Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BB4278F47E11EEB74BC9B1775412E6.roa
File: 08BB4278F47E11EEB74BC9B1775412E6.roa (raw, json)
Hash identifier: 1tBdwvarxIGFq7QggV3HsXMda1Wuz4Cj+SmPBpBl7jU=
Subject key identifier: D6:AB:EC:7D:FB:FD:61:D8:35:E9:AB:17:F9:41:0A:26:05:58:B6:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A994
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BB4278F47E11EEB74BC9B1775412E6.roa
Signing time: Sun 07 Apr 2024 01:27:44 +0000
ROA not before: Sun 07 Apr 2024 01:27:41 +0000
ROA not after: Mon 13 May 2024 01:27:41 +0000
asID: 138915
IP address blocks: 154.206.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43412 (0xa994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:27:41 2024 GMT
Not After : May 13 01:27:41 2024 GMT
Subject: CN=6611f690-8a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:f6:56:a4:cd:46:ab:41:24:46:ef:91:af:
76:04:dc:10:ac:91:da:60:17:09:fa:a4:65:75:91:
a0:de:b8:2e:e7:75:b6:0a:48:7f:ef:a2:b2:b7:ad:
51:28:bd:80:e1:98:64:32:ee:ab:09:81:2e:e5:12:
61:43:88:46:bd:44:78:96:7e:72:f5:f0:05:8f:47:
b9:22:cb:da:c8:04:af:30:07:91:7a:06:fb:e8:bc:
82:a2:96:92:8b:60:57:94:8d:f0:a5:6a:0a:9e:ba:
e8:90:b1:2c:f0:54:b8:05:5a:f4:f4:b2:36:cf:69:
5f:99:09:8f:55:74:01:df:c9:77:80:d1:f3:48:e5:
0c:35:de:93:da:71:de:9e:3e:be:c3:7d:13:d0:9a:
4d:0c:c4:a7:5f:fe:bf:29:7c:27:0d:7d:64:77:2d:
55:15:e9:cd:2c:46:4e:59:7d:67:53:b4:b2:4b:8a:
e6:04:5f:35:89:7d:38:47:51:46:1c:ae:ac:80:d6:
11:09:7b:68:9d:54:ad:80:25:0f:bb:52:31:c6:d7:
54:1e:1c:b5:73:5e:08:f0:fe:1b:f6:bf:4e:9d:1f:
24:f7:92:03:d5:2d:3a:d7:d4:81:eb:8d:73:6c:4f:
19:3a:1b:59:5b:4e:1b:44:fe:63:41:b8:90:58:a5:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:EC:7D:FB:FD:61:D8:35:E9:AB:17:F9:41:0A:26:05:58:B6:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BB4278F47E11EEB74BC9B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:91:90:71:8c:5d:73:52:3e:1f:51:42:0c:d3:bb:a4:00:3e:
94:58:34:31:79:39:27:3e:20:34:9f:d7:7d:2a:8a:e2:f7:7f:
c8:74:ad:40:5c:ee:ff:d6:47:99:a2:fe:6d:ba:dd:fb:62:4e:
22:14:87:d5:33:3d:58:97:fa:87:a7:65:47:cc:73:93:f0:bd:
76:ca:42:8a:b5:58:1e:96:8e:b1:b2:60:ca:d7:f2:c5:23:2e:
71:06:2e:83:d5:c0:e8:1a:75:65:18:40:56:87:84:22:e9:c2:
ce:8d:f6:cf:9e:d7:1e:1e:e2:1a:13:06:9b:87:6c:35:92:61:
96:aa:d7:34:7d:53:fa:30:cb:a5:40:c9:93:9f:09:af:36:91:
97:95:6c:30:f0:58:2c:e1:5d:88:48:96:ed:5f:63:ca:da:1d:
4a:91:fe:7e:fb:2e:3e:9c:b3:f6:09:b6:07:0a:d3:3a:76:2b:
bf:5e:d3:c1:b1:c4:d1:f3:fd:e1:49:44:79:4e:d0:89:1c:4f:
ae:f2:12:a0:da:40:3b:1d:d2:19:23:b8:9c:fd:f3:0a:ed:b6:
af:d6:ff:20:43:24:ef:40:38:1b:83:8d:84:d0:f7:eb:86:cc:
bb:91:67:b8:41:04:82:d5:e8:bb:10:5d:5e:ec:f0:70:45:58:
23:8a:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org