Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A95CB54037711EFBCE4FF25017001B1.roa
File: 7A95CB54037711EFBCE4FF25017001B1.roa (raw, json)
Hash identifier: 3WOW9COcrl2coPKanBjzY2lZyx2qSmMdcnFibh3nxzE=
Subject key identifier: 34:20:17:BB:B3:7A:96:63:73:4B:70:92:57:19:65:06:C3:AC:31:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B100
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A95CB54037711EFBCE4FF25017001B1.roa
Signing time: Fri 26 Apr 2024 02:48:36 +0000
ROA not before: Fri 26 Apr 2024 02:48:33 +0000
ROA not after: Wed 16 Apr 2025 02:48:33 +0000
asID: 21859
IP address blocks: 154.93.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45312 (0xb100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 02:48:33 2024 GMT
Not After : Apr 16 02:48:33 2025 GMT
Subject: CN=662b1604-57b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:53:73:c6:c8:c6:2b:33:7d:8d:93:b5:85:
0b:54:d3:1a:e3:b4:24:82:49:d0:3a:72:0a:dc:98:
fb:60:c8:3f:ba:74:fb:86:81:76:de:4e:0d:c2:0b:
70:c8:cf:a4:c1:79:c1:59:18:91:a7:af:f9:0f:59:
03:c2:17:a4:2b:29:74:44:b1:97:d2:0d:bc:2f:fe:
b9:4d:1d:f6:55:67:42:62:72:a8:e2:a1:8e:fa:74:
ba:60:55:85:69:a1:27:d6:a0:49:43:b6:4a:23:97:
66:1b:77:be:83:6d:0f:f7:06:4e:6a:d4:b7:6c:c3:
e5:9b:71:d0:cd:30:72:36:19:67:cf:68:21:43:b2:
20:15:5b:92:97:23:4d:30:cf:66:79:d8:07:66:45:
bb:00:fe:f7:49:73:f1:a2:11:32:1a:28:52:d9:d3:
ff:c6:20:be:c7:ba:cd:74:2a:64:22:67:56:39:3f:
57:3c:f5:73:36:19:45:25:fa:b1:27:a4:17:58:aa:
03:de:48:a2:89:8e:17:ab:a6:ba:ba:23:02:03:f3:
d9:5c:c0:b9:58:2e:27:32:f9:a3:e4:34:c6:81:c0:
e2:4f:43:e5:86:04:38:2b:48:24:7c:98:66:70:47:
27:b6:40:ef:9c:fc:85:92:55:1b:df:dd:7d:22:21:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:17:BB:B3:7A:96:63:73:4B:70:92:57:19:65:06:C3:AC:31:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A95CB54037711EFBCE4FF25017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0b:67:61:05:38:d3:6b:a3:8a:10:99:ec:c7:18:bc:bf:5b:
fd:d4:e6:b7:2b:11:0f:b3:8f:17:57:39:38:f7:09:07:14:98:
03:f9:19:29:f1:5f:45:b9:39:3d:97:67:d1:27:56:3a:38:da:
c8:93:cd:9e:83:98:a1:42:41:9d:30:36:a4:80:0d:02:5c:e7:
5c:d0:f3:9a:ab:d4:29:64:dc:f4:a1:73:d8:20:fc:7e:1f:04:
67:27:a3:17:63:7b:e1:14:5d:62:79:cc:86:de:3e:56:3c:5f:
8a:ea:ea:92:43:34:55:5f:ec:30:6e:51:c3:6d:c0:f0:af:4e:
84:18:94:ef:97:24:10:fe:ab:e6:3a:83:b7:79:f9:e2:d0:7a:
75:31:82:b0:88:35:6c:56:a2:be:58:90:b8:5d:e4:c5:2f:58:
3d:7b:25:16:23:55:b0:26:23:d3:a5:83:a9:e4:72:c3:6f:38:
34:69:8b:a8:79:b0:1a:f2:5e:b9:cd:13:9e:a7:20:61:e1:40:
a8:a2:fe:1e:68:1f:74:8e:ec:da:5e:d2:51:ce:71:c7:b5:c8:
09:23:6c:4c:e1:a4:e8:dc:1f:ce:c1:ec:62:95:cc:8f:01:ba:
41:79:f2:4a:f8:08:b4:f8:b4:49:e6:81:47:88:b5:a5:43:82:
8d:a2:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:18 2024 by rpki-client on console-fra.rpki-client.org