Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0903B09CFBB011EE851DA942017001B1.roa
File: 0903B09CFBB011EE851DA942017001B1.roa (raw, json)
Hash identifier: f/jRQmZtnqfO8EYy+VVrs2Zo5U4fcd+nmMTsmBhiGNg=
Subject key identifier: 37:61:5E:8B:01:A5:83:49:37:A2:FB:FA:4F:63:F4:4E:12:31:24:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0903B09CFBB011EE851DA942017001B1.roa
Signing time: Tue 16 Apr 2024 05:13:18 +0000
ROA not before: Tue 16 Apr 2024 05:13:14 +0000
ROA not after: Thu 09 May 2024 05:13:14 +0000
asID: 54801
IP address blocks: 154.91.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44511 (0xaddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 05:13:14 2024 GMT
Not After : May 9 05:13:14 2024 GMT
Subject: CN=661e08ee-92d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:1a:2f:77:d1:24:8d:7e:85:46:fa:54:88:
6c:87:c0:49:62:19:83:f5:08:a8:00:14:bd:76:a0:
1b:18:b6:5b:e6:5c:ad:26:3e:fa:13:aa:d5:fb:68:
eb:2a:d6:77:ce:44:5b:53:b7:77:46:f0:b6:33:0e:
ba:8e:7e:24:62:b9:a6:73:7a:03:f5:b0:7a:85:51:
22:a0:f9:41:b1:1c:84:f8:11:db:c0:3c:25:6b:9e:
d7:ed:39:7a:90:a1:fa:78:b8:9d:9b:75:7f:02:54:
61:26:14:17:9a:a3:bd:68:42:89:0d:21:af:c4:cb:
80:ed:67:a0:99:48:9d:b8:d7:a8:17:26:1b:ed:5d:
4d:f5:e5:23:2e:7e:85:9c:1c:6f:8a:82:cc:f3:4b:
59:6e:01:59:49:43:90:4c:28:a5:a8:e6:05:14:64:
82:97:fd:45:bf:f9:bd:e7:e1:6f:b8:8f:3b:80:80:
7b:19:d5:27:af:90:71:a3:b7:9b:6c:48:ef:d7:86:
0b:a5:6c:7b:be:03:e4:a6:9b:a1:3f:c7:80:3a:bf:
c4:f0:c7:e1:2f:d0:0d:3c:9d:40:bc:ab:ba:36:0d:
7b:2f:42:cd:9d:ae:38:81:e1:5b:92:e3:a0:43:c0:
b0:e3:d0:0a:69:2d:a7:f6:e7:0d:49:de:d6:b1:a8:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:61:5E:8B:01:A5:83:49:37:A2:FB:FA:4F:63:F4:4E:12:31:24:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0903B09CFBB011EE851DA942017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:84:1c:ee:a3:47:30:cc:e5:21:cf:65:24:68:67:0e:57:93:
ca:83:d4:5d:93:0c:a7:f9:1f:1d:10:27:1e:28:a1:8c:2a:13:
97:ff:59:70:cf:a3:89:9e:19:46:39:19:e6:f3:9d:e9:71:dc:
6f:f3:94:d3:5a:fc:52:3b:cf:65:d4:17:11:11:95:f8:d1:77:
25:d4:bd:f8:03:6d:bf:66:f8:fe:a6:cc:a9:42:63:6a:c5:8e:
ee:2a:4e:d2:1c:0e:39:b3:f1:73:95:40:5a:08:e5:c2:fa:b0:
b0:2a:b5:7a:b3:c4:a2:d4:01:a0:29:22:e4:a5:e6:c4:31:78:
7c:4c:f2:c4:92:02:fd:b5:51:1c:45:6c:c4:41:ee:be:0e:99:
eb:16:56:a1:c9:db:14:98:5e:a2:b5:9b:29:c8:a4:97:ce:fa:
39:81:dd:2f:71:30:df:ec:3d:60:c8:f4:da:03:d5:31:cc:82:
7a:ff:2f:60:95:cd:07:49:5f:83:5b:07:51:4c:10:39:e8:d1:
d2:d7:40:1c:e8:9c:19:4c:d1:c5:50:a6:41:f8:72:d0:80:b3:
97:da:97:1e:53:84:17:b7:e8:ee:6c:ba:ae:1b:ac:9d:01:56:
8c:f9:b4:8a:9c:65:71:85:a5:5a:af:7e:90:b1:bd:a8:ac:33:
9b:d2:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org