Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00F452E0EDB311EEA4FF108C775412E6.roa
File: 00F452E0EDB311EEA4FF108C775412E6.roa (raw, json)
Hash identifier: Dr1feyCQApFpJlvV93mknjZqLW5c3IAWTDEBQA2vHnk=
Subject key identifier: E2:CD:6D:A5:79:5D:10:DA:D9:87:36:CB:3D:3A:43:E6:8C:22:AC:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A709
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00F452E0EDB311EEA4FF108C775412E6.roa
Signing time: Fri 29 Mar 2024 09:59:17 +0000
ROA not before: Fri 29 Mar 2024 09:59:13 +0000
ROA not after: Fri 26 Apr 2024 09:59:13 +0000
asID: 62240
IP address blocks: 154.196.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 09:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42761 (0xa709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:59:13 2024 GMT
Not After : Apr 26 09:59:13 2024 GMT
Subject: CN=660690f5-fe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:3e:e9:b7:27:cd:b9:c4:20:a6:5e:49:b9:
d5:3e:d8:5c:5b:49:a0:42:63:d8:a2:f8:8d:14:af:
5a:30:3a:c9:f8:45:62:df:55:5c:b3:94:32:e8:59:
a3:ce:b5:00:0a:f3:6a:1d:5c:b6:a6:01:29:b3:38:
1e:8f:05:b8:c5:c5:cf:b7:51:6c:57:df:e5:d2:96:
af:9b:00:50:e3:e4:4c:46:d9:38:e0:1a:44:7f:1a:
33:92:ec:e1:53:68:4b:c6:4f:9a:eb:cf:28:ff:c4:
e7:e4:70:47:36:f4:cc:c4:66:3b:2d:ef:88:34:99:
3b:91:8d:ac:69:b2:3a:ce:74:90:57:f6:df:26:6e:
82:ec:ec:7e:12:37:2d:99:2c:0d:6b:eb:43:ee:99:
75:f0:4d:f9:d3:74:23:11:69:5b:eb:f7:03:5e:89:
79:77:92:07:96:3c:33:00:b2:b6:17:4d:db:18:1e:
6b:b7:72:de:16:f6:4b:fd:69:0c:d9:ac:99:3c:34:
b2:4d:a6:08:3e:44:84:36:24:e4:ad:78:0e:d4:33:
60:eb:e4:ef:ee:fe:4a:a7:23:43:d2:c8:c3:5f:51:
aa:07:2a:ad:d2:45:31:7c:28:e9:25:f6:74:d5:e8:
5a:ba:fc:12:e0:8c:dd:2a:b8:c9:5c:43:ce:13:23:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:6D:A5:79:5D:10:DA:D9:87:36:CB:3D:3A:43:E6:8C:22:AC:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00F452E0EDB311EEA4FF108C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.80.0/21
Signature Algorithm: sha256WithRSAEncryption
52:7f:28:3b:ef:f1:36:84:5a:a9:2d:dc:ce:a2:db:32:43:ca:
6a:f7:14:9e:0e:45:9e:6f:58:13:e0:1e:75:e6:d8:1c:10:72:
9a:aa:38:7f:47:56:53:75:de:0a:b6:da:cf:05:6f:e2:52:db:
4f:e3:77:a4:ce:4f:a2:5d:f5:a4:33:f6:b7:ef:73:b6:72:57:
92:f9:64:ad:29:7b:04:9c:a8:cf:11:e3:9e:d6:c4:c1:de:08:
74:1a:73:b2:29:5e:9b:95:01:80:32:f2:f2:0f:97:a4:4c:75:
25:f3:3e:db:05:fc:79:b9:a4:88:59:b3:cc:0b:fb:14:9f:ab:
dc:cf:43:c7:65:17:09:90:8b:e6:32:a8:5b:55:be:db:81:72:
6a:94:1e:33:c4:33:1b:24:5b:e5:38:70:ab:7a:10:ee:15:46:
25:b2:7a:52:73:e9:77:05:45:56:93:79:dd:41:67:5a:8d:73:
73:13:ec:08:66:04:9a:a9:95:a5:32:2d:c0:07:96:70:0e:db:
e0:94:b9:92:5f:99:b8:5a:44:c1:86:1f:73:b8:99:2a:31:51:
26:31:ba:cb:01:1e:e1:9e:a3:31:7c:07:db:90:de:90:75:17:
b6:1c:d7:b2:e4:20:cb:66:ae:96:0e:4a:82:3d:ec:20:6e:53:
c5:14:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:24 2024 by rpki-client on console-fra.rpki-client.org