Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02A3B01A142111EF80A4C1F3007001B1.roa
File: 02A3B01A142111EF80A4C1F3007001B1.roa (raw, json)
Hash identifier: 6Zvp8xUADUz918rKJJ/b751AEsaQ+LQhpSxai68ZRt0=
Subject key identifier: E5:B6:4F:EB:FC:86:66:14:F7:36:C4:D8:0E:84:2D:59:A9:5E:2C:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B837
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02A3B01A142111EF80A4C1F3007001B1.roa
Signing time: Fri 17 May 2024 07:42:28 +0000
ROA not before: Fri 17 May 2024 07:42:25 +0000
ROA not after: Tue 13 May 2025 07:42:25 +0000
asID: 18229
IP address blocks: 154.201.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47159 (0xb837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 07:42:25 2024 GMT
Not After : May 13 07:42:25 2025 GMT
Subject: CN=66470a64-1a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:aa:ed:27:37:52:3e:39:45:fc:0f:50:51:
13:b0:ba:ab:9d:fe:49:7b:92:d1:5f:7a:a5:55:b3:
42:7b:a7:60:06:f4:c8:8a:f8:c6:e8:10:22:fd:3d:
85:e5:7b:42:41:a4:5e:4b:24:88:77:a0:83:f1:52:
8b:75:5f:bc:6f:9a:ad:3c:6f:5d:eb:e7:9f:d3:ee:
c5:e7:b7:51:99:ed:8e:89:93:ad:45:a5:53:75:c9:
f2:cd:1a:9c:88:2d:ad:dd:ea:88:59:4f:3b:38:c9:
1a:6c:83:71:99:2f:d5:97:c9:bc:ff:16:49:d1:43:
4a:12:8c:8b:e0:0f:80:19:c6:c6:a4:65:9e:fc:21:
92:78:f4:bb:2f:fb:a5:4b:20:1c:60:fc:1d:46:67:
dc:68:a9:28:15:ea:6b:3a:0f:d4:2c:0d:04:36:56:
06:b7:85:22:39:cc:34:42:29:7d:ae:dc:5e:1c:3a:
58:5d:0c:38:52:6e:80:e8:c3:0b:15:22:0f:4c:16:
ea:10:87:78:14:f0:10:54:ba:ba:36:bf:de:b7:91:
cb:ee:f5:08:24:81:39:fc:f6:43:22:5f:04:a3:66:
4b:42:93:fa:70:00:40:cb:ab:72:13:08:e8:92:58:
bc:a8:72:41:98:a4:bf:78:37:55:b9:50:bb:4b:1f:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:4F:EB:FC:86:66:14:F7:36:C4:D8:0E:84:2D:59:A9:5E:2C:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02A3B01A142111EF80A4C1F3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ce:e0:fd:65:30:7e:26:69:05:47:ad:7d:19:62:c5:24:2f:
cc:fe:94:f9:51:23:7f:45:a7:ee:db:36:ef:ef:af:38:bd:48:
0c:bd:7c:4d:cf:d2:5a:3e:37:b1:a6:06:9d:21:19:89:4f:00:
ec:d8:4d:8f:82:97:d7:10:17:6e:73:b6:52:b9:20:69:08:aa:
17:e9:4d:cb:f1:c6:f3:f9:8c:ff:7b:26:31:f8:24:0b:80:c6:
f5:51:8c:5e:1f:87:9e:5b:9a:4c:77:9a:6c:72:3f:88:b6:65:
64:d6:f0:76:4e:f3:ad:7f:a1:96:2a:c3:25:8f:62:00:03:1b:
d8:b0:64:c7:f1:6d:2b:05:19:1a:76:65:6e:e7:15:8b:13:ce:
89:30:00:b9:78:46:24:25:e7:31:71:29:b8:15:17:ad:1a:f7:
03:99:e8:d4:0c:44:cc:32:1e:b7:ce:d6:45:75:e0:90:41:97:
44:d7:5b:9c:bc:c2:77:45:d1:f8:94:9d:95:a6:8c:b0:0c:64:
3d:10:ef:c3:20:8a:2f:ca:57:30:91:f3:79:ee:60:8e:52:fc:
76:e2:41:fb:0d:1e:10:c5:b5:74:e4:58:51:e7:93:43:13:ef:
dd:f2:09:62:43:a8:06:c4:f2:6d:07:9a:e1:af:ea:be:f1:f4:
6e:3e:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org