Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48DFFB1A1E5311EF95E7E0437DDC24C2.roa
File: 48DFFB1A1E5311EF95E7E0437DDC24C2.roa (raw, json)
Hash identifier: 4+HK+P+iz309Yiw+Y4aOzVidfePJzso9DLFwncAiXnA=
Subject key identifier: F4:59:AE:4A:82:71:AF:5B:BC:DD:BC:71:1C:19:BB:20:3B:FA:2B:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48DFFB1A1E5311EF95E7E0437DDC24C2.roa
Signing time: Thu 30 May 2024 07:07:33 +0000
ROA not before: Thu 30 May 2024 07:07:29 +0000
ROA not after: Mon 01 Jul 2024 07:07:29 +0000
asID: 44559
IP address blocks: 154.209.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48132 (0xbc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 07:07:29 2024 GMT
Not After : Jul 1 07:07:29 2024 GMT
Subject: CN=665825b4-a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:57:1a:86:a3:8c:e9:bb:52:36:dd:1a:c7:
77:75:25:11:b1:58:02:06:6a:11:4b:56:00:2d:9f:
a9:5b:f5:80:87:a8:79:9c:fc:89:1f:c1:cb:86:75:
2d:5a:be:5e:a0:f8:a6:43:17:05:8e:5c:24:d9:ab:
50:ee:7b:5d:dd:e3:b3:1e:69:25:9d:87:37:5c:e1:
b9:8d:8b:d2:90:05:49:61:0e:80:70:05:c4:a8:4f:
32:f9:5a:ff:dd:33:97:f1:93:9d:d0:f6:3b:ef:9f:
14:25:47:52:4b:fb:71:ae:8b:dc:1b:32:4b:77:f6:
2b:0d:25:06:95:9a:25:c0:9f:16:40:42:dd:7f:4c:
7b:02:90:a6:d9:4a:ad:2c:40:ea:93:72:60:ea:b4:
0e:6b:d4:e6:7d:e1:ac:50:76:03:ea:e4:81:3a:7f:
53:b6:c0:64:15:e1:c0:3c:a5:e8:6e:a7:4a:79:fb:
24:22:ae:59:b3:73:7a:43:b1:c2:c7:3f:9b:39:21:
90:9f:b7:2f:4e:8c:42:34:dc:83:82:dd:f7:a2:f5:
a0:91:93:19:7b:39:d1:fd:35:e0:7d:82:3c:52:66:
90:e6:a1:c8:24:85:61:66:bb:ea:2e:d5:65:92:36:
cb:1b:e4:83:7e:14:19:a0:8c:59:ce:72:dd:ac:45:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:AE:4A:82:71:AF:5B:BC:DD:BC:71:1C:19:BB:20:3B:FA:2B:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/48DFFB1A1E5311EF95E7E0437DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c2:8d:40:29:49:7a:4d:9f:58:d6:58:ef:59:13:73:30:bb:
0f:a8:28:8f:4c:43:0e:55:fe:a8:11:8a:0c:dd:17:e9:87:92:
d2:3d:a4:c7:ef:87:57:ac:1e:b0:c6:78:c0:99:17:96:35:30:
67:45:4e:85:e9:0c:16:9d:67:85:f2:ff:ec:dd:d9:86:19:41:
2c:e5:b6:ef:35:0d:6a:10:22:b7:ba:e6:1d:2c:e1:e3:a2:7c:
5e:f6:48:52:4d:b7:71:e2:b8:81:1c:e8:c7:77:aa:e6:87:6b:
c2:49:c6:c6:10:bb:76:58:1f:e4:54:55:10:42:1d:8c:22:9a:
22:2b:0f:14:05:57:c2:46:67:0a:bb:c2:2c:36:b1:93:b1:0d:
12:6f:c8:36:49:6f:2b:30:9b:11:d2:b2:88:4d:3c:08:cd:7c:
ad:f1:0c:5c:3c:1b:0b:a5:98:4a:49:94:b9:56:bd:17:32:17:
86:62:16:9d:0e:9e:2f:35:51:c5:75:46:57:3b:05:5c:ba:ea:
82:9d:a6:17:bc:6e:3f:71:31:50:d9:10:c9:48:f6:02:e6:6a:
63:ba:86:4f:1b:43:5e:4d:20:39:16:20:3d:9a:4b:99:e0:19:
03:0c:02:5e:4d:08:03:a5:96:4b:e8:c3:18:6c:3a:0a:8e:c6:
c6:d8:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:25 2024 by rpki-client on console-ams.rpki-client.org