Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A668881FE311EFBEC1DF347DDC24C2.roa
File: C4A668881FE311EFBEC1DF347DDC24C2.roa (raw, json)
Hash identifier: pXHPjNWccYLSQHHw+Nsz9DWsevd1eHIITzFpt/0camk=
Subject key identifier: 23:7B:DD:33:DE:85:8E:B8:BC:02:26:67:24:C4:AE:FF:41:F3:A5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A668881FE311EFBEC1DF347DDC24C2.roa
Signing time: Sat 01 Jun 2024 06:54:19 +0000
ROA not before: Sat 01 Jun 2024 06:54:16 +0000
ROA not after: Thu 04 Jul 2024 06:54:16 +0000
asID: 136950
IP address blocks: 154.213.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48267 (0xbc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 06:54:16 2024 GMT
Not After : Jul 4 06:54:16 2024 GMT
Subject: CN=665ac59b-48ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:0c:d7:3d:87:95:76:5a:3b:01:2d:64:a0:
67:ba:08:1a:b7:9a:32:4f:4f:c5:c8:c2:df:22:ce:
b9:b9:6d:2a:8f:1b:42:be:6a:a6:8f:51:84:f2:03:
9f:57:89:bf:85:43:9f:32:23:26:6c:39:55:84:c4:
53:dc:c3:ab:fc:9b:25:70:35:22:85:64:94:f8:f2:
9a:c7:59:8e:4d:c4:7c:a6:33:a9:46:c0:e8:72:6d:
51:6c:da:8f:8e:05:11:bb:34:22:52:12:31:3b:cb:
f2:d4:ae:f4:cf:1b:10:74:77:33:b1:08:53:41:e9:
0e:98:94:63:e3:4b:a7:1c:3c:7b:a9:3d:68:70:fb:
78:25:af:74:be:d2:bd:79:38:b5:e6:9c:8e:a0:7b:
34:13:f9:4f:a9:23:d2:11:55:6c:92:68:8a:cd:67:
bf:05:f3:69:95:7f:3d:87:d0:26:64:f8:09:ae:83:
de:7d:a1:f3:86:40:ae:9c:39:03:52:59:9a:24:fb:
52:f9:c9:22:2c:46:cf:1d:e6:0a:2c:d5:96:61:ac:
b9:25:b8:72:ff:25:25:0b:a2:50:64:fc:f5:93:9f:
0a:a5:0f:b8:b5:b7:23:2b:b6:72:89:ec:5a:6a:7c:
6e:da:18:61:b4:b8:de:9f:4d:ea:66:e3:24:ba:03:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:DD:33:DE:85:8E:B8:BC:02:26:67:24:C4:AE:FF:41:F3:A5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A668881FE311EFBEC1DF347DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.26.0/24
Signature Algorithm: sha256WithRSAEncryption
98:25:12:7c:ab:9b:75:a4:9e:65:bd:12:28:d0:95:fd:36:e3:
63:76:46:fe:a8:f1:1b:79:5d:b1:87:24:35:b6:86:29:32:40:
9e:66:05:5f:63:1d:e6:d7:07:23:a9:72:86:48:35:04:09:43:
16:f5:ad:cb:65:0c:a6:e5:43:af:52:3d:67:4b:c0:25:f8:c6:
a2:81:f0:1d:c6:3b:b4:96:64:d0:b4:d7:ba:8e:20:41:2b:87:
07:6c:63:2d:c5:3e:61:f8:af:7d:e0:a6:d9:89:b3:75:c2:b6:
1e:d2:3f:ba:9e:02:6c:11:61:03:99:b7:3d:7e:92:5c:59:2c:
45:16:5e:d0:5e:d7:dc:1a:d5:2f:8e:2b:9c:26:e4:43:bc:b7:
4c:54:c5:c6:84:30:ec:5a:31:f2:45:de:19:7b:f8:fc:9b:a5:
4d:db:75:cd:0f:8d:c3:30:5b:38:a6:72:9c:58:33:e5:29:85:
c7:16:06:86:64:a9:8e:9b:95:f8:53:1a:01:cc:d4:fc:54:43:
33:76:9b:9c:1a:d3:b2:7e:db:21:0a:54:17:c3:79:33:a8:e3:
94:67:54:59:01:d2:57:3a:fe:26:da:b2:96:5f:da:b6:22:c7:
89:7a:8f:ec:24:36:18:d0:b8:19:5d:e1:08:e2:fc:ec:44:a7:
70:f0:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:29:16 2024 by rpki-client on console-fra.rpki-client.org