Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E0AE040B4C11EF9980A56D017001B1.roa
File: 47E0AE040B4C11EF9980A56D017001B1.roa (raw, json)
Hash identifier: m69IXK16esS2ysgULw4LNVcD/BeBQpor7S27ZmG+CWg=
Subject key identifier: 08:42:61:E9:02:B1:06:17:D0:BE:1C:09:07:86:8D:55:F5:C1:5F:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B466
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E0AE040B4C11EF9980A56D017001B1.roa
Signing time: Mon 06 May 2024 01:59:32 +0000
ROA not before: Mon 06 May 2024 01:59:29 +0000
ROA not after: Tue 11 Jun 2024 01:59:29 +0000
asID: 138915
IP address blocks: 154.203.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46182 (0xb466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:59:29 2024 GMT
Not After : Jun 11 01:59:29 2024 GMT
Subject: CN=66383984-2e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:03:ee:c5:c4:d3:5b:86:77:47:e8:76:6c:
3a:f8:71:73:34:a8:aa:16:a6:77:70:17:21:ba:ec:
23:0f:0e:42:6c:26:b3:f7:4d:a4:bf:86:3e:43:81:
18:33:81:1b:c6:f3:91:a8:6b:c6:72:90:3d:a6:e4:
bc:77:bd:2d:f1:8e:d0:13:a1:4c:c3:58:bd:3d:db:
6b:81:0c:2f:a8:ed:f9:21:1b:23:fd:d0:45:5b:b5:
4e:81:96:8d:32:f5:b3:86:b3:ca:b3:36:fd:e9:9b:
60:34:39:fd:9b:83:97:d2:d0:d6:4b:f1:e3:3e:63:
eb:e9:a5:6d:a7:fe:33:af:2e:f9:c0:e9:45:32:a8:
7c:83:5d:61:ed:17:c8:a3:9f:71:5c:8d:b6:88:0c:
74:53:9e:34:ff:84:ba:c9:42:49:75:76:b9:1c:b0:
00:19:2f:50:38:87:19:aa:80:a2:63:a2:52:4d:56:
5c:a5:0c:38:0c:5d:4a:a0:f5:d8:ad:02:19:a7:56:
5f:b7:cc:58:2b:1f:96:24:47:fd:d7:cc:4d:13:ad:
b4:29:07:10:3f:b2:4f:e3:97:21:55:f5:5c:64:8c:
64:01:44:a0:2b:29:97:ee:1f:ff:86:b3:b2:ee:83:
fb:5a:eb:56:f4:c3:3d:3c:1a:96:52:f8:21:a0:24:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:61:E9:02:B1:06:17:D0:BE:1C:09:07:86:8D:55:F5:C1:5F:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47E0AE040B4C11EF9980A56D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.144.0/23
Signature Algorithm: sha256WithRSAEncryption
88:68:2e:a1:70:27:4f:2a:b1:da:e8:e7:41:ef:a2:4a:23:35:
3a:2a:dd:a4:ff:0a:7f:59:08:84:d2:5c:66:15:d7:49:e8:51:
b1:49:73:22:53:36:d1:17:a3:bf:01:d5:c5:ca:dc:f8:d9:03:
6c:6f:b8:cd:f2:1b:32:7d:cb:38:75:83:ec:6f:56:c8:9b:71:
ee:d5:b8:96:e7:89:cd:36:e1:1a:3d:be:eb:0b:a4:a4:13:07:
71:ac:b4:75:c5:76:2c:ac:55:88:cc:2e:18:68:46:56:50:f7:
7d:48:5c:f2:76:bd:9b:1f:6b:ac:77:59:6e:7b:10:bc:60:c9:
46:9b:3e:27:d8:3e:41:14:ad:86:66:76:74:1e:75:18:5a:b8:
94:2b:a1:79:39:7b:93:48:57:eb:c1:a5:74:e0:ba:3e:b7:5b:
72:6c:50:5b:a3:29:3f:10:35:c2:ca:ec:0c:33:b0:e5:35:42:
92:ce:e0:5a:0a:55:ce:c4:42:43:df:dd:73:a0:58:bf:c9:b9:
e3:2a:e5:1a:16:b6:d1:e6:87:50:b6:25:44:d2:a5:3f:df:f3:
f8:44:30:bf:26:47:86:5d:89:24:8a:40:4f:09:af:73:c2:39:
a6:f8:9f:9a:83:b4:c6:35:20:60:86:20:3f:df:7c:56:58:bb:
3c:4d:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:14 2024 by rpki-client on console-fra.rpki-client.org