Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE693EE206D111EFA982A200017001B1.roa
File: DE693EE206D111EFA982A200017001B1.roa (raw, json)
Hash identifier: PKiQKZygNcKy+n05dTfqAbUz15YZqu5HWZ4WBIsY8OA=
Subject key identifier: 26:52:E4:E2:4E:D5:04:67:31:CE:F4:45:2F:B8:FA:B1:88:1C:8F:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE693EE206D111EFA982A200017001B1.roa
Signing time: Tue 30 Apr 2024 09:13:12 +0000
ROA not before: Tue 30 Apr 2024 09:13:09 +0000
ROA not after: Mon 20 May 2024 09:13:09 +0000
asID: 39600
IP address blocks: 154.95.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 09:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45745 (0xb2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 09:13:09 2024 GMT
Not After : May 20 09:13:09 2024 GMT
Subject: CN=6630b628-9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:89:1c:e6:78:ab:dc:89:d8:74:ce:db:38:
c1:07:45:af:13:dc:cb:f7:2d:ac:44:62:80:9d:aa:
e0:b4:ce:43:9e:ae:3c:53:3c:19:96:89:4c:65:6d:
d2:f1:48:47:aa:da:90:78:33:e6:63:c6:70:19:f0:
56:be:59:98:b3:0e:f9:3f:f9:5d:54:7a:a5:1e:af:
de:bc:6f:36:e0:5b:02:58:d4:6f:eb:3c:36:a7:81:
b6:63:b1:bf:fc:f6:a7:fa:09:62:78:81:94:2a:f7:
76:b1:3d:66:ec:a1:da:eb:99:5a:76:5c:06:51:a3:
69:92:f6:29:3c:15:cf:87:9d:49:8a:73:f8:74:d6:
d8:cd:45:1e:d8:29:3f:6f:a7:ec:84:a9:57:8d:f3:
1b:ba:ff:23:c1:7e:87:09:47:c1:67:c3:78:c2:da:
bb:46:14:4a:26:c7:15:f2:73:33:00:e2:83:8b:ff:
cc:7c:a5:a3:ce:bd:15:5c:75:01:eb:36:da:d9:35:
f4:51:a1:ce:3b:40:b8:3a:7f:11:9a:1a:c2:ea:4d:
44:e4:45:e4:4e:8e:79:1e:05:b8:4c:70:98:29:c2:
b7:6e:fe:b0:e9:44:27:d7:a1:0d:20:ab:27:9b:8b:
a7:3e:71:b5:be:6e:b1:10:b5:a8:b1:a0:dc:e7:0d:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:52:E4:E2:4E:D5:04:67:31:CE:F4:45:2F:B8:FA:B1:88:1C:8F:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE693EE206D111EFA982A200017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:c0:e2:5d:d6:da:15:fb:11:26:44:0a:66:53:83:14:d9:3e:
60:58:42:b1:66:f9:13:3b:9e:78:8c:23:f9:77:1c:f6:bb:00:
c1:9d:f4:83:d6:5e:fe:29:ac:60:f7:d2:a9:e4:bb:f6:25:20:
30:5b:98:36:81:06:38:38:f3:2e:a2:df:eb:83:0a:2d:80:19:
c2:4a:68:d2:29:a2:2d:39:0b:82:0b:97:90:0f:c5:a2:4e:dd:
f0:45:38:97:c0:e6:75:71:5f:97:d8:9e:09:c3:36:a9:79:98:
81:80:a1:e9:06:88:ae:33:b8:74:41:45:50:80:75:06:c7:7d:
ca:d6:c9:8f:80:85:69:e5:f5:84:b6:9a:98:3f:55:80:e1:58:
e1:d8:e3:f7:f4:1b:58:a8:35:1f:15:23:5e:41:23:72:95:88:
7a:6d:06:86:91:0b:00:f1:64:bf:6f:94:66:60:b6:5c:e9:a6:
64:a9:bb:17:82:aa:70:89:ec:66:9a:84:33:61:35:c4:6e:34:
3f:1d:00:aa:a6:10:db:7d:6f:ac:a4:7a:69:2e:b8:84:0d:04:
26:84:5c:e5:91:02:e2:18:e8:6b:95:c2:36:8d:3a:7a:78:b6:
61:7a:71:fa:37:b1:e7:18:77:0b:e4:64:c8:c6:9d:ed:f4:13:
63:11:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org