Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED554AE008011EF84DAA5FA007001B1.roa
File: 7ED554AE008011EF84DAA5FA007001B1.roa (raw, json)
Hash identifier: 5ijpQipmjNLkOfbKOAz2PtteoyOqdOoxCg7Kh7/IiDI=
Subject key identifier: 03:9B:80:35:E7:1E:42:9E:27:9F:FC:EA:8E:01:58:AF:12:00:16:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED554AE008011EF84DAA5FA007001B1.roa
Signing time: Mon 22 Apr 2024 08:15:36 +0000
ROA not before: Mon 22 Apr 2024 08:15:32 +0000
ROA not after: Tue 04 Jun 2024 08:15:32 +0000
asID: 140869
IP address blocks: 154.81.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44700 (0xae9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 08:15:32 2024 GMT
Not After : Jun 4 08:15:32 2024 GMT
Subject: CN=66261ca7-c46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:31:cf:63:15:60:c4:40:e6:6b:52:c5:41:
dd:91:64:a1:74:08:31:de:4f:34:42:23:c0:5e:f6:
7d:a7:81:cf:0d:f6:7b:40:dc:f7:77:28:bd:b2:e5:
ff:bf:ad:91:f7:61:50:4c:9a:49:aa:77:99:cc:9e:
ff:db:25:b6:1f:5d:bc:f9:64:2c:db:d4:90:c1:8f:
75:bf:1e:eb:5f:0f:78:fa:c8:42:dc:3d:6d:12:72:
4e:08:de:1e:dd:8e:08:c0:92:03:93:42:ff:ab:20:
f4:c3:b8:95:f0:0b:e4:ff:ba:00:19:49:f2:dd:47:
44:65:74:aa:ab:b8:15:20:3b:69:8e:cd:2c:13:98:
52:a9:2a:bd:0d:a1:6a:53:ca:55:d5:63:41:14:c6:
ab:47:87:f1:8a:4b:72:2a:24:76:6a:a6:f1:d9:0a:
c3:de:52:1c:3e:00:99:0c:d3:59:21:50:7d:a6:83:
37:48:8a:53:5c:8e:ca:c9:b8:b4:13:4e:b5:e6:54:
10:34:24:ec:a6:94:b8:ad:c4:77:8c:39:c5:b6:cb:
87:7b:8e:40:75:3c:4c:98:d4:80:cd:3a:89:9a:4d:
e7:fe:ea:fe:9f:ec:3b:4c:fa:d5:56:94:b9:c1:e6:
40:19:15:17:42:2c:a5:57:ee:b1:eb:6a:0e:6f:ff:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:80:35:E7:1E:42:9E:27:9F:FC:EA:8E:01:58:AF:12:00:16:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ED554AE008011EF84DAA5FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d9:f0:43:76:1d:48:fd:b6:e2:81:8d:69:d3:7e:a6:cc:bd:
4a:d3:c1:fb:a3:4a:05:c1:71:f1:c4:22:47:ec:89:02:e8:af:
85:9e:a9:2f:54:28:b5:da:02:9a:8d:8d:4e:d2:55:a7:0e:29:
f1:c8:9d:a1:17:af:be:a7:2f:6e:b3:ec:c1:dc:b0:42:39:ab:
8f:8c:35:58:26:37:00:5b:2f:0b:fb:19:c7:1d:67:16:46:99:
f0:94:4c:62:2f:95:24:8a:d9:36:59:2a:3b:32:9b:84:ec:f4:
15:0c:a4:b1:a3:f0:87:a0:27:e9:da:c8:34:e6:cf:19:24:df:
90:d3:34:a4:14:af:90:bf:66:b3:5e:c8:32:62:27:96:d4:55:
2a:36:45:d3:da:45:00:99:e3:d5:53:ee:3f:83:b0:ab:69:dc:
7e:4f:1c:87:7d:e6:58:c5:e4:4f:93:46:f5:16:d9:c7:76:24:
1b:7f:3c:e3:eb:87:fa:10:70:ab:34:af:ec:d7:68:b1:8d:e6:
72:d2:48:ce:be:13:82:e9:b9:12:0b:8c:a6:a7:37:03:b8:f1:
0a:bc:fb:51:44:fa:63:e5:5e:d0:ce:2d:20:50:89:ab:97:37:
84:ff:62:3d:ff:0a:5d:fb:e1:31:28:dc:c2:fd:ef:6a:4c:11:
49:6b:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:25 2024 by rpki-client on console-ams.rpki-client.org