Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABCD418037C11EF8B962051017001B1.roa
File: 9ABCD418037C11EF8B962051017001B1.roa (raw, json)
Hash identifier: Cw/c5JvbQKevexSfjaCu3oKBNKg7zlvviLHSkQwQhSc=
Subject key identifier: 15:FD:76:38:22:20:7A:CB:EB:15:7E:85:61:E2:93:C9:7E:60:18:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B12C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABCD418037C11EF8B962051017001B1.roa
Signing time: Fri 26 Apr 2024 03:25:18 +0000
ROA not before: Fri 26 Apr 2024 03:25:15 +0000
ROA not after: Sun 26 May 2024 03:25:15 +0000
asID: 62240
IP address blocks: 154.195.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45356 (0xb12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:25:15 2024 GMT
Not After : May 26 03:25:15 2024 GMT
Subject: CN=662b1e9e-535d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:27:7f:bc:60:ef:56:d3:c6:15:97:73:8e:
ff:a7:14:67:8b:0d:de:99:03:a9:fe:09:23:fa:fb:
8d:01:62:5b:47:30:9e:4d:0c:bb:f5:64:be:16:39:
fc:72:db:89:a7:7c:06:fa:e4:88:a4:5b:3a:7e:44:
0b:be:b3:1d:5a:a2:cd:bb:1b:f7:10:3d:85:2c:af:
2d:c3:e0:17:84:9d:8d:5a:fe:74:b5:13:27:04:8a:
2e:7d:bd:8d:85:59:1f:ee:6d:d2:22:51:e5:7d:22:
f8:91:9f:c0:95:de:95:c0:ef:74:51:81:3a:81:68:
46:32:70:14:e0:67:ea:af:18:ec:48:97:d6:2c:09:
e7:1a:2e:f0:99:bf:b4:27:74:4b:01:ed:09:b3:67:
ab:00:02:83:0e:19:65:83:53:2d:f6:2c:f8:20:8d:
19:81:46:d5:35:ce:a6:10:b3:3b:d7:e6:45:ba:39:
ab:9b:17:d2:06:1f:29:e0:6f:59:ec:dc:da:e0:9c:
94:a5:3a:7d:27:d1:17:a8:6a:d5:22:bd:70:a9:12:
34:88:40:d2:fa:45:90:62:be:77:bf:40:42:8f:92:
69:9f:1f:61:7e:a2:65:50:3a:6b:d5:5d:34:e5:25:
eb:fc:2c:d8:2f:25:94:cd:23:be:89:9b:e5:bc:a8:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:76:38:22:20:7A:CB:EB:15:7E:85:61:E2:93:C9:7E:60:18:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABCD418037C11EF8B962051017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
75:1c:fb:93:78:e8:09:fd:4f:b0:20:ff:c4:b1:90:b8:8a:62:
4b:07:f8:4c:9e:db:39:1c:c4:75:61:1d:2f:d5:1a:82:00:08:
c6:4c:7e:c8:a1:26:d4:68:7c:13:50:fc:32:d4:d9:44:8b:70:
e6:2a:e3:a9:0e:8d:20:2a:07:5d:5d:92:18:56:77:80:d3:ba:
66:b3:01:c9:6b:0b:a7:60:1d:82:dd:f0:5b:be:c4:46:76:3a:
02:f1:bc:6c:6f:22:75:21:22:41:4a:29:42:e3:34:8f:3c:07:
34:a3:ba:65:39:5d:2f:a2:f7:b9:59:c0:3b:f2:73:df:2a:ee:
ba:4c:2e:7b:14:ed:28:44:26:dd:20:f5:a4:3a:d5:4f:dd:a2:
ac:4b:ea:7c:a1:c8:e2:d6:48:8c:b3:9e:96:b0:20:29:f7:16:
16:ce:bc:32:ca:87:73:ee:b9:31:6f:b2:82:05:16:97:e9:a1:
3d:1d:72:53:33:9e:33:01:b0:18:61:37:71:6a:30:5f:3b:68:
8a:9d:06:7e:d3:77:2c:af:ba:c0:17:d8:d4:15:c7:88:2d:89:
32:3a:69:1e:23:f2:54:54:01:c5:03:fa:32:bd:97:be:d5:ac:
fb:9b:c9:53:b0:e8:ea:a8:2d:ec:70:f0:8b:6e:18:16:b2:63:
08:37:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:27 2024 by rpki-client on console-ams.rpki-client.org