Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A00587E0B4E11EF91DC1303017001B1.roa
File: 7A00587E0B4E11EF91DC1303017001B1.roa (raw, json)
Hash identifier: Er4XEgONYXTJiIcIfPDxyDNyzPafJJIO3siJaZdZ0/8=
Subject key identifier: 4C:7C:E8:07:47:04:07:BE:3B:98:03:3B:CE:A0:BE:A6:DA:B9:A0:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B47E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A00587E0B4E11EF91DC1303017001B1.roa
Signing time: Mon 06 May 2024 02:15:15 +0000
ROA not before: Mon 06 May 2024 02:15:12 +0000
ROA not after: Tue 11 Jun 2024 02:15:12 +0000
asID: 138915
IP address blocks: 154.205.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46206 (0xb47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:15:12 2024 GMT
Not After : Jun 11 02:15:12 2024 GMT
Subject: CN=66383d33-dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:23:31:13:34:1b:41:e6:79:f5:48:86:fd:
d2:68:bd:ce:61:aa:51:f1:f8:59:55:82:48:7b:d1:
3d:0f:47:94:63:4d:35:84:78:53:0c:e5:48:bc:5f:
26:ea:85:57:22:36:6f:9f:c4:7e:85:e1:cc:f1:67:
18:df:13:9f:3b:cf:8d:db:6d:ae:88:1b:1e:06:ce:
30:e8:bf:aa:6e:ff:66:1e:bd:25:c3:90:29:be:60:
cd:a3:ee:d8:0b:56:42:68:14:62:9d:ce:e8:9a:a8:
3d:92:16:27:c6:95:a3:31:d2:70:3f:62:b8:d1:17:
38:1a:7b:b0:b6:ce:51:5f:ac:a7:ad:7b:02:96:bc:
f0:ba:f8:69:c6:d6:d0:8d:aa:a8:f2:df:8c:3b:a2:
58:fb:47:07:a4:2f:7f:03:e8:d4:8d:80:e6:47:1b:
ff:a7:e9:42:24:25:d5:f0:9a:83:e0:df:4c:44:a5:
ce:4a:7e:98:a7:74:a7:7a:b8:47:86:cf:56:53:e4:
20:e1:89:99:1c:6e:dc:0f:14:c5:cb:e3:b6:42:e6:
7b:a9:f2:19:dd:ac:75:8d:9b:b9:d4:42:72:73:55:
e9:27:ca:c9:0c:dc:a9:f1:2b:f2:3d:c8:d7:7b:3f:
c2:07:1d:27:72:0b:c4:17:df:7d:84:b3:cc:21:65:
9f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:E8:07:47:04:07:BE:3B:98:03:3B:CE:A0:BE:A6:DA:B9:A0:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A00587E0B4E11EF91DC1303017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.148.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:ac:0f:f7:87:38:0b:4a:5b:6b:c5:e4:2f:42:87:7b:93:
cc:16:ad:72:b7:32:73:5c:4f:63:dd:9f:b8:26:57:76:8e:09:
8f:28:ce:6e:09:4c:e2:ec:f0:aa:93:04:eb:ed:ff:17:ba:5d:
37:05:25:5f:5f:ca:66:48:db:df:54:47:aa:9d:8d:af:2d:e5:
a3:d5:ed:e7:09:0a:82:43:25:17:75:4a:15:5b:1a:85:0b:5d:
0a:42:46:fd:0b:8c:9d:a2:04:6e:e5:fa:71:e4:68:d1:f0:4e:
4d:6f:8b:9a:51:9a:4a:4c:8b:d0:0f:0c:f3:a3:d1:2f:cd:08:
10:cd:6c:34:c1:fe:2a:f4:22:92:8c:2b:94:f6:fe:70:73:00:
dd:f4:6f:91:d1:f0:62:99:2b:24:f8:23:f5:f0:ea:bf:fd:4f:
36:23:6f:fe:1a:e3:80:53:e5:41:10:f7:b5:9c:eb:0f:c1:df:
e5:b7:70:a7:99:2a:9d:63:3c:e2:c0:67:50:d5:00:46:58:25:
18:89:41:6c:7f:16:67:bf:3e:be:e1:a3:d0:d2:d8:49:32:f1:
5f:42:d7:51:fb:8f:9d:b0:17:9a:26:62:f1:73:a2:7e:16:cf:
14:33:f5:51:1d:63:d1:9c:4c:f1:23:72:3d:1f:63:e6:19:53:
60:78:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:25 2024 by rpki-client on console-ams.rpki-client.org