Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CB50BEEDB411EEAE2C6D92775412E6.roa
File: 06CB50BEEDB411EEAE2C6D92775412E6.roa (raw, json)
Hash identifier: fBbA3osD/VtzmQKHxKHMFVMjQl3fHFaHtJvsZpfxBEU=
Subject key identifier: 5E:07:5E:28:9C:E7:F5:EC:55:E5:7C:31:FB:04:D1:00:0B:97:28:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A713
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CB50BEEDB411EEAE2C6D92775412E6.roa
Signing time: Fri 29 Mar 2024 10:06:36 +0000
ROA not before: Fri 29 Mar 2024 10:06:33 +0000
ROA not after: Sat 04 May 2024 10:06:33 +0000
asID: 142062
IP address blocks: 154.86.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42771 (0xa713)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:06:33 2024 GMT
Not After : May 4 10:06:33 2024 GMT
Subject: CN=660692ac-b23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:ca:22:60:2c:ee:f1:f0:a3:31:1b:cf:16:
42:f5:36:18:66:9b:3a:1a:d8:b0:9e:17:b1:e4:a3:
ee:f7:0a:0b:ae:2e:5e:6e:93:c4:db:80:07:f8:74:
1c:98:53:e4:8c:88:06:d4:bd:ef:46:f6:65:d7:8e:
c8:85:0f:14:59:92:22:2b:7a:2c:48:c5:2f:1e:89:
73:60:d0:53:ba:b6:f6:4d:ba:9e:7f:8f:29:35:3c:
a9:0d:3c:ae:e7:04:be:24:0c:c3:e8:80:01:db:a8:
e7:d5:67:72:45:15:41:bc:24:41:74:fe:66:bf:46:
d3:de:1f:49:52:e3:ca:a6:8f:a3:bb:67:71:a5:d9:
24:16:1c:81:1c:90:0f:d7:34:43:49:a0:48:00:37:
47:35:5c:45:b1:e6:5a:77:cb:1f:a1:96:73:97:cc:
bf:ec:61:4c:e0:b0:b7:f0:1f:15:05:ba:8d:1e:42:
e6:42:74:f4:58:fd:c9:a8:ed:24:44:33:e3:4f:51:
03:e9:27:ad:75:e4:e0:80:99:fd:25:3b:e9:31:93:
6a:c6:72:2b:2f:74:b7:0e:fc:0c:84:6e:b9:3e:a7:
92:d0:6a:0e:72:38:57:55:b4:4e:9a:ae:20:da:6f:
f0:6d:69:b4:92:10:ad:5e:19:93:16:16:81:85:28:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:5E:28:9C:E7:F5:EC:55:E5:7C:31:FB:04:D1:00:0B:97:28:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CB50BEEDB411EEAE2C6D92775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.78.0/24
Signature Algorithm: sha256WithRSAEncryption
79:58:7c:e6:7d:64:2b:96:6b:f6:3d:8e:69:92:61:b4:49:b3:
f5:09:bc:dd:6b:0f:17:7e:1b:ad:51:46:e7:3e:07:e6:79:13:
fe:60:e5:4a:b9:33:05:38:7a:54:de:29:6d:75:ec:cd:63:3b:
09:64:cb:15:11:93:cf:91:c4:f9:6a:ce:f2:59:b1:6f:11:29:
a7:da:ac:b2:8a:66:66:d8:16:38:4e:9a:fd:a3:8c:db:e1:53:
fc:17:93:50:d2:46:59:ee:bf:66:7a:8f:0d:43:8d:00:0b:47:
8a:3f:a8:b9:2a:30:50:0d:9a:c3:a8:68:78:61:48:c1:10:8c:
24:7f:d8:87:ad:5d:b8:21:41:d1:63:a9:0c:08:05:8d:05:1b:
c9:ab:a5:34:2d:6c:6f:12:d1:12:22:88:42:3f:9e:ae:74:9a:
ae:e0:c5:ba:6c:ad:47:09:d1:c0:df:3c:09:5c:52:8d:75:bd:
46:e5:b7:34:f1:ac:58:b5:ce:f8:2d:fe:46:3d:3c:bf:03:d7:
49:a2:92:ca:26:d7:b2:3a:c1:dc:16:ec:2d:c9:bb:3f:72:43:
3a:2e:b0:74:77:b4:26:7a:64:09:c1:34:ce:bc:0e:b5:78:7c:
4b:f7:61:3f:5b:5e:1d:c6:64:8d:cc:f4:96:1d:dc:d9:8b:a1:
9e:80:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org