Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC604478014B11EF929825F4007001B1.roa
File: DC604478014B11EF929825F4007001B1.roa (raw, json)
Hash identifier: A4XrlAw6bA5sauFFAPNuxDdkYYBA60SV7ktynq6cp0A=
Subject key identifier: D8:4C:19:00:1D:11:61:09:9F:67:21:4B:C1:F0:F3:20:7E:3A:88:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC604478014B11EF929825F4007001B1.roa
Signing time: Tue 23 Apr 2024 08:31:20 +0000
ROA not before: Tue 23 Apr 2024 08:31:17 +0000
ROA not after: Sun 26 May 2024 08:31:17 +0000
asID: 395886
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44815 (0xaf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:31:17 2024 GMT
Not After : May 26 08:31:17 2024 GMT
Subject: CN=662771d8-a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:3c:ce:c4:c4:ae:5a:fb:f6:41:5a:17:2c:
5c:47:8a:1e:4b:06:e2:b2:c0:a8:6e:14:e6:ad:e5:
46:bd:c1:dd:00:c3:04:b0:c2:ae:74:d4:b7:ef:c9:
5b:60:88:31:fc:ec:01:4a:0c:66:23:6a:e8:c7:86:
38:80:58:4e:ed:cd:7e:a8:99:8e:cd:09:b7:5f:1d:
29:3a:b9:9c:58:18:4c:34:9f:a1:83:d0:65:d7:8c:
f4:b1:e2:f4:68:c8:b1:ca:b4:cf:22:67:98:ef:a9:
18:4e:ce:5c:ef:84:40:97:71:1e:fc:53:0f:8e:fd:
a9:3c:7b:98:3c:c3:79:66:71:ac:4c:f5:93:a1:8b:
0f:a1:3b:2b:df:b0:f1:75:e7:1d:5d:97:e2:5b:ba:
bc:80:47:ba:d5:50:dc:74:bc:57:0d:6c:1d:fa:01:
25:80:70:c1:3a:3e:17:bb:98:9d:91:4a:e5:bb:c3:
c9:21:43:a6:e1:62:f8:24:51:72:ec:de:ef:56:f9:
f1:33:f6:22:1d:54:90:ad:52:ff:56:bb:00:e0:86:
d2:0e:dc:99:e9:55:81:16:80:2a:85:49:0c:91:7c:
c2:22:b0:85:de:da:f8:83:b5:40:e5:66:d4:af:4f:
7b:10:40:6e:30:cb:73:95:5c:ca:7a:83:f1:a2:38:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4C:19:00:1D:11:61:09:9F:67:21:4B:C1:F0:F3:20:7E:3A:88:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC604478014B11EF929825F4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ab:2d:fa:23:40:f2:b9:57:4b:99:69:fc:e5:31:07:f5:55:
25:2f:01:cf:cf:f3:03:8f:72:91:70:ed:50:5f:6f:58:97:b1:
2b:5e:d3:ab:95:f0:d6:cb:83:09:83:48:91:dd:f8:71:44:49:
2f:a6:32:07:35:ee:0b:c5:dd:e0:1b:44:8f:87:ce:2f:0c:a4:
6d:1d:ea:39:b8:3e:7f:92:03:b4:ac:f3:9c:63:4a:a3:4a:b4:
1a:1f:62:36:53:bf:d9:fa:41:6c:23:2b:b1:fd:20:5b:91:be:
6e:15:ae:1e:84:3d:00:e3:3d:6a:68:09:53:18:33:c3:f6:e2:
4e:8e:c3:6e:c6:c0:8f:f7:da:48:fb:0d:51:9f:50:40:5b:1b:
c3:4f:8f:d6:d3:f7:9e:f4:ff:ee:5c:e8:ee:34:25:a9:7f:c8:
99:cb:db:b5:b0:5e:2b:13:74:a1:c0:f6:b8:17:36:db:31:c1:
c3:cb:99:be:ad:5e:f7:0f:1c:9e:ee:c7:1e:66:57:b5:06:cf:
29:df:66:0b:d8:49:45:35:03:02:bb:c9:f2:d8:60:1b:e9:b1:
54:59:c9:dc:2d:bc:79:d3:79:a6:59:96:73:36:b0:87:1f:49:
04:af:24:d4:10:ca:77:b2:a1:25:8d:74:ad:eb:83:2a:11:24:
ed:e3:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org