Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD8084AA0B5111EFA06ECD21017001B1.roa
File: AD8084AA0B5111EFA06ECD21017001B1.roa (raw, json)
Hash identifier: khG9FKyeESOa3cdRpJnDmPNzMmK9bTGD6zIoRXCVmBQ=
Subject key identifier: 6B:43:4E:C8:29:DD:A5:5E:7E:40:BA:AA:1B:FD:A9:D2:81:63:FF:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD8084AA0B5111EFA06ECD21017001B1.roa
Signing time: Mon 06 May 2024 02:38:10 +0000
ROA not before: Mon 06 May 2024 02:38:07 +0000
ROA not after: Tue 11 Jun 2024 02:38:07 +0000
asID: 138915
IP address blocks: 154.203.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46246 (0xb4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:38:07 2024 GMT
Not After : Jun 11 02:38:07 2024 GMT
Subject: CN=66384292-9f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:c3:12:65:3f:a7:ae:53:7a:7d:f4:da:87:
99:0a:e2:50:41:78:60:e7:e4:2c:b9:ad:63:15:6d:
bc:ac:06:8c:6f:b7:b4:bd:1a:eb:aa:d4:fd:57:97:
f7:06:ac:4d:da:78:b9:05:d8:31:2f:5e:48:a9:0d:
4e:87:d1:36:ae:c8:58:8b:13:37:17:e2:75:d8:e1:
9e:5d:fd:23:43:4c:55:b8:cf:7b:07:75:93:2d:21:
a3:72:13:18:1b:4f:ff:f8:d5:30:c6:60:d7:67:20:
b8:ef:64:32:4b:ad:06:f3:ce:fe:41:a0:cf:07:13:
69:68:43:27:d7:f3:65:51:c9:18:22:b0:33:33:03:
b6:ec:d9:d5:7d:d9:b3:a3:b0:9c:1f:d0:c2:72:8a:
b1:50:78:72:68:b9:d4:3c:fb:5c:dc:65:68:c7:e6:
3b:89:49:3f:d9:17:bf:12:c8:20:a2:c9:66:6c:26:
a6:83:43:f5:d5:92:e4:f1:23:69:99:46:de:0c:bb:
60:d5:5d:a9:96:28:4f:3b:91:02:f6:df:dd:10:21:
a7:99:b5:df:a5:69:99:bc:58:e8:58:9b:00:fc:ef:
c2:17:96:63:06:19:05:7c:d7:66:1d:9f:10:e9:ae:
d9:16:51:cf:ce:7c:9e:c5:2e:fb:d2:fa:01:a0:94:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:4E:C8:29:DD:A5:5E:7E:40:BA:AA:1B:FD:A9:D2:81:63:FF:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD8084AA0B5111EFA06ECD21017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.130.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f7:64:81:4a:2b:6a:d4:57:9a:3b:5c:05:ca:d9:8c:c3:09:
0f:e6:a3:4d:57:ab:0f:f2:9d:e0:2b:bb:3e:bc:ad:a9:0f:c1:
52:f5:42:9e:fa:01:f0:9d:30:98:cc:55:bb:ee:e0:a8:7d:fa:
20:ce:25:c2:8c:b4:36:42:97:a6:f0:d0:f8:1a:69:42:b1:16:
43:a5:2c:b3:e0:cd:93:ac:ba:e4:6f:a3:54:0c:6e:ca:19:c9:
db:74:fc:84:a8:ed:40:d9:6b:44:83:35:82:22:0c:14:a9:a4:
47:8a:cf:7a:8d:97:14:ce:46:6a:c0:02:03:7a:69:7a:d0:20:
75:aa:ea:99:e3:84:da:dc:dd:05:02:38:f1:a8:07:d8:c5:9a:
3b:43:5f:3e:dc:f5:15:09:13:77:65:ae:04:35:71:85:63:f3:
53:18:ef:47:b7:fc:74:a3:0a:82:c7:77:ca:e1:34:c5:ba:67:
12:be:50:c6:8e:6a:2b:ea:f8:8f:72:fb:34:44:94:24:95:6d:
ec:f4:1c:f9:3f:59:b1:37:35:88:78:12:aa:d7:80:d1:6c:af:
6d:8c:87:9e:42:16:bb:c1:a5:86:89:bc:29:6e:cb:3c:7d:03:
86:be:62:a3:a0:ff:83:4f:3a:0f:53:05:73:db:42:af:17:84:
5c:35:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:21 2024 by rpki-client on console-fra.rpki-client.org