Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE514202D811EFA3504418017001B1.roa
File: 4CAE514202D811EFA3504418017001B1.roa (raw, json)
Hash identifier: aPeI/BuihI2vhKMZZg80/lJrCIBPz8ayL5enaOMhtJk=
Subject key identifier: 37:83:CC:81:A1:5E:F6:C3:0C:94:27:F1:C1:48:4C:01:F8:24:64:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE514202D811EFA3504418017001B1.roa
Signing time: Thu 25 Apr 2024 07:49:09 +0000
ROA not before: Thu 25 Apr 2024 07:49:06 +0000
ROA not after: Sun 02 Feb 2025 07:49:06 +0000
asID: 132839
IP address blocks: 154.92.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45107 (0xb033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 07:49:06 2024 GMT
Not After : Feb 2 07:49:06 2025 GMT
Subject: CN=662a0af5-79ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:05:4b:9b:87:e5:72:29:0b:64:cd:55:e1:
e3:a1:c9:2f:49:bd:94:65:ae:d3:fc:3d:a3:42:5e:
fe:86:4a:c2:de:a8:5e:37:ed:55:63:f4:51:f4:0d:
79:72:a5:72:e5:d0:e9:e9:c6:77:7a:e5:8e:bf:fb:
d1:98:b2:41:a7:d6:33:67:2e:84:1a:8c:76:8c:e0:
7a:ff:e0:71:99:ce:4e:42:ca:c5:1f:c1:9f:87:e8:
60:56:d6:37:ab:ae:1f:e6:cc:fb:46:cf:c5:fe:40:
55:2b:8a:d1:a4:9a:36:85:98:04:49:02:be:8d:fb:
86:f3:4b:6d:87:ed:86:3d:ed:18:73:f8:40:8d:45:
a5:2c:01:ca:b5:4a:3d:fa:de:7e:75:ce:d6:6a:95:
9b:67:f3:1b:43:96:1d:f8:16:5e:f0:62:26:95:5d:
63:4a:f9:40:40:a4:1a:a1:c2:ad:85:2b:05:a1:c5:
fe:20:cf:26:bd:e2:88:30:a4:16:10:c7:22:01:b9:
0a:83:6a:74:4b:16:ff:42:2c:e8:58:16:bd:8a:ef:
48:52:94:b8:54:75:66:86:a6:1c:aa:23:f8:19:71:
e0:5b:35:7e:48:c6:fe:1b:02:b4:dd:e3:28:cc:e4:
7f:23:51:ad:38:d9:07:29:ed:4a:a6:0b:57:d2:b4:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:CC:81:A1:5E:F6:C3:0C:94:27:F1:C1:48:4C:01:F8:24:64:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE514202D811EFA3504418017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:a6:25:65:f1:ae:f4:5f:d6:fe:a9:1e:31:8c:0b:a1:6d:a8:
81:80:2d:37:8c:ea:b2:20:be:7d:d1:d0:1e:e3:2d:47:e0:c2:
94:96:62:6c:4a:b3:68:e2:fd:52:7d:4d:01:bc:c0:5f:3c:ef:
ae:e8:27:bc:6c:7f:e3:bc:1a:6a:41:16:9a:92:76:eb:9f:0d:
cc:ab:e8:2d:9d:0c:19:9e:69:b5:ec:79:cf:8b:5a:68:44:84:
03:7c:ec:c2:05:08:b9:0b:46:db:7a:0d:43:90:68:1e:f5:1c:
c8:78:8e:1e:92:da:99:f9:b7:7e:fc:c4:66:35:06:58:fa:fb:
66:1c:6d:62:e8:de:c5:1e:e8:e0:66:eb:0e:15:f1:b2:6b:52:
6a:66:6f:63:4e:88:ef:38:68:88:25:8b:99:c5:b5:73:58:28:
71:8f:a9:75:d1:02:d8:9b:c5:a4:d2:3e:a5:38:9b:12:f0:4a:
8c:be:f6:43:9b:fb:4f:89:ea:d3:73:eb:65:0c:a1:f0:62:02:
32:4d:1c:f6:87:9a:5e:76:f1:90:3d:55:9c:25:a4:96:6d:b5:
a7:69:5b:4f:72:40:95:a3:d3:81:13:16:04:29:d1:0a:16:be:
9c:9b:d3:01:19:37:bc:dc:f3:65:37:65:a3:c7:e5:9f:0c:8b:
e8:01:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:03 2024 by rpki-client on console-fra.rpki-client.org