Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6079C4D6FF9A11EEB0E5E12A017001B1.roa
File: 6079C4D6FF9A11EEB0E5E12A017001B1.roa (raw, json)
Hash identifier: YmWN5k8i/OZszn/CLR7SGT4yScdDYkIMXVm2fevl28E=
Subject key identifier: 15:96:A7:E8:28:F1:DD:CA:9E:38:98:E5:08:38:BA:07:A7:E5:D0:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6079C4D6FF9A11EEB0E5E12A017001B1.roa
Signing time: Sun 21 Apr 2024 04:48:20 +0000
ROA not before: Sun 21 Apr 2024 04:48:17 +0000
ROA not after: Mon 27 May 2024 04:48:17 +0000
asID: 63139
IP address blocks: 154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44668 (0xae7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 04:48:17 2024 GMT
Not After : May 27 04:48:17 2024 GMT
Subject: CN=66249a94-2ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:80:1e:16:7b:91:48:12:92:ce:b6:28:1c:
84:83:2f:cb:25:0b:02:57:b2:5f:8d:d2:df:5b:28:
d8:5f:69:62:48:3e:a7:20:6a:30:fe:05:24:74:fd:
79:fd:a8:46:2e:b4:1b:77:8a:ac:ad:68:88:06:91:
43:b2:d9:ad:e6:f8:f1:41:93:d5:c5:0f:07:e0:5c:
79:51:c7:31:96:cc:fd:5f:e9:47:e0:fb:4a:d7:40:
a6:f0:23:18:64:7b:05:80:76:62:34:62:4a:c5:06:
26:4e:65:dd:a9:b4:22:cc:be:64:a0:70:66:25:ec:
cb:d9:bf:1e:f8:d3:50:a0:aa:b6:d4:38:61:e1:be:
41:0c:81:78:ae:61:16:70:80:8b:26:a9:eb:32:f7:
75:3d:64:4f:b3:2d:bd:d0:7d:f3:af:a2:3c:f9:fd:
20:9e:a5:f8:5a:b8:27:dd:aa:a9:5e:83:ee:82:bd:
55:9b:e4:78:f0:fe:d2:ff:41:da:35:84:9e:53:3f:
38:68:66:89:25:bb:9a:e8:5e:87:c0:2a:cb:f5:6c:
b9:d3:76:70:c6:21:2e:b7:5a:b6:6e:c9:04:98:0c:
3a:f6:02:76:3c:eb:07:02:f5:5e:39:59:66:99:56:
34:8f:83:de:0a:78:9d:4f:67:79:0e:b1:74:7f:31:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:A7:E8:28:F1:DD:CA:9E:38:98:E5:08:38:BA:07:A7:E5:D0:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6079C4D6FF9A11EEB0E5E12A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5e:6d:a3:8c:a0:e7:f7:83:c2:a2:71:0d:30:0b:ae:d2:75:
5a:f3:79:3b:7f:0a:e6:c4:bf:3c:3c:52:c4:cb:5d:33:49:f8:
4f:d5:83:92:bd:19:d5:ac:fc:9e:0e:a3:f4:6f:a9:8c:15:00:
c1:c4:43:3c:b1:f1:83:67:32:c4:9a:e4:14:70:5d:51:32:f2:
92:7e:4a:c1:03:7d:94:81:6c:6e:55:8b:a9:8c:13:0d:b1:e3:
13:53:35:d8:88:5c:ab:c9:db:aa:a8:51:d6:9f:e0:25:e1:f0:
9d:d1:f2:ed:ab:57:f1:7d:05:86:39:13:42:1e:45:5a:06:1a:
0f:f7:21:b2:3c:e8:ce:2c:27:5f:28:89:10:f8:be:03:cc:fc:
8f:cf:67:8d:07:9f:85:71:6f:da:e6:cc:97:f1:28:05:65:2e:
99:60:b2:c9:bc:af:98:bf:ee:2c:fa:4e:94:a1:b8:3d:43:74:
54:df:b5:f5:a8:50:6d:0e:e5:90:24:1c:a2:5e:c7:13:61:7b:
26:48:cb:f8:03:15:6d:2b:22:4f:8f:94:58:ec:be:4e:b2:a0:
4f:3e:95:bf:f1:59:70:17:c4:9b:b0:17:3e:83:bd:70:4d:ac:
fd:e8:e9:63:4a:24:39:a8:e8:6b:43:d9:b7:66:66:76:2f:3b:
83:06:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:16 2024 by rpki-client on console-fra.rpki-client.org