Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BFC4B8F01111EEB2EDCF8D775412E6.roa
File: 03BFC4B8F01111EEB2EDCF8D775412E6.roa (raw, json)
Hash identifier: i641mLittc4lFg6S8+mryJ/YXR3jv/N0doOLSuYDBjo=
Subject key identifier: 1D:AC:32:C7:1E:FF:18:CF:C4:7F:D6:E7:D4:54:88:58:B1:BE:6E:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A888
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BFC4B8F01111EEB2EDCF8D775412E6.roa
Signing time: Mon 01 Apr 2024 10:17:16 +0000
ROA not before: Mon 01 Apr 2024 10:17:13 +0000
ROA not after: Sat 11 May 2024 10:17:13 +0000
asID: 138915
IP address blocks: 154.205.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43144 (0xa888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:17:13 2024 GMT
Not After : May 11 10:17:13 2024 GMT
Subject: CN=660a89ac-5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:fe:ad:a5:b7:cd:62:bb:b9:05:b7:a2:c8:
fc:f3:34:bf:76:d6:30:13:95:69:d0:4b:9d:89:e7:
90:df:75:0d:1c:71:23:f4:49:7e:fd:5e:51:88:df:
fe:ff:ad:29:a9:a2:f3:bf:c9:a6:38:81:09:ba:75:
4c:62:39:a4:90:c4:15:83:5a:ae:22:51:ef:d0:89:
39:e5:89:ea:b2:72:99:e4:15:19:2f:e6:13:00:95:
ff:9f:9a:d9:6d:90:94:ef:6b:78:b1:9a:3b:18:e7:
36:fa:9b:5e:e9:c0:97:aa:2c:8e:fa:cb:ab:26:e3:
b0:6b:4d:7e:73:1b:0f:d0:80:62:59:cb:ca:fe:97:
fb:44:5d:2d:88:a8:b4:a9:e9:aa:81:ca:7c:b3:89:
ca:f5:36:13:36:9c:4f:fd:af:49:9e:ad:16:b9:2b:
9e:b7:8e:04:c0:6e:00:3d:6e:98:be:79:ec:55:f0:
ca:62:26:15:a7:a8:eb:ef:26:56:ec:17:e2:43:23:
23:59:d8:86:75:fc:92:d9:52:4d:8e:1f:f1:c2:6b:
9d:72:e2:31:08:9b:e0:b3:e1:08:1d:a1:64:31:ef:
3d:c9:a6:be:c5:3c:e7:22:6e:8b:7c:fd:fd:04:ab:
00:fd:22:a2:6c:73:c0:95:91:6c:d6:9e:ea:69:7a:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AC:32:C7:1E:FF:18:CF:C4:7F:D6:E7:D4:54:88:58:B1:BE:6E:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03BFC4B8F01111EEB2EDCF8D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:94:e3:de:e6:b2:95:ef:76:89:9b:af:5a:9b:68:06:bd:57:
a5:2b:41:67:11:5f:5f:00:7b:b6:50:74:2d:4b:58:4d:fe:18:
6a:3c:d6:85:04:90:58:a2:c4:81:da:8c:df:c3:27:2b:06:2d:
ae:7a:c7:06:db:69:a9:7c:1a:17:28:b3:17:c5:8f:45:0a:f8:
3f:fa:ba:8d:eb:a6:cb:18:b0:50:8a:eb:3a:4b:5e:30:e1:14:
39:c6:d2:ef:c5:5d:3e:95:8e:56:bb:79:4e:94:9b:51:18:2b:
4c:a5:c1:46:54:8c:92:a6:c5:09:62:54:cd:f1:7f:4a:9e:35:
6b:e6:00:d6:08:7b:39:b7:4c:9a:60:a1:37:6f:22:04:c8:16:
fe:a4:07:f8:4a:5b:a2:06:1a:c2:15:3e:db:b0:8d:06:33:86:
b1:a6:cd:83:ed:25:29:2b:d5:5a:22:da:68:36:98:46:6c:9e:
df:39:01:f3:75:3f:d9:cd:a0:cf:0a:37:93:ad:97:c5:c3:40:
2f:57:8b:84:7b:89:c8:90:50:2c:d3:b5:44:08:37:13:ad:90:
c8:58:e0:bd:ee:cf:af:a2:a0:21:0a:27:16:f9:1f:2a:4c:78:
7a:22:d0:a9:31:7f:c1:a2:50:ec:dd:16:f1:6b:d7:ba:a6:6e:
47:d5:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:14 2024 by rpki-client on console-fra.rpki-client.org