Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBCE0ED80DCA11EF8AB58D4A017001B1.roa
File: DBCE0ED80DCA11EF8AB58D4A017001B1.roa (raw, json)
Hash identifier: U4s69QxXP2/4RrAeTitv5FgnUV8Tg87lam1/yBR0V3M=
Subject key identifier: 24:B3:2E:7A:5B:58:9C:58:39:A9:7C:83:D7:A2:BB:B5:B9:F6:9B:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B61D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBCE0ED80DCA11EF8AB58D4A017001B1.roa
Signing time: Thu 09 May 2024 06:10:39 +0000
ROA not before: Thu 09 May 2024 06:10:36 +0000
ROA not after: Wed 29 May 2024 06:10:36 +0000
asID: 141883
IP address blocks: 154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46621 (0xb61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 06:10:36 2024 GMT
Not After : May 29 06:10:36 2024 GMT
Subject: CN=663c68df-217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:97:3a:91:0c:1a:e9:a5:a7:c1:c7:4d:9e:
74:dc:95:9c:73:0d:48:b2:f5:76:34:6b:2b:d9:03:
8d:37:69:a2:dc:18:57:ac:36:ff:4a:4a:b8:d5:e7:
55:0b:be:59:fc:75:6e:f6:b8:86:7b:18:17:ca:e2:
af:01:c9:59:68:82:22:d8:89:8d:f2:1c:2b:c0:0c:
7b:ed:f9:f9:d7:9f:d8:35:e6:0f:12:96:49:6a:79:
0f:f3:66:74:4a:c6:03:46:25:dd:fe:76:ed:e9:39:
39:03:34:07:89:4e:56:d9:3d:8c:66:a8:bf:35:37:
38:6a:fc:a9:17:0b:f8:c9:65:81:42:ff:7f:a7:db:
49:39:f7:45:d0:c5:25:9a:3d:e7:63:29:c7:3f:71:
28:c3:09:2f:ac:2c:5b:a1:b3:25:25:1f:3f:37:87:
94:68:af:cc:94:7b:36:b3:7b:d5:77:da:36:a2:4e:
83:f3:20:c2:81:ff:69:a7:71:07:43:66:15:24:c9:
d3:87:0e:a4:40:ae:31:e3:98:d7:ff:0e:13:5f:97:
16:9c:c8:c6:d1:ec:4d:85:e4:1c:d0:5c:1b:e4:a2:
a2:06:86:25:73:bd:87:66:12:75:62:13:d7:63:6b:
7e:e5:c0:fc:12:22:22:27:d5:b2:4b:17:51:46:ab:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:2E:7A:5B:58:9C:58:39:A9:7C:83:D7:A2:BB:B5:B9:F6:9B:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBCE0ED80DCA11EF8AB58D4A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d7:d9:38:be:26:3b:0c:e2:51:4f:b8:30:0b:6d:f1:a2:c2:
85:d3:8e:4c:6b:e0:b6:f2:a2:17:99:c5:e6:61:19:e4:a0:31:
bc:a2:e4:e5:60:f2:fc:9e:6a:ee:50:79:6d:2d:f8:0c:f5:80:
56:f9:63:86:2f:75:81:df:57:f0:32:83:42:b6:3f:f1:f6:1a:
c1:eb:cd:bc:75:e8:0e:78:a2:db:cc:c8:2b:83:57:3b:b0:f2:
18:5e:2c:e5:c6:03:4a:b3:36:e0:b1:f7:b3:11:11:2d:ef:e4:
3e:24:27:75:01:db:a5:a1:d2:cf:5f:ba:91:d7:53:ac:d3:76:
73:aa:27:01:b7:e8:f8:c7:53:05:4b:cd:49:9a:0e:51:b2:13:
09:e5:89:a4:bd:72:c2:7e:e2:b4:70:cc:bb:06:3a:c4:99:94:
28:a8:62:d7:ff:f2:ff:a2:5a:f0:99:67:be:36:dc:51:d6:49:
06:d2:ba:63:ca:22:45:36:cf:34:32:60:81:19:b7:c5:dd:b2:
b7:a2:9f:94:ab:ea:60:93:5d:88:02:e7:07:28:8b:3b:2f:d1:
ab:5d:c1:15:82:d5:48:ed:4f:d8:b2:86:e2:5d:78:55:56:9c:
60:75:26:1c:c9:c1:73:dd:07:20:7c:6a:02:a1:56:e7:1f:70:
8c:0e:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:24 2024 by rpki-client on console-fra.rpki-client.org