Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8AE8340DCA11EFB98B4645017001B1.roa
File: 3F8AE8340DCA11EFB98B4645017001B1.roa (raw, json)
Hash identifier: rngZkoL3crBYFwKuL7HxYNj+grudB0oaKserJGMQV8s=
Subject key identifier: 52:C1:0F:69:D7:B6:5F:5E:5A:7F:AB:88:B3:F5:6C:9E:FD:8E:6B:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B615
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8AE8340DCA11EFB98B4645017001B1.roa
Signing time: Thu 09 May 2024 06:06:17 +0000
ROA not before: Thu 09 May 2024 06:06:14 +0000
ROA not after: Wed 29 May 2024 06:06:14 +0000
asID: 141883
IP address blocks: 154.208.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46613 (0xb615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 06:06:14 2024 GMT
Not After : May 29 06:06:14 2024 GMT
Subject: CN=663c67d9-8c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:72:8a:d5:1f:2b:5e:b1:bf:ed:0f:c7:4a:
32:f3:a3:ab:15:87:4a:f7:cc:d3:26:63:07:9b:f0:
0b:63:4e:e1:1b:eb:63:07:db:6b:28:c0:68:9f:67:
b3:ba:13:06:53:9b:bf:37:ae:f0:9c:6a:75:47:4d:
2e:b6:47:8d:2d:07:5c:42:45:77:83:ad:cb:50:b3:
40:22:2b:4c:90:a6:d0:b1:d4:65:89:d3:7f:5b:a2:
01:c4:eb:ad:f4:cb:53:6c:3e:85:c2:cb:5a:b5:ae:
57:32:00:a4:a9:6a:66:e9:3b:4a:25:fd:b4:c2:cf:
ca:13:03:af:d4:72:e3:41:bf:6c:88:a2:b6:61:00:
e1:f0:5c:8b:a7:dd:f0:08:d2:f5:0b:fa:1d:e9:d6:
ee:cd:8e:d2:62:03:59:a6:7d:87:7a:68:7b:fd:2c:
c5:fb:4e:80:42:54:67:03:a7:b8:1f:6f:cf:69:2d:
ac:81:de:41:c1:e0:6f:6d:d0:ee:7e:03:ea:0e:29:
3b:d1:5b:e1:ce:dd:65:e8:8d:00:5c:f7:b2:cb:ea:
17:31:e7:91:ea:cc:86:0f:a2:0f:78:c1:f2:4d:da:
0c:ef:8d:2c:9d:e5:9b:96:c0:53:a2:ff:bd:42:99:
6e:79:ff:fa:35:b3:fc:4e:11:03:9f:1a:51:37:b7:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:0F:69:D7:B6:5F:5E:5A:7F:AB:88:B3:F5:6C:9E:FD:8E:6B:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8AE8340DCA11EFB98B4645017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:f7:a3:7d:0f:97:55:b1:ab:e1:53:88:de:92:3a:64:5d:d7:
8d:0c:85:d8:78:3d:c1:8e:d8:c6:d3:83:7d:ea:e4:73:16:cc:
8f:82:1d:ec:8e:36:35:37:94:e6:fb:a2:2b:eb:6c:5a:e7:2c:
dc:10:1a:cd:3f:b5:78:cd:68:23:a1:72:7c:38:d7:5a:c8:46:
a2:a5:a1:e2:2d:72:a6:a2:60:d8:89:9d:d0:23:94:ba:19:26:
3d:18:2b:51:e7:48:fe:20:5b:d2:d7:22:2a:66:d5:7c:cb:49:
5a:1f:93:eb:44:28:89:83:da:fd:20:b4:28:45:ca:67:a2:1a:
70:84:f5:8d:6e:43:20:3b:c6:80:6f:2d:fb:28:93:4b:b0:7e:
ec:21:9c:05:26:32:f9:29:69:f2:3e:16:4b:48:1f:81:10:18:
6e:9d:40:cb:80:f5:10:9e:c9:2e:a0:5a:a8:a5:81:d0:df:6c:
15:4c:c5:a6:6d:05:3c:c8:b8:7f:fd:38:4d:c6:71:ff:c9:68:
a5:4e:e7:37:84:14:84:f3:15:bf:60:38:a4:42:1f:b1:12:9a:
40:64:c6:dd:5f:9a:78:26:c1:fe:6c:52:af:d4:42:0b:3d:cc:
fe:ab:0c:e0:7f:ce:47:e8:3e:f3:2a:78:00:eb:42:e1:e0:f5:
09:f8:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:14 2024 by rpki-client on console-fra.rpki-client.org