Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B036EE60B4F11EFBAA6880A017001B1.roa
File: 6B036EE60B4F11EFBAA6880A017001B1.roa (raw, json)
Hash identifier: w4mnAWVjHDrK9kCvXjrcCpyWkYi+85tuRSYhn0wpHAc=
Subject key identifier: 4B:52:9F:11:62:E6:C5:AB:36:26:34:9A:47:9F:3F:CD:9D:D3:71:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B48A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B036EE60B4F11EFBAA6880A017001B1.roa
Signing time: Mon 06 May 2024 02:22:00 +0000
ROA not before: Mon 06 May 2024 02:21:56 +0000
ROA not after: Tue 11 Jun 2024 02:21:56 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46218 (0xb48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:21:56 2024 GMT
Not After : Jun 11 02:21:56 2024 GMT
Subject: CN=66383ec8-dfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:13:2f:21:2e:1b:19:a6:02:e1:f0:41:e2:9c:
71:90:05:01:5f:b7:72:4e:6c:b3:4f:bd:e4:1e:b9:
fc:7f:4e:d5:e5:f7:e5:37:74:d8:85:1d:48:f8:e9:
29:eb:ca:3a:2c:10:92:b0:55:72:57:5b:f7:71:94:
c4:90:f4:4c:4b:b2:43:7a:bc:ac:48:f0:ea:d1:f8:
66:fd:18:41:8c:74:6c:0d:dd:a0:76:d6:66:e9:88:
df:e1:a5:d0:b8:50:9f:ae:c8:8b:1b:bb:ce:01:25:
63:7f:d3:15:31:47:89:7c:6e:2f:6d:d1:f2:c1:2d:
3f:ca:14:c8:de:53:78:13:23:ca:fc:b4:26:c8:94:
c0:32:00:a5:a8:e1:eb:af:65:d2:09:a3:9b:8a:da:
20:5d:40:c5:ba:48:89:e0:b5:25:47:89:61:3d:02:
9c:55:bb:ff:d5:bd:52:fb:c2:63:14:4a:7e:b5:f9:
56:02:0d:ef:02:ca:88:64:92:f7:58:46:03:2b:c0:
6a:11:39:34:99:e8:c6:e8:7f:51:ed:d6:ec:46:0c:
b1:73:54:3a:dd:65:b6:13:46:96:37:d2:02:06:26:
ad:1f:ac:5d:19:e7:d9:8d:99:32:20:2f:96:38:c9:
c8:ba:21:32:98:cb:f2:e1:34:de:03:57:a8:6b:1e:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:9F:11:62:E6:C5:AB:36:26:34:9A:47:9F:3F:CD:9D:D3:71:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B036EE60B4F11EFBAA6880A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:53:da:e3:55:23:06:c8:96:3e:22:45:a1:d7:c8:68:33:c6:
9c:8a:44:7a:3a:02:84:0f:58:5c:bf:7f:47:7f:9e:9b:68:8c:
84:94:2d:53:ec:77:63:a9:43:b6:64:a7:eb:b7:91:c4:06:b2:
2d:6a:20:7a:af:a3:43:0e:92:ca:d7:fa:16:34:3b:ab:5e:f1:
c0:64:b8:26:ee:2a:01:8f:64:24:0b:ea:85:ed:ca:09:8b:e3:
18:f2:87:54:cb:d1:c9:fe:cb:08:00:84:ef:09:6c:01:ad:be:
3a:e5:cb:8a:24:7b:d9:45:1d:24:33:6f:96:d0:13:23:d0:0f:
0f:f6:d1:5a:00:88:c1:5c:fa:46:07:77:7f:f9:b1:ec:dc:2e:
ec:ea:04:15:0f:6b:80:12:c8:8d:d0:84:7c:d9:08:da:c9:95:
d6:d0:aa:cd:eb:0d:b1:2b:76:97:20:c6:41:85:99:45:49:c3:
1e:9d:92:21:fe:b6:97:a0:9e:8a:f5:52:c3:1b:83:cf:d4:f2:
36:fe:6f:cb:d8:14:41:70:5b:d4:23:3e:39:cd:77:4f:34:a1:
91:da:85:6f:36:58:2e:f3:b1:4d:5d:92:ef:b4:6a:e3:4c:53:
de:de:13:d5:57:9f:86:6f:30:af:1e:fa:fd:af:01:e5:4e:4f:
12:f4:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:24 2024 by rpki-client on console-fra.rpki-client.org