Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8E9C31C039011EF9F4279F7007001B1.roa
File: E8E9C31C039011EF9F4279F7007001B1.roa (raw, json)
Hash identifier: Gk6n30yftfpyxQUWBeDDqrX9t4hhLOBMNKISgUqeVeQ=
Subject key identifier: AE:1F:0E:E9:35:A8:37:17:11:A4:5A:BA:69:76:DB:41:7E:CB:A2:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8E9C31C039011EF9F4279F7007001B1.roa
Signing time: Fri 26 Apr 2024 05:50:39 +0000
ROA not before: Fri 26 Apr 2024 05:50:36 +0000
ROA not after: Mon 27 May 2024 05:50:36 +0000
asID: 138415
IP address blocks: 154.207.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45440 (0xb180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 05:50:36 2024 GMT
Not After : May 27 05:50:36 2024 GMT
Subject: CN=662b40af-a275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:2a:40:d4:a2:d1:66:92:83:ef:87:85:c7:
44:aa:0e:a5:20:cb:41:8d:26:c4:72:93:85:bf:1e:
46:57:4f:00:63:e4:d1:04:9b:41:c0:98:48:1e:ed:
1e:b4:4b:bf:bb:92:0d:26:12:49:3a:be:f7:3a:70:
43:fb:d1:7e:11:86:fa:48:00:2e:4e:a3:3b:1c:cf:
c7:af:c7:36:c8:fb:62:cb:d5:31:d1:9f:ec:c6:cc:
d9:6e:35:f1:67:78:87:57:b4:6e:1e:cf:71:03:98:
11:dc:78:e2:8b:6e:fd:f1:4f:68:aa:a0:f0:e2:42:
01:9a:6f:b9:d7:88:e8:13:6c:97:51:c6:43:d6:ee:
a3:7a:48:12:cb:cc:7f:48:0e:f0:9d:33:19:ca:9d:
72:14:79:b1:c1:9d:83:3e:20:ec:cc:01:05:aa:39:
a2:4d:b8:c1:e8:96:88:f6:0a:97:ff:71:3a:90:0f:
55:9c:5a:99:4c:e8:48:82:43:30:17:dd:ef:48:a4:
cf:43:22:08:d5:bb:ce:48:28:18:77:8d:73:95:dd:
59:0e:45:97:1f:d0:00:d3:57:cf:5f:90:16:cd:93:
88:f5:72:ce:f3:a7:44:b6:b5:82:06:21:99:db:eb:
5e:ce:58:f3:71:ed:cd:6d:da:19:2f:c1:ee:08:08:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:0E:E9:35:A8:37:17:11:A4:5A:BA:69:76:DB:41:7E:CB:A2:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8E9C31C039011EF9F4279F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:ed:bf:d3:a4:3e:32:75:31:27:76:9a:aa:6c:fa:2f:e5:ff:
9a:98:41:24:6e:7f:80:7e:fa:84:65:21:bd:a9:3f:7c:d8:e9:
a3:81:bf:10:03:d8:dc:27:04:c6:b2:61:e8:8d:bb:4a:65:2c:
1e:32:16:53:d0:1e:58:42:c7:f8:11:01:4b:63:a6:07:22:0b:
87:0c:39:d3:e3:35:ff:9f:a0:6f:83:99:97:b8:07:d1:04:f0:
95:be:32:58:b2:a7:9f:3c:7b:94:0c:e8:f3:f6:1e:4b:a3:14:
2a:6a:88:89:2c:41:da:7e:ab:84:e0:f5:4f:3c:6d:c1:74:f4:
eb:a6:f4:40:ea:68:c2:41:fd:9f:61:15:f1:d6:ef:a5:d7:a2:
80:c5:95:d1:98:57:ee:a4:ee:61:1f:3d:1a:5e:cb:53:5d:dd:
bb:3e:af:0c:52:67:dc:a2:78:88:2e:7d:70:0d:9a:c4:bf:c4:
51:0b:67:f8:9f:35:a2:c0:c9:1f:f6:0e:85:4e:7d:f1:84:b7:
98:37:15:c5:a1:07:8c:9c:5f:e0:49:00:8f:df:c9:ad:c8:6e:
2b:0f:51:e7:98:af:0a:e6:e2:e1:fd:e2:b2:eb:a9:54:7b:ea:
1f:a6:42:cb:34:44:82:bb:34:e8:78:5b:00:dc:a6:57:bc:d3:
2c:11:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org