Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73F96C9E061311EF94F2E46E017001B1.roa
File: 73F96C9E061311EF94F2E46E017001B1.roa (raw, json)
Hash identifier: rN+MyO81G9Zxc+gs77z/N63FxrQ1BWy2fiE3UrX38Bs=
Subject key identifier: 85:D8:3B:3E:EF:83:A0:D8:1A:85:43:4E:E4:25:0E:C6:AB:18:53:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B254
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73F96C9E061311EF94F2E46E017001B1.roa
Signing time: Mon 29 Apr 2024 10:30:09 +0000
ROA not before: Mon 29 Apr 2024 10:30:06 +0000
ROA not after: Fri 07 Jun 2024 10:30:06 +0000
asID: 138915
IP address blocks: 154.223.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45652 (0xb254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:30:06 2024 GMT
Not After : Jun 7 10:30:06 2024 GMT
Subject: CN=662f76b1-e15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:76:89:13:30:83:29:16:fb:91:22:34:4d:
a7:73:65:b9:4b:c8:de:2a:47:c7:27:fa:22:3f:03:
a8:37:3c:c8:71:ca:8d:19:e6:ed:2a:f8:73:10:7c:
a2:30:ff:f3:5b:f8:14:3c:2f:ca:87:79:da:8d:90:
7c:3f:4d:4e:42:ce:ab:f3:50:84:91:9b:b2:9d:62:
e1:50:50:f2:ca:08:80:ec:df:37:89:1a:4d:ec:05:
44:7f:73:bc:39:43:99:06:e4:0e:2f:11:a9:2c:27:
85:5b:16:4d:4d:00:59:14:8f:a9:9c:59:e6:97:86:
53:ac:5a:03:9f:0f:b6:a5:28:89:07:19:5f:6f:7b:
c7:cf:34:ba:8f:79:cc:a9:2a:1f:9e:cb:53:d5:45:
83:06:54:7f:25:0a:70:dd:00:1b:4b:81:58:b6:73:
3b:dd:73:30:0b:90:04:9e:b4:24:6e:fb:da:ab:45:
5a:3f:5f:8d:2e:16:ba:37:a6:20:30:f0:23:f3:de:
c0:99:67:57:08:0f:f7:46:fd:af:86:12:27:86:e9:
fe:f2:4f:94:63:eb:fb:5a:c1:9b:94:03:17:37:99:
0a:95:de:b1:7d:73:4b:f8:63:72:7c:72:3d:09:cc:
d9:64:0a:21:9f:41:41:b0:06:4d:bf:99:80:8f:05:
50:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:3B:3E:EF:83:A0:D8:1A:85:43:4E:E4:25:0E:C6:AB:18:53:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73F96C9E061311EF94F2E46E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.72.0/23
Signature Algorithm: sha256WithRSAEncryption
25:aa:2e:e2:3b:ce:39:39:8d:66:7a:ef:1b:fe:ae:2c:e4:52:
39:35:39:2a:2f:16:08:46:72:b7:12:8b:cc:3d:da:be:30:c1:
f8:c9:20:40:3e:06:89:e9:bd:eb:81:16:72:5c:20:0e:c1:c2:
01:7e:e6:f2:fc:77:e4:a5:34:ab:d4:c7:99:aa:c7:54:20:de:
ff:04:f7:8d:69:27:36:1b:eb:dc:1d:82:83:0e:09:dd:34:e5:
60:f4:d1:86:01:d8:31:5d:99:fa:d6:61:ce:6e:c8:ab:c9:47:
96:70:af:76:63:6c:81:cd:77:7b:6c:18:dc:17:bd:d7:40:e7:
90:08:34:a7:c3:8a:81:55:4d:7f:56:cd:88:f3:3f:b7:36:e4:
a6:dd:dd:36:64:5c:9b:95:6b:4e:81:16:62:3a:52:c4:c5:03:
c5:42:69:a7:30:62:79:62:6c:77:d5:d4:c5:c1:3e:cd:9a:22:
0e:be:bb:99:28:8c:30:b4:33:ad:f7:4f:9c:03:c5:99:8f:f6:
90:02:b7:9f:0d:09:90:6d:fa:01:90:8c:a7:31:45:0f:be:72:
e9:e0:59:b1:8c:25:69:db:e4:57:80:b0:a1:1a:20:d2:47:25:
47:a2:a5:7a:c3:35:fb:8d:07:51:70:a7:39:72:02:96:d8:16:
48:bd:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:17 2024 by rpki-client on console-fra.rpki-client.org