Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C690388037B11EF8B6A994A017001B1.roa
File: 8C690388037B11EF8B6A994A017001B1.roa (raw, json)
Hash identifier: l77xhZaA4Eil4xiD9zM8Y8Voucf5j/akBlRUcMWrUZg=
Subject key identifier: 8B:55:62:9A:4F:58:6D:B8:D6:18:AE:64:E7:BE:5A:E7:68:7D:B3:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B120
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C690388037B11EF8B6A994A017001B1.roa
Signing time: Fri 26 Apr 2024 03:17:44 +0000
ROA not before: Fri 26 Apr 2024 03:17:41 +0000
ROA not after: Sun 26 May 2024 03:17:41 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45344 (0xb120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:17:41 2024 GMT
Not After : May 26 03:17:41 2024 GMT
Subject: CN=662b1cd8-f8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:c7:d8:d1:76:c3:d1:e8:03:15:4c:ce:3a:
45:35:26:c1:89:5b:4b:24:81:63:da:b4:34:aa:7d:
9a:ae:0e:76:b0:9d:f0:e4:c6:82:80:67:67:97:44:
a6:84:71:f7:c3:97:80:53:0b:6a:7b:2c:44:9f:ef:
e7:e4:a2:9a:5c:2e:7e:80:5f:54:8a:93:a4:7d:bb:
66:f6:b1:5e:50:ae:0c:e8:ee:c6:cf:fd:b5:56:36:
72:cd:b5:61:21:03:77:73:92:09:9c:46:6e:70:b7:
a1:0c:05:70:82:02:a7:f9:75:7e:d1:38:69:d5:20:
8f:0e:b3:4d:de:2c:b0:c8:bb:02:78:78:1a:b1:a5:
50:1b:b9:73:08:21:a1:c6:5b:4f:6b:d0:d1:9b:11:
d7:78:04:b2:d3:5f:47:4b:ec:c6:59:7a:58:6c:62:
ba:76:a1:d2:7b:ad:08:35:cc:5c:a0:1c:64:81:bb:
64:b5:25:6f:cf:5e:d4:d9:ca:cd:03:17:0d:3f:fa:
76:df:ab:19:cc:6e:c6:d5:ba:bf:f7:4c:1e:24:e1:
f7:43:1e:1f:b5:0c:32:f3:f9:60:71:15:57:c4:60:
02:24:f1:61:81:a9:50:08:cb:a8:23:67:c4:2b:79:
26:f7:7d:23:f7:30:51:13:71:d4:53:bb:7d:eb:b0:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:62:9A:4F:58:6D:B8:D6:18:AE:64:E7:BE:5A:E7:68:7D:B3:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C690388037B11EF8B6A994A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:04:a9:0f:99:9c:5c:54:c5:4c:92:30:a9:0f:6c:ce:a9:c4:
5d:b7:93:34:4b:8f:6d:d3:8d:51:a6:6e:d4:d5:f2:15:97:f9:
49:65:9b:7d:86:5a:cb:95:62:98:9c:aa:c5:b3:ec:1d:f8:8c:
c9:fc:86:7d:87:bf:d5:a9:52:5c:7b:37:80:ec:53:7c:75:c7:
45:f5:91:59:f8:ef:36:fa:93:10:c6:10:d5:11:c1:77:d8:b8:
c2:b8:b9:d7:53:c3:0a:8c:9b:63:ff:91:f5:ae:36:2f:bd:d1:
6a:1a:bd:70:25:da:25:99:e7:52:fe:e8:f0:4e:59:02:8f:bd:
4f:c0:0b:46:f3:65:d2:3b:ee:7b:23:fb:d3:06:6b:45:11:12:
08:79:c7:e7:d0:e9:d4:fd:7f:e5:dc:f4:fc:72:57:0e:66:e6:
24:3b:e8:58:35:f7:8c:ac:1d:db:df:97:b0:c8:27:ad:27:81:
d7:91:16:14:c8:e7:84:94:02:f8:2d:5b:2a:f7:de:52:8a:66:
9e:2e:6a:95:fd:1e:e7:81:ff:e3:68:cf:a3:5f:32:d7:3f:ca:
4c:a7:b5:eb:49:9c:95:83:95:b6:ff:45:c9:ba:03:db:3c:a2:
72:f0:6c:35:2c:b4:c7:61:eb:1e:8e:6c:64:ab:43:ff:88:60:
25:98:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:26 2024 by rpki-client on console-ams.rpki-client.org