Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAFB16EF86F11EEB1E4E832017001B1.roa
File: 0AAFB16EF86F11EEB1E4E832017001B1.roa (raw, json)
Hash identifier: xUAVn7fQb4D6g0fA5xroR/yxwbUkEYbz0s9rMIyIpQ4=
Subject key identifier: 63:2E:90:FA:7F:85:C8:DE:1F:ED:A7:16:F5:20:F6:27:35:C8:47:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAFB16EF86F11EEB1E4E832017001B1.roa
Signing time: Fri 12 Apr 2024 01:50:30 +0000
ROA not before: Fri 12 Apr 2024 01:50:27 +0000
ROA not after: Tue 22 Apr 2025 01:50:27 +0000
asID: 209242
IP address blocks: 154.197.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43940 (0xaba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:50:27 2024 GMT
Not After : Apr 22 01:50:27 2025 GMT
Subject: CN=66189366-defc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:87:9e:36:02:d1:dc:62:a5:bf:1b:3d:f2:
36:36:37:80:12:43:25:15:18:90:c8:47:fa:b9:ce:
a6:58:18:ea:d8:7c:58:1b:8f:23:0d:69:bb:c3:8e:
16:c1:77:bf:5e:1c:bc:8d:2e:85:4a:57:64:b8:6f:
01:a4:cb:00:66:02:76:0c:77:dc:63:fa:f6:ec:3b:
32:4b:a6:30:33:25:9e:c5:93:78:8f:fe:fd:e4:f1:
8e:7c:9c:1c:03:20:3f:7f:45:9d:63:59:1e:4d:40:
5f:ae:43:1a:46:e0:2e:fa:4b:c4:f1:54:52:68:fd:
9a:ea:85:7c:46:4f:92:c3:70:a6:7f:e7:75:78:03:
c2:80:ae:b0:c5:66:03:85:6c:2a:df:bb:fb:8c:62:
f3:eb:3e:9f:cc:63:da:55:a6:ca:72:44:83:3f:70:
a7:c5:86:a9:96:9e:83:91:14:66:b5:0f:36:6c:e4:
8e:df:b1:53:9e:b2:9b:06:ab:7b:11:04:97:01:34:
a2:36:c1:a2:b4:0e:2d:6b:44:15:d6:c5:3d:c5:db:
23:5d:82:ab:46:ba:2b:63:a5:6c:30:8d:71:3b:ab:
74:61:17:62:c3:fa:35:2b:7b:de:d4:a0:4b:ae:d5:
ba:05:bd:ff:29:0a:3c:d8:3f:87:2b:f7:55:fb:63:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:90:FA:7F:85:C8:DE:1F:ED:A7:16:F5:20:F6:27:35:C8:47:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AAFB16EF86F11EEB1E4E832017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.64.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7f:c2:1f:2b:68:7b:f2:66:ce:0b:f1:01:b9:2b:f4:83:6e:
6f:5e:e2:02:8b:13:77:c2:85:48:ac:40:46:11:b6:0b:a7:71:
94:93:10:0c:01:c1:5a:f2:bf:f8:11:1d:8f:5c:7d:9f:c6:24:
dc:eb:43:af:40:f0:19:4f:ed:76:9a:2e:3c:50:02:73:b9:cc:
e9:9b:72:e9:d0:a4:ed:c5:b3:22:88:e5:f5:19:41:d4:e0:1b:
7a:7f:fd:85:35:d3:ab:de:9b:be:3b:e7:7e:66:02:60:8b:6f:
d7:f6:aa:38:8d:e4:3c:b9:85:30:ec:92:6a:17:66:23:10:29:
17:5a:9b:72:9c:b9:18:9c:ca:a1:e4:d7:21:93:9f:ca:0b:2f:
e3:1d:b4:91:2b:80:a7:f7:e6:d2:52:5f:ee:f9:85:8f:29:23:
f0:78:71:92:a8:1f:31:c5:d4:8f:a3:45:e8:3a:a7:a9:59:ca:
7b:0a:1b:44:7f:15:76:47:de:44:85:bc:30:8d:8c:09:9b:53:
b0:9a:7e:7a:69:49:4a:7d:57:74:89:f1:a5:b8:8c:86:42:60:
3f:05:38:57:18:1f:9b:26:28:f4:b6:36:b0:55:36:55:f7:c7:
ff:d9:29:db:9d:82:c7:44:ad:75:3f:45:b5:2b:b0:d6:de:a8:
10:e5:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org