Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9476431A08FD11EF8C219A31017001B1.roa
File: 9476431A08FD11EF8C219A31017001B1.roa (raw, json)
Hash identifier: VO8xnwGuqzkufk2txZ7pxUx/yTEhFQ8ZiD+6lXKViy0=
Subject key identifier: 17:C9:4C:64:15:8D:EC:51:88:A9:CD:DC:7F:7A:F0:EB:66:0C:BC:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B40F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9476431A08FD11EF8C219A31017001B1.roa
Signing time: Fri 03 May 2024 03:31:08 +0000
ROA not before: Fri 03 May 2024 03:31:03 +0000
ROA not after: Sun 28 Jul 2024 03:31:03 +0000
asID: 151983
IP address blocks: 154.81.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46095 (0xb40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 03:31:03 2024 GMT
Not After : Jul 28 03:31:03 2024 GMT
Subject: CN=66345a7c-66df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:bc:0f:0b:8b:b1:fd:d9:6a:be:db:a4:bc:
78:07:e9:cf:9e:62:57:36:9f:0b:97:30:e0:2e:d5:
59:ef:f8:02:a4:b6:36:be:ee:4f:0f:67:79:91:e1:
73:60:7d:ac:75:98:34:74:c4:ff:6a:b6:af:4c:40:
89:3c:c3:a5:9f:42:c8:16:36:31:a5:7a:23:5f:6a:
24:3f:4e:ca:a3:a5:a7:f0:5a:ff:45:c3:a5:0e:25:
3f:b7:b4:d0:c3:ef:ae:8b:d8:16:34:41:d6:c1:75:
14:86:89:fa:ac:81:57:6a:59:f1:d8:7e:da:53:85:
61:37:68:f2:e7:ad:ff:d8:da:d2:31:e4:b9:29:f7:
5e:28:79:a7:c6:3f:e6:01:01:bd:47:df:c5:19:c3:
14:d0:ea:ff:20:41:55:81:8d:4f:e3:8d:c1:a5:55:
b4:68:c0:9a:99:35:42:ca:a2:21:bf:90:bb:84:f4:
27:9e:c9:70:c6:97:08:d3:67:45:ed:79:14:38:ed:
e7:0c:de:f1:58:3c:ab:29:92:0a:cb:f3:21:ab:9b:
99:e5:15:dd:ca:3e:a9:bb:45:18:c1:67:01:a5:c8:
71:ee:ab:b9:13:70:02:45:dc:15:98:25:56:e7:a2:
8a:ed:c9:87:0d:ec:d5:7e:cd:3d:c8:45:af:f6:f5:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:4C:64:15:8D:EC:51:88:A9:CD:DC:7F:7A:F0:EB:66:0C:BC:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9476431A08FD11EF8C219A31017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8e:23:48:76:31:b5:5b:85:63:bf:56:41:43:ed:7e:f7:69:
9c:3f:aa:77:ae:7f:9e:0c:ab:65:16:77:cf:8e:0e:04:fd:48:
cf:d0:e7:63:d4:dd:f2:15:6c:19:91:0d:3e:bf:b2:96:92:63:
33:69:19:30:b5:66:13:15:bb:6b:d4:56:3f:7a:09:cb:1c:bd:
ee:4e:55:d5:c8:d4:32:c4:71:c2:ac:e1:08:c8:52:fd:16:d8:
ee:5f:e1:67:96:f5:3f:1b:c4:66:d0:f6:7d:24:04:b1:86:be:
a5:3e:b0:ca:68:3e:3c:6e:47:27:f4:b9:32:d2:ed:75:cb:3d:
fc:5c:c0:64:1a:ce:90:db:ab:d5:1c:9c:f7:c5:6e:b5:2c:ee:
85:a0:9a:83:01:28:67:94:63:fd:75:4f:ec:8e:03:3e:70:58:
cb:57:2d:ab:6e:18:bd:5a:03:08:e6:16:19:19:dc:f9:59:b2:
1f:6f:ae:b1:cc:d9:6a:5f:84:9c:1d:8b:01:e7:1e:9a:38:72:
45:8b:db:c9:68:84:b4:ae:43:0d:bd:f8:3c:c6:e2:08:7d:b3:
21:9a:48:7b:7f:53:ab:58:71:10:0d:7a:77:9d:4d:4e:f5:f3:
66:1c:f6:49:50:f8:87:6f:9b:98:61:9d:38:7e:12:26:c9:98:
c2:9d:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:20 2024 by rpki-client on console-fra.rpki-client.org