Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9614365E038111EFB2D235FA007001B1.roa
File: 9614365E038111EFB2D235FA007001B1.roa (raw, json)
Hash identifier: 68Uxwe1g5UicocZRMWjheFgBp4bYXkOt47bugSGyRJA=
Subject key identifier: 75:53:70:9B:85:6C:A4:24:20:22:31:34:D0:38:04:5D:66:68:38:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B152
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9614365E038111EFB2D235FA007001B1.roa
Signing time: Fri 26 Apr 2024 04:00:58 +0000
ROA not before: Fri 26 Apr 2024 04:00:54 +0000
ROA not after: Tue 03 Sep 2024 04:00:54 +0000
asID: 131685
IP address blocks: 154.210.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45394 (0xb152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:00:54 2024 GMT
Not After : Sep 3 04:00:54 2024 GMT
Subject: CN=662b26f9-0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:9a:dc:52:fc:9d:ee:75:47:83:27:28:59:
25:1f:b0:34:1b:7c:16:71:9d:ec:31:b4:f4:c6:e4:
56:77:5b:17:8e:c9:93:f4:55:21:b4:d6:12:6f:d1:
3f:76:10:ab:03:a3:36:b6:89:19:9a:ce:8f:8f:a9:
77:ab:ea:4f:42:06:4e:57:c1:7b:b2:d0:a3:0b:96:
71:77:c9:c7:cd:ef:6c:07:c8:be:5b:23:fa:4b:63:
f4:99:b9:7c:1f:fd:f0:d9:7b:16:c0:ab:64:b5:93:
1d:2f:94:56:f8:d5:e3:99:77:0b:d2:66:05:ca:16:
e2:bc:8b:1a:c2:9f:b1:78:ba:65:b3:28:68:00:b3:
ef:22:3d:9a:d0:89:45:8a:e7:b2:d0:98:81:8b:04:
5f:da:fb:95:b7:3a:65:c8:4f:34:92:d3:61:e3:71:
ce:ce:35:be:f8:23:80:70:69:2b:00:15:4c:ab:4a:
55:f4:ac:fc:75:15:66:2c:e5:68:26:76:f5:8b:4b:
1f:27:80:f8:f6:af:5f:2f:90:18:7b:13:f7:5e:26:
ff:34:40:01:92:ff:7f:98:54:ca:57:68:31:2c:08:
58:5d:aa:1b:ea:0a:15:5b:ce:d9:6a:dd:57:d3:cf:
3d:74:b1:ea:1a:a5:fc:b2:2c:c1:70:90:fa:2f:d6:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:70:9B:85:6C:A4:24:20:22:31:34:D0:38:04:5D:66:68:38:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9614365E038111EFB2D235FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.235.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1e:46:41:1e:13:af:ee:0e:58:bf:8b:f6:ac:d4:a6:d0:d6:
69:41:9d:ac:45:f6:f4:27:6d:2e:4c:b2:a1:60:15:42:f4:ba:
89:51:be:91:93:03:74:3c:b7:ea:31:eb:7a:da:02:36:b5:31:
d7:fe:4a:84:89:0d:b1:82:ca:0d:4d:21:3f:7d:bd:30:c0:bc:
60:55:1a:c4:d1:cd:14:6e:ff:25:24:22:f3:5c:a0:3f:e0:e8:
46:45:aa:da:0b:7d:e8:39:97:a0:1a:a3:cd:b1:57:42:a5:c5:
92:a6:80:d1:e2:32:04:61:6e:dd:5c:80:66:17:e8:43:3f:6f:
0b:4d:f1:28:cb:33:9b:f6:2d:ae:ed:ab:50:2c:be:44:83:cb:
27:27:9e:df:a6:f4:2a:09:c0:10:94:ad:2a:ed:fa:ef:32:4a:
3a:cd:35:73:20:b8:60:e3:4b:3a:1b:a0:a6:81:8d:1f:04:53:
8f:ed:e2:03:01:5b:8d:8b:ed:2b:36:a3:b6:fa:e9:be:b8:41:
9e:19:35:df:ec:94:a7:10:7b:2a:c4:a8:9f:03:71:6d:e8:9e:
94:eb:74:cc:b7:a1:0e:a8:32:a4:2c:61:9f:3c:98:c1:05:e7:
93:34:e5:cb:0a:2a:dd:0a:53:7d:5e:24:2e:92:ac:8c:10:b2:
bb:f1:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:27 2024 by rpki-client on console-fra.rpki-client.org