Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988FA796037D11EFBC9AB257017001B1.roa
File: 988FA796037D11EFBC9AB257017001B1.roa (raw, json)
Hash identifier: 5zN0DvX7ygsKb2KlT68gnU8pEF8CPRxjJmI7RfkDsMY=
Subject key identifier: C5:4E:D7:CC:33:97:EB:EC:C9:B2:72:43:AA:32:7D:D2:EC:88:4C:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B138
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988FA796037D11EFBC9AB257017001B1.roa
Signing time: Fri 26 Apr 2024 03:32:24 +0000
ROA not before: Fri 26 Apr 2024 03:32:20 +0000
ROA not after: Sun 26 May 2024 03:32:20 +0000
asID: 62240
IP address blocks: 154.196.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45368 (0xb138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:32:20 2024 GMT
Not After : May 26 03:32:20 2024 GMT
Subject: CN=662b2048-17bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:26:df:58:68:37:85:26:6c:28:48:f5:36:
3a:62:8d:e3:ed:b9:34:30:2e:e0:c5:8d:0f:7e:e4:
3c:cf:f8:a5:86:40:7e:8b:86:35:bf:76:91:3a:a0:
84:49:8a:aa:81:72:5a:db:26:ec:d8:38:54:5d:38:
44:e4:61:78:d3:5c:0b:ab:52:da:e5:df:45:19:2b:
94:e2:de:e0:2f:75:e4:91:6c:97:5f:b4:47:ad:12:
96:f7:e3:1d:bc:9e:c0:37:b2:46:19:35:37:fe:ae:
63:40:05:72:f4:e2:0b:7f:b3:90:4e:45:ff:66:1d:
48:4e:8e:58:3c:62:9c:e1:ea:3e:bf:f3:0d:fa:86:
39:01:8b:7d:63:bb:64:21:9c:3d:a8:c0:08:9a:e8:
4a:f4:28:2a:01:ae:f5:64:3f:2c:64:15:6f:74:73:
cd:be:a9:f2:c9:83:83:99:00:80:97:09:13:ad:18:
a6:df:fc:80:75:3a:23:fd:3c:5f:94:30:3f:de:3f:
b9:bd:2d:c4:38:06:18:b7:cd:0f:a5:5b:8f:63:96:
97:44:d9:43:24:76:f7:f8:3d:8b:d6:b4:85:c3:00:
ca:6f:7e:d9:a7:aa:7b:6e:e3:e0:d3:c9:e1:a7:be:
b5:25:4b:55:7e:20:21:4b:c5:42:e6:83:8e:b6:22:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:D7:CC:33:97:EB:EC:C9:B2:72:43:AA:32:7D:D2:EC:88:4C:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/988FA796037D11EFBC9AB257017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/19
Signature Algorithm: sha256WithRSAEncryption
51:4e:b3:3a:b2:df:0e:ae:bd:fe:16:c4:97:5f:aa:d7:ff:a0:
44:8d:f6:78:3b:0a:a7:6c:e6:7b:64:10:76:64:01:d8:96:20:
df:78:a2:76:49:38:e1:db:1f:4c:5f:c7:75:5b:e6:08:ec:ee:
bb:72:7a:c2:51:d0:4d:94:19:5c:5b:af:78:d2:01:1c:a1:c8:
9a:87:65:ec:19:89:1b:a5:71:32:6c:65:01:2c:ea:94:a9:82:
ff:d1:7e:80:af:3b:48:09:be:6e:ff:2c:9b:ce:de:e4:63:f4:
01:97:b1:ac:71:a8:f0:5f:9e:ba:0f:a1:04:4a:74:3a:dd:d6:
c2:8b:af:f7:12:f9:48:31:04:03:c1:d5:9c:d9:eb:aa:79:cc:
d2:91:86:63:c4:94:86:b9:70:80:f9:6c:97:0f:5e:52:c8:f3:
77:0b:43:4a:bd:6d:57:76:18:86:ff:45:72:72:ba:25:63:8c:
f5:d4:83:71:cd:51:64:1e:6e:ec:95:a8:0f:7e:f8:b5:d7:20:
1c:eb:04:a3:72:9b:95:a5:80:f8:16:05:09:d2:4a:c5:87:ec:
23:d9:86:72:97:e0:e9:20:15:bd:63:f7:07:2b:22:6f:43:64:
38:4e:76:54:89:ee:46:d0:94:fe:3b:19:90:c6:87:8a:44:33:
5f:bb:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:20 2024 by rpki-client on console-fra.rpki-client.org