Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F94C9C047D11EF95FB78F4007001B1.roa
File: 82F94C9C047D11EF95FB78F4007001B1.roa (raw, json)
Hash identifier: d98hJxH5Ilz0GRmoe62Jp7Wdh1sPtG8z+B4ZATd5nwo=
Subject key identifier: 7F:90:28:20:4A:12:6F:35:26:14:E8:B2:FB:A7:BF:7E:BD:E8:4F:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F94C9C047D11EF95FB78F4007001B1.roa
Signing time: Sat 27 Apr 2024 10:04:19 +0000
ROA not before: Sat 27 Apr 2024 10:04:15 +0000
ROA not after: Wed 29 May 2024 10:04:15 +0000
asID: 55410
IP address blocks: 154.91.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45497 (0xb1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 10:04:15 2024 GMT
Not After : May 29 10:04:15 2024 GMT
Subject: CN=662ccda3-1f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:62:72:45:6d:ae:41:2b:6b:b2:b0:e4:f4:
00:27:16:d0:78:73:c7:44:55:7d:1a:0e:f5:4d:ed:
b3:58:9f:43:da:e9:6b:0b:5a:91:f3:3a:76:10:3f:
56:a0:3d:68:c0:31:85:52:62:1f:94:fc:d4:a8:a9:
91:79:b3:0b:21:ea:80:8e:9b:90:ff:d6:0a:71:62:
be:4d:2e:f8:f0:3d:ef:a3:62:b0:7d:5c:ca:24:bc:
e8:20:62:cb:33:9e:92:f7:0a:38:ea:3d:88:a8:67:
06:e3:ec:53:ec:dc:98:36:28:e4:d3:b6:d8:f8:ef:
ed:31:8a:92:ca:47:45:ee:15:ce:f9:23:71:de:df:
f7:49:72:04:33:75:98:90:69:eb:44:87:e4:fc:ad:
ad:d2:81:e0:49:82:0c:7f:39:94:d7:0a:c7:f4:24:
42:a6:ad:e5:13:6a:44:70:cc:25:4e:1a:88:43:11:
ec:84:54:e2:b1:61:1f:4f:68:6e:cf:f6:34:bb:b7:
40:63:e3:f2:3f:3f:b6:77:eb:39:a9:85:27:6a:12:
bb:38:ef:c2:8b:7a:bd:4c:9e:5d:2b:dc:8d:eb:08:
23:a8:0a:73:b7:8c:0c:1f:a7:b8:83:42:ef:e5:4f:
9e:89:56:d9:51:37:2c:fa:25:81:7b:b1:85:ad:aa:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:28:20:4A:12:6F:35:26:14:E8:B2:FB:A7:BF:7E:BD:E8:4F:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F94C9C047D11EF95FB78F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.140.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5b:ac:4f:bb:71:df:99:8d:7f:55:54:e0:fa:a3:47:48:55:
81:26:09:9f:36:f1:44:4e:69:81:fd:2d:a0:84:20:0c:5b:26:
03:08:11:50:6f:4a:8c:be:bb:6d:e3:26:50:56:8a:27:82:e7:
78:42:bf:0b:48:00:dc:af:af:39:7c:3b:48:13:d9:6b:57:91:
13:c4:53:9f:26:04:b7:0d:54:53:53:1b:c1:46:4d:6c:0d:80:
80:50:93:15:a8:a7:5e:e0:24:21:2c:ac:68:6b:5d:26:17:51:
d2:81:c6:c7:01:f7:4a:b1:e5:76:bf:8b:5f:16:70:1d:70:03:
60:a0:5c:31:b0:01:fb:17:7c:3c:0e:c8:c9:72:ff:e0:8f:27:
64:d1:52:c8:14:0f:cd:b2:d2:c2:17:b1:fc:90:0d:10:1e:79:
79:f7:4f:d1:15:0f:3f:d0:2b:12:a4:a1:22:2d:a7:c6:9d:8d:
b9:69:4e:59:43:d9:e7:b5:a9:6b:56:d3:b0:5a:80:c7:89:4c:
9a:7e:0e:7c:39:2a:e1:08:85:44:5b:5d:ea:20:dd:ad:14:5f:
a3:a4:b0:3a:7f:d1:bf:33:4c:9f:30:08:09:ab:93:14:e7:a5:
50:fd:08:82:d9:2a:89:4c:c8:b0:63:d1:23:d0:b7:6e:42:d9:
97:80:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:18 2024 by rpki-client on console-fra.rpki-client.org