Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A834B50F74911EEA369A052017001B1.roa
File: 0A834B50F74911EEA369A052017001B1.roa (raw, json)
Hash identifier: v6YHIxPlc/la7VeqLkqB1OWWDEx2gBPDjXPHoYgKtcU=
Subject key identifier: 19:4E:06:F7:C5:24:75:8D:0D:AF:52:3F:5B:82:02:07:7A:2A:79:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A834B50F74911EEA369A052017001B1.roa
Signing time: Wed 10 Apr 2024 14:45:58 +0000
ROA not before: Wed 10 Apr 2024 14:45:54 +0000
ROA not after: Thu 17 Oct 2024 14:45:54 +0000
asID: 152450
IP address blocks: 154.205.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43758 (0xaaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 14:45:54 2024 GMT
Not After : Oct 17 14:45:54 2024 GMT
Subject: CN=6616a626-228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:a8:18:b1:f6:02:13:8c:8f:cd:2e:33:50:
95:f9:4d:a0:71:23:46:fc:36:d9:85:d2:85:69:7a:
a9:c9:74:49:b8:eb:6f:fc:0f:c0:c9:88:f5:48:b3:
9e:21:c2:f2:5d:69:91:26:c8:c8:d3:5c:bb:68:ba:
31:cb:b5:f3:db:28:e5:5c:90:04:cd:c2:10:38:e8:
c7:40:b8:be:bd:67:df:5f:75:70:58:8f:e6:83:0f:
32:a4:e0:b1:01:f5:3c:14:ed:f2:22:78:b2:31:a4:
0f:99:4a:db:56:18:8c:3a:02:64:c8:a1:c3:92:08:
7b:f0:7b:8b:24:30:32:24:1d:16:0d:29:91:73:16:
cf:8f:26:90:7f:ef:14:9c:61:da:c9:91:46:a8:13:
4f:7f:83:5a:d6:53:d9:05:e6:92:15:b1:a0:dc:ca:
8d:32:cf:a5:86:da:5e:1c:71:20:53:4e:5d:9c:3a:
99:86:81:f2:15:e0:ec:63:8e:da:f6:c5:6d:65:c1:
75:fc:6f:4f:71:d7:27:00:ce:1d:ee:3d:ff:a0:b6:
f2:33:6d:6b:b4:ac:21:c3:31:18:fd:49:0a:e6:2a:
8d:9c:1e:0f:c5:fe:f1:80:be:14:bc:64:57:5f:e4:
aa:64:4c:ce:e5:ac:03:c7:f6:e3:ca:ac:b0:bc:5c:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:06:F7:C5:24:75:8D:0D:AF:52:3F:5B:82:02:07:7A:2A:79:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A834B50F74911EEA369A052017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0/23
Signature Algorithm: sha256WithRSAEncryption
48:20:56:50:f6:37:90:f8:27:9a:3e:af:83:59:ec:c7:7a:fc:
65:ba:93:a6:41:6d:ea:91:12:e5:83:18:b2:17:e0:6e:96:39:
1f:a7:bc:24:ff:41:43:6a:f4:4b:0b:a3:5f:44:d3:50:24:0a:
a5:a6:4d:db:b8:2b:fd:f9:87:07:c4:e1:87:9e:f4:40:7d:15:
e5:b3:cc:82:cf:ab:ea:49:5f:93:2d:18:65:d3:06:d5:68:9e:
12:78:50:57:4f:17:33:5e:6c:9f:ba:fa:45:02:2a:3e:6d:a6:
e8:78:85:82:5d:07:7d:9b:53:f1:47:37:dc:f3:40:2f:b2:e0:
ac:c0:93:ab:de:1b:12:ea:9d:35:64:7f:9b:35:54:9d:cd:96:
ca:e2:68:29:da:0b:10:5b:08:45:54:00:44:81:1b:6f:71:74:
59:0a:e2:36:7e:52:6f:60:1d:5f:24:a4:8a:ee:d1:57:95:ea:
be:83:7c:90:a4:e6:ba:5c:f4:7f:6c:f9:7e:50:14:76:bd:86:
33:72:73:4a:ad:00:1a:a6:3f:f2:2e:a8:ec:4b:a7:c9:b0:cc:
f9:ba:ca:f6:4e:ce:ae:5b:53:2f:9d:37:e9:95:91:9e:a1:41:
80:86:64:f2:93:ed:7d:f8:1c:de:fa:02:f4:a1:c3:95:0c:15:
79:ed:37:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org