Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27F55D4038611EF86A17C25017001B1.roa
File: C27F55D4038611EF86A17C25017001B1.roa (raw, json)
Hash identifier: Kk6my9nTIb6heBY9+zufQ21K2GnDcJnADEGNaUG6npI=
Subject key identifier: 6A:59:AD:B0:5B:90:F6:2D:0F:83:FA:23:9F:04:C7:46:22:17:FB:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B162
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27F55D4038611EF86A17C25017001B1.roa
Signing time: Fri 26 Apr 2024 04:38:00 +0000
ROA not before: Fri 26 Apr 2024 04:37:56 +0000
ROA not after: Tue 03 Sep 2024 04:37:56 +0000
asID: 131685
IP address blocks: 154.210.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45410 (0xb162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:37:56 2024 GMT
Not After : Sep 3 04:37:56 2024 GMT
Subject: CN=662b2fa8-a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:7a:10:d1:1a:18:ca:b2:ae:16:1a:4b:1e:
d6:1e:34:93:89:2b:a6:90:ce:80:a0:fa:d5:9a:0c:
4e:dc:a0:ed:b9:e7:0d:a5:dc:cc:fa:4c:c0:61:9b:
2d:a3:a3:76:84:81:59:5f:89:f2:4e:71:ed:a6:fa:
35:51:e2:44:56:eb:35:61:75:96:57:60:2b:38:a2:
91:89:dd:d9:dc:eb:cf:77:47:a7:f5:da:b5:9f:d3:
36:5f:23:a8:f4:f2:f8:87:76:f3:b0:e2:76:8c:01:
9c:84:cc:5c:b8:24:35:67:b1:90:e0:37:bb:83:92:
cc:d8:ec:98:c7:91:10:ad:d1:f6:43:bf:57:f4:08:
a2:68:c9:fd:fd:78:b2:ca:04:88:ad:0a:f4:a6:55:
e9:f8:2a:72:fb:ad:33:df:b4:0d:71:2e:88:ec:8d:
aa:73:3c:b5:1b:57:f2:0b:7a:f2:da:18:40:7b:ad:
e9:86:34:f5:9d:29:77:59:bf:82:ef:cb:3c:39:0d:
59:8a:3e:d9:bf:0b:9f:be:6d:36:2c:2a:82:ca:8a:
50:e5:38:99:67:5d:18:0b:82:1f:12:1c:b8:c5:62:
05:eb:92:7f:b5:23:21:f5:4a:2e:1a:35:6d:88:ac:
ff:33:2a:4e:5c:91:de:83:60:10:3d:b1:b0:c0:95:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:AD:B0:5B:90:F6:2D:0F:83:FA:23:9F:04:C7:46:22:17:FB:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27F55D4038611EF86A17C25017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:db:64:c5:17:d7:79:db:54:fe:38:9e:55:03:62:f9:a8:06:
2e:71:30:0d:14:eb:72:6a:28:8c:0b:6a:6f:57:f8:ba:d0:04:
c9:e4:df:c6:a8:dc:19:99:c9:57:1f:88:7e:55:d0:7f:ea:18:
d9:dc:5d:26:ea:5a:e4:fa:ac:12:96:32:63:3a:6d:cb:aa:e3:
a9:e0:82:68:a7:fd:95:a6:a4:3d:ce:89:35:d3:3e:ae:16:a0:
12:c4:f0:2d:ed:2f:04:07:9e:72:84:9a:e1:62:3f:6a:6c:6b:
ec:58:6c:78:66:19:81:46:ca:30:71:2d:d5:43:09:c3:3e:81:
eb:6d:1c:10:a7:56:09:fb:84:f0:be:b4:ae:8a:51:46:14:b3:
76:ef:f9:f9:25:b7:cc:8f:92:59:b8:43:e3:5b:f8:3a:9a:7e:
66:09:96:9b:02:48:98:1f:8f:ff:d3:7b:bf:8d:95:d8:8d:62:
db:0b:f8:cb:c9:25:47:e4:38:30:13:91:08:4d:67:af:08:72:
bc:8b:06:4c:98:04:25:f0:b8:a1:5c:9f:ed:e7:f2:d6:bb:e3:
52:70:20:88:c3:23:26:62:d6:5e:df:62:4e:19:ec:a2:f5:8e:
01:13:86:36:3e:b6:e7:fb:39:46:a3:af:ee:7d:0b:88:65:61:
99:58:da:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:29 2024 by rpki-client on console-ams.rpki-client.org