Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D19676E20C0A11EFBBF729F8007001B1.roa
File: D19676E20C0A11EFBBF729F8007001B1.roa (raw, json)
Hash identifier: 3M7xgGiV4OJvmp7h3jNCWocHY4+QqTqta0ShrNwlzDs=
Subject key identifier: 33:05:EF:D4:A3:D3:42:66:A8:56:6A:76:43:A0:60:98:F1:33:21:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B536
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D19676E20C0A11EFBBF729F8007001B1.roa
Signing time: Tue 07 May 2024 00:43:28 +0000
ROA not before: Tue 07 May 2024 00:00:23 +0000
ROA not after: Sun 09 Jun 2024 00:00:23 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46390 (0xb536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 00:00:23 2024 GMT
Not After : Jun 9 00:00:23 2024 GMT
Subject: CN=66397930-209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:68:5c:9e:5b:14:ee:4d:2b:03:14:e5:7b:
55:d9:e9:6a:56:17:d9:89:de:0a:0b:2a:fb:dd:92:
de:4c:4e:44:3b:66:85:b6:df:92:7b:dd:e1:56:9a:
a0:bc:0e:01:5d:40:df:67:65:67:17:68:c0:a0:82:
5f:8f:db:99:e8:a0:b9:e8:04:a3:5a:d3:8f:42:d1:
c3:6e:12:11:10:10:08:d4:2a:70:7f:9a:8c:aa:64:
9c:1a:be:4f:c0:09:c7:ea:94:21:dd:99:bf:5f:8e:
d3:5b:68:de:47:cb:ee:e2:cd:29:be:19:75:0d:06:
d3:5b:d4:10:54:35:60:cf:3e:59:82:67:ef:1c:2f:
14:61:41:60:3e:b1:6c:24:b0:49:70:70:56:02:18:
d8:19:8a:44:6f:5d:6e:4e:71:fa:de:b2:9a:e0:0b:
db:af:31:41:c9:7c:61:89:5b:ed:8d:9d:6f:6c:af:
11:5a:3a:c4:11:62:8e:b6:11:b2:3b:09:f3:5a:94:
2a:f6:0b:ad:d5:b8:17:22:e2:28:e8:d6:ab:b1:33:
d7:21:33:e3:5a:34:53:da:90:2e:9c:43:4d:3c:d4:
57:57:3e:b6:cf:c9:b8:cf:dd:b1:e3:d0:83:76:f0:
c8:69:16:70:6e:42:e2:59:50:0d:4e:5b:ad:a9:4c:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:EF:D4:A3:D3:42:66:A8:56:6A:76:43:A0:60:98:F1:33:21:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D19676E20C0A11EFBBF729F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b2:5f:8e:cb:c4:c4:dc:78:6a:e5:83:b0:5e:93:2f:d3:1a:
c5:d7:45:e1:77:b5:45:ee:d1:b8:6b:30:0f:e1:28:7b:a8:75:
8c:73:d7:c9:1e:e4:ec:2b:0f:25:03:1a:fd:3a:b4:35:8e:b9:
cb:92:d0:b8:3f:fb:33:c4:45:29:51:53:62:08:3c:b2:f4:65:
50:e3:18:c4:f7:92:51:f7:35:6b:24:e0:67:86:e9:30:bf:c8:
98:30:7e:ca:72:2c:08:b3:cc:e3:17:39:48:e4:2c:47:44:71:
30:b2:88:e9:f5:7f:50:70:7a:9b:21:cd:2a:50:98:34:f3:bd:
95:ef:d7:34:78:86:87:2b:e4:09:87:b2:d6:b5:e7:a0:08:7f:
7c:fc:60:b4:30:ca:26:7f:cc:d3:df:be:eb:b4:6f:25:7c:d4:
93:18:4c:9a:54:08:92:b0:60:f0:97:ed:81:a8:ea:ac:b0:05:
75:77:6d:7e:9d:b0:3e:df:36:64:10:36:15:7e:a9:82:6d:2c:
4a:04:09:c1:e3:98:7d:3d:61:72:ac:66:c5:1a:0a:b0:72:8a:
75:99:de:fd:c7:47:0c:5a:9b:38:85:6c:1e:01:d4:2d:c6:7f:
72:13:24:8b:e3:5a:ae:7e:b2:45:28:fe:0d:06:b1:33:5a:42:
6d:5f:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:31 2024 by rpki-client on console-ams.rpki-client.org