Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD9B9A02D911EF875D5E23017001B1.roa
File: AEFD9B9A02D911EF875D5E23017001B1.roa (raw, json)
Hash identifier: +AvRy7stYfCwHMbbx1hlNEKgCpZIJECTFeD5N/8YP3w=
Subject key identifier: 4C:04:ED:98:05:53:9B:B0:B9:E5:9F:C8:D8:ED:9F:F0:60:E9:09:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD9B9A02D911EF875D5E23017001B1.roa
Signing time: Thu 25 Apr 2024 07:59:04 +0000
ROA not before: Thu 25 Apr 2024 07:59:01 +0000
ROA not after: Sun 02 Feb 2025 07:59:01 +0000
asID: 132839
IP address blocks: 154.220.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45125 (0xb045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 07:59:01 2024 GMT
Not After : Feb 2 07:59:01 2025 GMT
Subject: CN=662a0d48-4813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:bc:bc:3d:a7:c8:38:f9:a1:1d:99:3a:4a:
1f:5d:89:64:51:9f:fe:44:75:82:97:05:60:9a:59:
fd:71:b8:4d:e4:91:ef:9d:d8:34:2e:c9:14:23:42:
43:1e:24:21:d2:fb:f6:63:30:23:37:fa:a8:d5:66:
2a:ce:2b:64:6d:1b:c1:3d:b7:ce:7c:14:4a:25:d3:
91:03:3c:c4:51:f6:99:0c:4a:00:98:b3:d9:6e:fa:
34:82:cb:4b:63:10:cf:7d:8b:7d:b6:83:b6:b6:5a:
20:4c:34:dc:6a:95:03:97:57:5f:e2:a6:80:77:d0:
7b:c2:c6:f4:ec:96:95:b2:c7:d3:f7:38:98:ba:e9:
63:f0:f7:4d:ca:59:d4:fb:90:07:76:7a:f1:02:ae:
c3:7f:cf:a6:f8:58:ca:7c:20:f1:51:a1:bf:95:81:
96:33:81:c6:12:ee:b4:33:53:a8:d3:39:12:62:40:
ce:74:19:6d:b9:e1:f3:24:45:5b:9f:09:6f:a9:b7:
1f:a8:26:cf:25:cf:ad:83:9b:4c:c7:21:40:22:e0:
d3:33:be:84:20:f2:97:f3:b8:4a:0f:3a:5d:a7:60:
a6:20:42:83:6f:d7:59:b5:03:c1:18:f9:cb:cd:ea:
81:f4:0a:bc:64:7a:1b:39:d0:29:94:40:78:64:10:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:ED:98:05:53:9B:B0:B9:E5:9F:C8:D8:ED:9F:F0:60:E9:09:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFD9B9A02D911EF875D5E23017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.32.0/19
Signature Algorithm: sha256WithRSAEncryption
57:99:ae:da:c0:2b:b7:7a:26:80:55:fe:2a:d4:25:cf:ce:cc:
2d:5c:60:7a:65:a5:24:e4:b1:cb:59:aa:25:1f:4b:b2:bb:f6:
ad:36:af:b6:38:c8:eb:ec:2d:71:5c:6a:0f:08:b5:a0:20:ef:
fe:6b:36:a8:1a:47:cf:40:6a:2f:14:be:c8:30:d5:59:91:10:
45:9d:cf:6a:67:45:c6:73:8f:5b:8c:e3:88:12:0f:7f:5a:74:
46:64:82:94:c2:d4:84:3c:c1:83:22:31:37:90:25:a3:40:a6:
b8:e8:fd:cc:13:f6:c5:aa:09:84:b4:10:76:f5:97:0c:12:db:
2b:df:e7:ef:02:c9:aa:14:61:15:77:3e:8b:74:ec:97:c2:9b:
e5:6b:8b:c9:2d:ac:16:db:e1:f1:37:a3:0b:f0:8f:f7:e9:e4:
3c:62:ce:d2:ac:15:4a:24:b3:a4:70:7f:45:c2:d4:ae:b1:d5:
08:04:2b:4e:b5:dc:ec:33:3e:42:bb:d4:22:92:aa:1f:b4:29:
b9:38:9f:45:88:a1:c2:2e:cd:d9:ac:66:10:63:c6:90:ba:ee:
5d:fb:cf:01:05:7e:aa:d0:fc:41:6b:5e:76:58:57:31:12:15:
a7:83:0a:b6:c6:ea:1e:3c:8f:60:19:19:54:76:ad:6b:70:42:
80:c9:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:22 2024 by rpki-client on console-fra.rpki-client.org