Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E618F48A062B11EF80E39F34017001B1.roa
File: E618F48A062B11EF80E39F34017001B1.roa (raw, json)
Hash identifier: 1jsJ3FMOCGk+58nHqqNjejtxx6TNRO8bHoHq6qD1Ni0=
Subject key identifier: 2A:2A:F3:C7:9A:B4:ED:F0:91:BE:BE:26:C6:4E:AE:A7:04:78:3F:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B26C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E618F48A062B11EF80E39F34017001B1.roa
Signing time: Mon 29 Apr 2024 13:25:09 +0000
ROA not before: Mon 29 Apr 2024 13:25:05 +0000
ROA not after: Fri 07 Jun 2024 13:25:05 +0000
asID: 138915
IP address blocks: 154.223.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45676 (0xb26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:25:05 2024 GMT
Not After : Jun 7 13:25:05 2024 GMT
Subject: CN=662f9fb4-3371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:27:6e:bf:97:e2:88:08:18:9d:68:e9:56:
62:4d:f3:47:8a:2a:f2:65:68:ea:83:44:cb:c8:b5:
5c:1f:59:22:17:70:78:b8:c2:67:23:cf:32:0e:40:
51:c3:77:a3:a5:d6:4a:60:19:01:83:2a:05:72:af:
6c:38:e3:2c:2b:4b:ef:38:6c:08:7f:1e:c0:92:c4:
c8:55:37:22:0d:9b:4a:71:9a:e5:c7:52:95:54:57:
8b:ab:4c:94:17:9d:2f:02:e0:ce:fc:48:df:24:7c:
5e:6b:51:90:59:5c:8e:c5:32:a9:09:ee:ab:27:2b:
67:5a:9d:84:89:2e:cb:f0:d4:c4:af:40:cc:d7:d7:
19:2c:12:46:b9:13:93:3e:7f:50:9e:c8:1e:30:e1:
38:e7:50:a0:98:fc:60:2d:36:aa:e3:a6:de:73:01:
94:bc:ad:d7:89:d0:cc:c7:70:dc:51:ca:05:9a:87:
83:7e:b4:9f:6d:00:e7:e2:a8:1a:95:4a:72:45:b8:
38:ba:28:2d:1c:32:01:9e:8e:59:27:43:11:44:77:
52:e3:e4:cd:c7:80:90:5d:ce:66:88:6d:de:d6:c3:
98:f5:bd:dd:83:20:86:fe:5e:96:3e:93:7a:84:0d:
01:17:9f:4a:56:39:e2:aa:7a:06:62:a8:f1:13:bf:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:F3:C7:9A:B4:ED:F0:91:BE:BE:26:C6:4E:AE:A7:04:78:3F:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E618F48A062B11EF80E39F34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.42.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b6:ad:8e:25:8a:c2:c1:05:0c:3e:82:40:85:af:1e:05:82:
81:1e:44:2f:7d:26:36:c2:61:5e:a6:df:fb:04:b0:8f:35:5d:
ad:1c:f2:53:38:b6:29:7f:3a:d9:72:fb:75:29:93:02:cd:4e:
1e:72:9a:35:e7:11:7f:bb:79:c7:c3:8f:ec:72:86:ea:76:e3:
62:5b:ba:d5:e2:36:01:8b:c8:fa:19:63:e8:a9:19:b7:09:1d:
87:a1:46:31:08:d9:8d:fe:8a:ab:72:b4:dd:44:2e:1e:61:4f:
c4:e9:3c:63:93:36:7d:dd:ba:7a:37:02:f9:f7:ca:c2:88:8d:
aa:13:d6:90:69:8e:c9:82:58:b2:e9:63:81:2e:26:98:b4:ba:
96:d7:4d:42:43:1e:f0:13:3c:f8:bc:5c:7c:09:3e:fe:1b:74:
74:21:8b:a4:b0:62:aa:f8:de:eb:9c:a6:ef:cf:1b:f6:76:c9:
00:36:e5:45:f6:5b:a4:27:5a:63:cd:2d:2f:5a:37:17:b3:e1:
f5:41:cb:a2:3c:5d:4a:bd:0c:8a:61:77:0b:cb:c5:85:cc:a2:
27:ab:94:2c:dc:e5:f1:77:64:b9:15:65:67:c2:23:31:dc:cb:
a5:48:b0:ce:05:01:b3:4e:95:3d:1e:c3:00:09:24:ee:fb:0c:
f7:52:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org