AD5D56E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.174.0/24
Signature Algorithm: sha256WithRSAEncryption
05:77:d7:67:44:a5:b3:e4:f4:32:b3:64:63:d7:c2:ae:e7:bd:
3d:9b:8d:b8:8d:04:0b:37:d8:67:bf:6f:1e:c1:8e:1d:8a:3a:
26:ee:cd:bc:46:37:0f:0e:80:ba:a1:33:e5:aa:6f:3b:da:8c:
66:90:09:b1:8f:9f:70:38:27:a6:75:56:07:be:ed:b2:77:f3:
26:1f:60:6c:a1:5c:3d:7e:f6:1b:92:a7:7d:14:e8:fd:57:6e:
e3:2b:d2:d6:bf:16:63:5b:3f:2e:b2:ce:bd:34:22:16:91:ec:
82:ee:61:1b:b4:6c:5f:ac:e1:99:12:d6:4f:af:82:05:70:f7:
d3:41:a9:32:fa:0b:0e:12:48:d2:34:e2:46:a5:8f:85:10:9a:
75:19:1e:e8:ec:2e:e4:01:32:7a:9e:e2:ad:ce:56:71:f3:cb:
1e:ca:db:4a:6c:81:4d:46:c2:4b:1d:eb:3d:af:6e:34:ff:1d:
92:52:f0:dd:a4:57:f2:a3:7f:e7:61:89:5a:a2:86:fb:44:cf:
57:99:30:fd:9a:04:61:e8:00:c9:16:27:81:2d:8f:ce:c1:1f:
47:2d:71:92:c9:66:d0:d9:02:86:c0:06:7f:90:ac:75:1f:d4:
6e:9e:eb:f2:f5:9b:24:b7:b6:40:91:32:a8:7b:a7:4e:d2:55:
8f:a3:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:14 2024 by rpki-client on console-fra.rpki-client.org