Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87C91460B4B11EFAAF1FD66017001B1.roa
File: C87C91460B4B11EFAAF1FD66017001B1.roa (raw, json)
Hash identifier: lMfRO3q6rgrurk/xTgjd/o+wLCdOnhDsJn6ggqPPWI4=
Subject key identifier: 9B:BA:32:5A:F4:E9:B1:E1:DB:95:A4:3F:55:21:83:D4:2D:6F:E3:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B462
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87C91460B4B11EFAAF1FD66017001B1.roa
Signing time: Mon 06 May 2024 01:55:59 +0000
ROA not before: Mon 06 May 2024 01:55:55 +0000
ROA not after: Sun 11 Aug 2024 01:55:55 +0000
asID: 140403
IP address blocks: 154.81.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46178 (0xb462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:55:55 2024 GMT
Not After : Aug 11 01:55:55 2024 GMT
Subject: CN=663838ae-13d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:c4:3c:a6:7c:6b:0f:c2:55:1f:5e:d3:8b:
41:1e:ec:8f:1e:2d:ab:8b:65:8f:a2:c5:7a:9a:37:
5b:3c:9b:5d:7b:d4:8a:8a:de:60:be:52:e6:17:eb:
e4:af:1e:48:9c:8d:da:43:96:07:e9:6f:00:61:1b:
94:3e:09:02:59:f3:ac:81:0d:3d:37:88:0a:5b:d8:
8c:82:33:16:ff:c3:40:05:58:c3:43:25:36:5e:5a:
11:db:0c:5c:36:91:8e:ec:6f:5b:de:8d:86:0d:5c:
48:4b:ad:84:cc:52:f9:c8:e0:80:82:73:67:fe:7c:
6b:3b:f1:86:07:8f:ce:84:b8:2a:a9:b0:67:a2:c9:
51:d3:a0:12:d9:5a:75:d7:d2:9f:7b:7d:6e:2b:bb:
72:fb:e1:9f:5d:c4:b7:9b:86:e7:f6:2c:e6:09:0c:
96:70:06:e2:40:49:20:b9:3a:e5:95:27:48:aa:ef:
42:35:88:74:c4:38:29:8d:e4:92:ab:49:f2:94:72:
11:2e:98:87:6e:fd:2e:f7:f9:9a:3a:7b:bb:31:b5:
5d:a3:8b:ef:77:c7:91:a8:f7:bf:f6:28:18:ea:23:
62:64:5a:f6:7e:93:01:dc:5a:99:51:b9:57:90:ec:
7c:98:15:11:ee:28:3e:f8:d7:88:4a:c7:0b:ce:c7:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BA:32:5A:F4:E9:B1:E1:DB:95:A4:3F:55:21:83:D4:2D:6F:E3:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C87C91460B4B11EFAAF1FD66017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.48.0/24
Signature Algorithm: sha256WithRSAEncryption
33:89:19:1a:37:e2:06:84:1e:b8:7d:19:cd:91:23:d0:0c:9b:
63:04:47:f7:a0:97:5e:b6:b4:5b:a6:3a:69:54:0b:36:4f:a8:
39:ba:c8:3b:99:d2:0a:7f:9c:f0:16:1a:58:2a:24:5b:8b:1d:
92:ce:dc:b9:82:85:60:f1:54:9c:9d:af:07:46:ea:31:9a:84:
28:9c:c7:89:19:2a:97:02:cb:fa:ed:5a:89:ea:8f:f8:bd:7d:
34:0e:16:90:41:40:76:ed:11:52:ea:52:9c:57:f3:1c:49:ea:
f1:7f:fc:f0:73:1d:34:ff:67:f3:a5:47:ab:c7:4e:7c:10:73:
a9:87:ad:47:0e:c6:10:7c:0d:2d:5e:ec:9b:92:10:a2:7d:75:
3d:0e:c6:ef:cf:0a:a2:63:59:fb:fc:2e:c5:50:c3:c0:95:f7:
4f:a6:0c:d7:e9:d9:1c:ac:47:cd:10:5e:62:2f:aa:63:93:24:
a6:67:7b:38:82:c3:c3:af:62:53:b3:78:67:4a:c7:9b:ec:16:
33:a6:c8:c0:df:0a:4f:fd:88:c6:2b:9b:8a:7d:cc:a9:f6:f5:
e2:71:c4:60:f0:c7:4e:08:26:8a:1e:b2:7c:43:2a:6d:f7:4a:
66:70:f6:13:53:56:78:04:1d:31:7f:c0:0c:3c:74:05:60:2e:
55:f3:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:23 2024 by rpki-client on console-fra.rpki-client.org