Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA359B780CE811EF94505019017001B1.roa
File: DA359B780CE811EF94505019017001B1.roa (raw, json)
Hash identifier: OakyqqdvGUNI1jNl4CcFMrwrALjaTEdAS6uFoFlIt2Q=
Subject key identifier: B9:26:93:4D:29:64:6E:38:8E:58:F5:80:2F:8C:8B:26:55:AD:E0:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B572
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA359B780CE811EF94505019017001B1.roa
Signing time: Wed 08 May 2024 03:12:50 +0000
ROA not before: Wed 08 May 2024 03:12:47 +0000
ROA not after: Thu 13 Jun 2024 03:12:47 +0000
asID: 138915
IP address blocks: 154.206.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46450 (0xb572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 03:12:47 2024 GMT
Not After : Jun 13 03:12:47 2024 GMT
Subject: CN=663aedb2-4732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:ee:2a:65:18:c9:2d:ea:6a:2c:6e:5d:08:
10:15:a7:a7:1a:40:e9:39:2a:ae:05:84:e0:84:88:
97:01:67:15:f7:82:9f:54:66:83:48:92:5b:2b:ff:
1b:a5:7c:7f:a1:b0:0f:85:91:b0:4e:0f:c0:29:8c:
2d:ed:e6:5b:ff:a8:d7:7a:de:16:21:3f:97:69:f9:
b4:56:41:76:99:da:59:77:06:1e:0e:b4:11:80:78:
db:8a:f2:2a:c8:96:c1:b4:bc:c6:15:2a:11:71:92:
83:44:6f:ca:a9:ba:02:9b:90:fb:7b:d3:96:f3:45:
c7:a3:53:2c:2b:a0:05:7b:48:c3:6e:c8:cd:cd:56:
eb:81:7c:e9:20:1c:11:bb:42:ef:02:37:75:44:a9:
d3:78:ba:08:d1:5d:99:74:a6:76:a3:10:e0:16:fe:
ba:b7:88:10:b4:8e:78:bc:16:32:0a:0f:4b:32:b0:
f4:56:dc:2c:af:25:08:b0:4e:1c:d1:b6:32:dc:97:
94:c0:d2:57:73:39:72:d5:c7:88:64:a2:f4:3d:a7:
5d:e9:f5:0c:a8:a5:cb:9a:3c:8b:95:eb:8c:6a:98:
cb:da:0d:d4:8e:4d:c5:6e:84:c2:56:6c:cc:f7:99:
36:07:cb:10:fd:92:ad:2e:ec:c2:42:e4:5c:0f:6b:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:93:4D:29:64:6E:38:8E:58:F5:80:2F:8C:8B:26:55:AD:E0:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA359B780CE811EF94505019017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:bf:6c:e9:1a:9e:f4:f1:71:a4:4c:8b:82:d0:6e:4f:b8:8f:
24:d6:42:54:2a:fc:81:c4:44:cf:6a:f2:df:36:29:ad:82:90:
93:70:65:52:ca:c7:28:c3:d3:41:3b:68:94:40:e8:d7:eb:45:
f8:17:dd:3c:22:34:d5:f5:4e:b0:24:00:f5:de:4b:9e:8a:52:
c4:37:7e:f6:40:ab:17:69:b7:87:e9:65:81:4f:c4:75:db:47:
4a:3a:1f:72:03:00:b8:b4:ee:ac:31:14:a9:be:28:e5:87:ef:
9a:3b:50:53:3e:e7:b0:7c:82:3a:b5:8e:d5:55:22:5d:d9:ee:
34:ba:55:c4:1e:1f:9d:b1:fe:75:70:68:d3:d3:4c:4f:e1:15:
c8:2e:26:0f:b3:0c:23:cd:c6:07:0e:31:d7:0b:57:e7:6f:b5:
6a:af:e7:ec:be:cb:e5:45:20:b9:32:01:3c:0c:69:d4:11:ea:
56:98:19:29:25:38:b8:e0:2b:a0:1b:48:0e:b7:a4:0c:25:f1:
a2:b2:35:3c:d8:f0:40:1f:b3:8a:9b:3e:8e:c0:ed:81:bb:11:
d8:1d:c8:b9:e4:d4:9d:75:56:9a:5c:ea:da:f1:a1:75:be:18:
f9:6e:83:61:bf:ea:de:5b:81:0d:73:e0:a5:df:03:0a:bf:c9:
54:b6:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:31 2024 by rpki-client on console-ams.rpki-client.org