Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/642A6388047C11EF9CE9CE68017001B1.roa
File: 642A6388047C11EF9CE9CE68017001B1.roa (raw, json)
Hash identifier: Ce3kxq2Xqpltpsm9R+T3baGHkXz5wqyFreGuz9oex2E=
Subject key identifier: 1C:33:A1:32:0C:C7:59:12:2B:36:4C:38:E4:44:55:B4:08:4A:69:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/642A6388047C11EF9CE9CE68017001B1.roa
Signing time: Sat 27 Apr 2024 09:56:17 +0000
ROA not before: Sat 27 Apr 2024 09:56:14 +0000
ROA not after: Sat 25 May 2024 09:56:14 +0000
asID: 212238
IP address blocks: 154.203.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45487 (0xb1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 09:56:14 2024 GMT
Not After : May 25 09:56:14 2024 GMT
Subject: CN=662ccbc1-6f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:b1:7a:b4:ad:b0:11:d8:5b:cd:cd:44:8e:
e9:56:a5:74:0c:87:e4:a9:e6:6b:cd:91:44:72:35:
29:f4:b5:0c:4e:f4:83:43:75:9c:d9:83:4e:1a:48:
4b:ad:5b:aa:09:46:ec:f3:f5:ef:a5:51:ad:28:38:
26:60:fa:c9:2c:61:98:09:bf:a1:8b:74:ab:f6:af:
3e:3e:d5:1b:71:d2:ec:b0:50:31:ba:a5:e1:23:b5:
fe:4e:00:fa:6a:7b:01:14:8f:c0:e6:ab:27:06:bd:
d7:bc:43:7b:c1:fb:67:c9:18:81:48:47:36:30:d8:
a1:67:ac:73:4b:91:1c:e7:52:8a:e3:b2:3a:af:94:
d8:3d:5a:3a:31:b5:d3:67:8e:61:e7:aa:85:a0:ce:
c5:b0:42:a4:de:ca:ca:a2:1c:96:e9:18:c1:84:e4:
93:b4:e0:d1:e1:25:a2:39:84:9d:b9:f0:16:e9:db:
78:73:da:2e:03:6b:31:89:38:2b:d4:a7:8d:38:d0:
ec:c8:e1:af:f0:cb:26:a1:16:f6:8d:5c:22:ab:f4:
66:85:f9:5d:a8:83:ea:6d:dc:27:47:a8:f2:62:58:
f5:3f:ce:cb:11:aa:8e:50:3d:00:50:69:e7:e8:47:
29:5f:8a:0a:5e:6d:08:e4:78:e1:a2:bc:80:a2:30:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:33:A1:32:0C:C7:59:12:2B:36:4C:38:E4:44:55:B4:08:4A:69:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/642A6388047C11EF9CE9CE68017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1f:17:a4:4a:c5:c8:f6:8e:04:ed:3c:03:54:2e:84:32:ce:
98:9d:77:95:bc:2e:cf:d4:bc:97:14:8e:0a:3f:e3:4d:94:51:
38:f4:84:c3:cb:2a:48:36:74:cd:41:bd:ba:1e:a2:80:10:4b:
67:a8:05:0b:46:56:8a:b9:fd:69:28:f4:a5:29:0a:c6:b1:14:
0f:fc:8f:c4:d3:ab:1c:ed:dd:ea:81:bf:8c:77:cc:ed:0e:82:
3e:3a:e6:c0:b8:63:d2:c0:d1:9e:22:07:47:28:cb:98:73:35:
48:02:df:7b:38:bc:44:bd:3e:3c:36:ab:1c:c9:2e:0f:5b:36:
f2:e3:20:42:bc:e5:95:a0:68:7b:7b:75:94:1f:5c:28:56:5d:
ca:1b:35:ef:78:4a:73:39:f7:08:cb:12:2b:25:61:fb:e3:1e:
69:c1:3c:ce:b9:5b:ad:cb:16:76:b4:1b:92:13:eb:0d:f7:c1:
9f:80:63:b2:69:77:85:45:a2:2e:b4:ac:d4:7e:35:13:17:bc:
5b:c9:0f:8e:cb:f6:83:4a:5b:fe:ec:12:89:0c:61:78:06:9d:
00:1a:62:fb:08:fa:75:49:6a:39:c8:8c:44:82:7d:cd:a8:e2:
60:e2:68:fc:7a:80:fc:18:07:c0:08:42:72:c3:5e:92:9f:15:
40:b8:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:16 2024 by rpki-client on console-fra.rpki-client.org