Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0266B23AF01011EE9DA2B687775412E6.roa
File: 0266B23AF01011EE9DA2B687775412E6.roa (raw, json)
Hash identifier: 0kXjnYTq299Pn372x+cgqN6ScqN+XLzAC/Egpl0yKIM=
Subject key identifier: 32:76:28:1F:DD:05:FE:09:3C:42:5D:38:07:51:5E:A2:D4:FC:21:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A87C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0266B23AF01011EE9DA2B687775412E6.roa
Signing time: Mon 01 Apr 2024 10:10:05 +0000
ROA not before: Mon 01 Apr 2024 10:10:01 +0000
ROA not after: Sat 11 May 2024 10:10:01 +0000
asID: 63139
IP address blocks: 154.203.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43132 (0xa87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:10:01 2024 GMT
Not After : May 11 10:10:01 2024 GMT
Subject: CN=660a87fc-5d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:a6:8e:8a:5a:90:39:b3:0e:d4:43:35:69:
fa:e3:f1:47:b5:da:65:a3:67:c1:06:11:3e:fb:4d:
b9:1c:a0:35:0a:cc:d3:f3:6d:6e:9b:f6:ec:d2:88:
a4:52:91:db:3b:12:a7:2f:43:82:2d:ef:a7:e1:5b:
93:b3:33:19:c9:35:b9:5b:82:86:66:a9:47:ac:7d:
85:e7:b6:cb:60:37:1b:05:58:c6:57:85:ab:4e:57:
51:84:27:57:a8:74:ff:24:19:f7:52:45:a1:6f:59:
d9:5f:86:5c:4a:65:d1:ba:02:47:b4:e7:41:45:01:
98:f2:2a:3d:b3:17:c1:38:a2:7d:dd:a0:dc:c8:21:
a7:fd:4e:c6:84:c9:32:6f:14:e9:52:ad:54:33:73:
67:7c:f2:7e:8e:66:26:35:fb:f3:da:b9:3c:87:dc:
ff:1f:a0:be:a8:02:c9:c8:fb:5a:4d:3c:1f:64:be:
ce:e5:f6:b1:6b:fd:60:e6:67:4b:8a:bf:c0:93:c0:
0b:45:4c:c8:47:57:2d:e4:cf:ca:2d:13:6c:71:68:
08:c0:de:9d:d5:9a:52:96:f0:ea:e1:d7:de:01:77:
d4:42:a6:0b:5b:b8:67:b3:8a:67:e4:dc:7b:f6:a1:
ef:d8:c2:59:25:8b:47:04:47:67:74:6e:f7:bf:bd:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:76:28:1F:DD:05:FE:09:3C:42:5D:38:07:51:5E:A2:D4:FC:21:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0266B23AF01011EE9DA2B687775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.168.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b8:1d:cf:99:b3:e5:2e:98:7e:66:dc:de:19:45:9a:8b:63:
e1:2e:4e:22:78:48:a3:13:83:a5:77:5e:5f:71:c4:6b:ec:63:
94:e6:a3:84:fb:20:cf:e6:62:89:c1:4d:54:cc:ff:75:55:8e:
0a:d5:06:45:f6:5f:6b:8c:b4:1f:3e:2d:66:30:63:3a:a7:af:
0e:3f:86:d3:bb:54:92:50:1f:41:38:b2:43:76:fb:5c:63:8d:
a4:7f:57:54:03:35:5b:83:c3:f4:f5:39:48:7b:01:05:b7:60:
5d:3d:17:e1:67:f8:a5:d0:2a:51:48:a9:ad:31:5b:bc:40:3f:
31:1d:30:c7:0a:99:ed:b8:9a:b3:e9:76:a7:72:22:79:35:fe:
07:2e:63:7c:50:c7:c1:8b:f5:83:3a:4f:b9:58:0a:09:ee:86:
19:35:98:a1:3e:1f:a2:31:42:f8:c2:96:b9:d9:59:24:96:61:
b6:3d:f6:ed:da:72:89:24:fc:a8:55:4c:05:57:69:48:f1:a5:
80:f0:a9:55:90:24:ac:b3:89:d5:4c:0b:02:49:ef:51:e1:3c:
97:53:8e:d5:46:69:26:2f:04:f1:01:88:90:82:4b:bb:ae:16:
9f:87:6f:01:41:c0:c4:02:14:67:25:e0:73:02:3c:dd:b8:67:
c7:02:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org