Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D715D206CF11EF9CF1386E017001B1.roa
File: E2D715D206CF11EF9CF1386E017001B1.roa (raw, json)
Hash identifier: F5ebNUTC8Xrg8/iIuDMsWkCFScnAf3aZLQaHuvt5nqU=
Subject key identifier: DF:3C:7B:B2:90:37:C8:CF:1E:F5:34:FA:CB:ED:9E:06:F4:07:91:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B2A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D715D206CF11EF9CF1386E017001B1.roa
Signing time: Tue 30 Apr 2024 08:59:01 +0000
ROA not before: Tue 30 Apr 2024 08:58:57 +0000
ROA not after: Sat 25 May 2024 08:58:57 +0000
asID: 5065
IP address blocks: 154.206.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45729 (0xb2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:58:57 2024 GMT
Not After : May 25 08:58:57 2024 GMT
Subject: CN=6630b2d4-39f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:f0:de:58:5b:63:f1:b7:61:9f:31:d8:e8:
88:f7:45:11:6a:d7:62:0f:51:ff:95:b1:9f:b8:3d:
6b:6d:c9:7f:2d:5e:1a:b9:82:e3:20:60:e7:59:81:
ae:4e:30:f9:bb:43:c0:64:30:3c:e5:74:fa:ad:f5:
90:be:dd:e3:23:b6:b5:cf:75:4f:7d:14:9a:52:83:
86:8c:0f:c1:e5:e3:c9:6a:35:55:14:be:09:3c:17:
4f:c6:07:28:bb:d8:8c:a6:c7:c7:05:3a:ca:57:dd:
b3:2b:2d:ac:31:11:12:63:28:f4:e8:d7:eb:db:35:
26:50:25:65:ac:06:b5:48:5e:28:ee:83:10:d0:6f:
48:58:cf:82:b5:dd:38:cb:30:b5:e3:66:f3:2f:69:
b3:51:d4:2a:36:79:0b:45:85:7d:f7:88:4b:91:66:
4e:61:26:b7:48:d0:6a:f8:a6:ad:fd:24:b4:64:c6:
80:9c:c8:e5:57:bf:f6:e0:06:97:07:ca:c9:9c:1a:
65:43:1e:cc:54:bb:75:d7:b3:07:7d:fa:83:6d:b1:
b9:ed:1e:bd:5c:51:f2:a1:b7:27:db:5b:27:91:2b:
8a:ed:43:dc:28:aa:c2:89:c1:08:25:e0:78:97:7a:
ad:16:a9:03:38:2c:fa:0b:86:3b:eb:d8:de:2b:4b:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:7B:B2:90:37:C8:CF:1E:F5:34:FA:CB:ED:9E:06:F4:07:91:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2D715D206CF11EF9CF1386E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:47:e1:2c:39:25:69:fe:70:21:33:9e:7d:af:bb:8e:4f:aa:
dd:d6:93:30:9a:74:6a:9f:37:57:e7:ff:83:4b:13:f0:ec:06:
16:a4:27:4e:d8:e6:0f:a1:03:2e:00:b4:bb:40:cc:0f:fc:90:
63:72:67:86:ae:a0:43:1a:50:5b:3f:ce:76:d9:91:be:22:05:
3f:78:bc:37:2a:39:44:fc:35:17:53:07:b0:fe:85:ed:de:17:
6c:0b:02:1f:ff:f7:7f:e0:06:67:97:68:61:12:15:bc:c6:58:
f7:88:4f:1c:c2:cc:6b:4d:b6:56:c6:b4:44:d8:59:fe:1d:27:
ec:a9:3b:e4:76:11:d4:a7:4b:51:87:5f:96:68:66:de:2e:71:
25:6d:03:4c:79:03:70:38:ec:51:53:4d:7e:9c:ee:53:d0:77:
44:ec:42:3d:cc:fa:0b:31:35:bf:c8:62:f6:d3:51:79:58:de:
4e:29:ca:71:24:be:0e:2d:9a:13:65:43:38:5f:46:41:b8:c5:
54:8d:60:dc:9b:ce:9b:05:c2:ae:9a:58:07:fd:f4:72:ce:42:
24:07:6b:97:e7:9a:76:20:57:81:0d:8e:87:5d:9d:a5:c5:81:
8a:48:18:a0:f7:c6:28:21:e4:07:b7:d1:1a:07:a3:57:4d:1e:
ef:27:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org