Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3791F681E5111EFB6FA7BFD7CDC24C2.roa
File: A3791F681E5111EFB6FA7BFD7CDC24C2.roa (raw, json)
Hash identifier: 9+iyPmL+pn1u8MvImav7Ovzz6ZQ5DLodgEUPOpaFgeI=
Subject key identifier: 37:9A:FC:57:F5:01:C7:44:A5:EE:43:18:A6:0B:C2:59:2D:96:28:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BBEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3791F681E5111EFB6FA7BFD7CDC24C2.roa
Signing time: Thu 30 May 2024 06:55:45 +0000
ROA not before: Thu 30 May 2024 06:55:42 +0000
ROA not after: Mon 01 Jul 2024 06:55:42 +0000
asID: 49505
IP address blocks: 154.211.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48110 (0xbbee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 06:55:42 2024 GMT
Not After : Jul 1 06:55:42 2024 GMT
Subject: CN=665822f1-12a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:ab:49:d2:d1:a9:8a:ef:c3:b1:56:9d:c8:
c2:bc:33:b9:43:8f:f7:a8:03:a0:ed:b3:dc:4d:8f:
77:f4:03:ae:37:f6:80:a8:80:5e:f4:ee:99:9c:2a:
28:43:0e:46:d1:5d:45:85:ac:a1:45:c2:28:cb:9b:
c4:c7:91:6a:3a:5c:5c:78:33:87:9f:a3:16:5b:c0:
70:9a:37:44:e0:88:35:40:e7:72:87:7d:4b:8b:60:
a0:ee:36:f7:98:3a:b6:77:e0:c4:eb:e0:0d:db:47:
7f:0a:91:57:7c:a5:92:35:14:73:58:65:71:e1:bf:
a6:aa:34:f5:ff:05:6e:3d:27:05:69:15:19:43:b6:
12:73:80:b3:76:66:4c:a8:d3:bd:65:f6:64:e0:15:
20:53:b0:82:78:e1:70:63:b7:89:51:75:26:3d:56:
d5:22:dd:6c:5f:34:9a:e3:13:83:db:1e:97:96:29:
ee:e6:53:ec:43:60:6b:41:53:79:da:22:36:88:06:
33:fc:06:4d:41:ae:23:f7:88:c2:ee:2e:92:68:b0:
46:92:b9:13:3a:9e:aa:40:05:97:d1:82:06:1f:f0:
ab:cb:67:87:07:28:5b:26:45:7e:d0:8c:a7:f9:2c:
75:8b:74:5a:27:66:61:3c:e7:ff:7f:ac:47:a3:3f:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:FC:57:F5:01:C7:44:A5:EE:43:18:A6:0B:C2:59:2D:96:28:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3791F681E5111EFB6FA7BFD7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.10.0/23
Signature Algorithm: sha256WithRSAEncryption
41:eb:2f:5e:ed:37:0c:9b:84:80:70:e3:46:7b:29:f1:3e:a4:
d9:40:98:ff:55:4a:07:19:1e:ca:e7:1f:dc:d8:bd:fc:ed:86:
4a:e9:35:cc:93:c4:f5:09:ca:2c:f5:bf:26:4c:ba:e3:aa:04:
33:07:0b:33:24:78:c9:b3:a9:ce:37:ba:f4:77:cc:d0:fc:1a:
71:01:aa:ad:95:cd:aa:53:16:7b:bd:89:45:be:10:51:d3:94:
88:65:4e:e2:95:60:cb:c9:86:e2:7e:13:1e:46:0c:57:4e:bf:
d4:c4:27:da:63:5a:9c:66:0d:08:5f:e2:41:60:6a:6b:73:b9:
6c:7b:90:b3:19:b3:4e:ea:b4:44:df:4c:61:8c:15:4d:b8:35:
5e:5b:76:3c:d9:6b:65:69:44:2d:61:c4:e3:1c:d9:82:66:1d:
43:8a:1e:da:14:70:bf:53:9b:5f:ec:e6:6c:37:f3:4f:33:36:
78:27:5d:b8:b0:01:b8:57:f1:96:5f:c1:38:50:cf:66:12:93:
9d:88:40:af:6f:67:1b:97:9c:fe:6f:89:0a:65:f2:8c:a3:1d:
5b:df:d3:a8:64:da:77:a2:00:2e:ef:a8:52:5b:f2:6b:57:d5:
cf:b5:b5:d9:7c:54:e4:11:bb:9f:6f:b3:e1:af:5d:45:8f:bc:
66:8f:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:55:51 2024 by rpki-client on console-fra.rpki-client.org