Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF18A6EDB511EEBD88D39B775412E6.roa
File: 0ADF18A6EDB511EEBD88D39B775412E6.roa (raw, json)
Hash identifier: 16K0Si22HcaLMFhA0qnKX2nz9yby+iyBMy4fdbz+cno=
Subject key identifier: 9A:D6:C8:FC:47:00:D0:6E:C9:17:0E:6B:2C:80:2D:17:5E:83:7B:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A71B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF18A6EDB511EEBD88D39B775412E6.roa
Signing time: Fri 29 Mar 2024 10:13:52 +0000
ROA not before: Fri 29 Mar 2024 10:13:49 +0000
ROA not after: Sat 04 May 2024 10:13:49 +0000
asID: 142062
IP address blocks: 154.86.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42779 (0xa71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:13:49 2024 GMT
Not After : May 4 10:13:49 2024 GMT
Subject: CN=66069460-c427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:0f:bf:df:07:8b:3f:35:1d:2b:28:5b:51:
10:78:ff:48:84:62:e7:2a:a2:40:0d:95:c8:33:de:
2e:6b:7d:f6:4e:5c:70:ba:13:31:85:3d:15:23:d8:
4e:64:c2:5b:39:2c:8d:89:cc:a3:8f:f8:5e:be:0b:
23:f8:06:28:4b:43:25:58:e2:50:79:b6:7d:bb:e1:
37:89:20:90:7b:ed:c3:23:04:cd:65:1e:b3:d0:ff:
a3:4b:46:ca:1f:e8:76:25:22:b9:07:bf:6f:0c:3b:
b3:fc:96:0e:41:83:f1:09:fb:de:92:bc:36:d4:40:
fd:1e:12:9e:4f:7e:68:45:8f:2f:56:4c:97:75:fb:
22:b8:24:50:b7:83:d6:af:7e:fb:00:5e:b3:1d:2e:
c1:1d:90:03:2c:87:eb:0b:85:5d:d3:cc:9f:a8:b7:
06:14:d4:8b:32:6b:08:ce:17:6c:a8:09:a7:2a:71:
a4:13:dc:27:74:81:47:e1:1a:12:65:88:1a:4c:d1:
d8:b3:bb:af:21:9a:a1:68:67:33:4e:5f:ba:bb:15:
69:1a:0c:27:fc:6e:36:7b:a8:cf:97:0f:66:33:67:
d1:c3:42:9e:16:7f:ed:05:20:7a:0e:98:9f:32:a4:
88:73:ef:ab:5e:28:90:77:81:bd:f0:ee:08:ae:e4:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:C8:FC:47:00:D0:6E:C9:17:0E:6B:2C:80:2D:17:5E:83:7B:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ADF18A6EDB511EEBD88D39B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f3:8a:de:2c:d6:b0:09:ea:e5:b9:36:ca:f6:6f:af:cb:eb:
ca:f1:30:ef:8d:79:01:3c:b2:8a:16:3f:1b:9d:de:8a:4c:f4:
d7:11:5c:7b:ae:50:90:72:d9:e2:ef:5d:7d:d1:82:66:58:b6:
f6:75:57:6e:1b:76:26:af:a5:37:b4:a0:aa:22:65:5e:83:0c:
57:71:1e:66:6b:3c:5a:7f:04:62:c4:ca:cc:19:e7:c1:57:d2:
b1:55:71:f5:54:e2:b8:9a:4a:f1:62:e7:21:dd:7e:36:c4:56:
69:a0:b3:93:1f:b2:43:fd:98:55:ba:4b:00:1f:c6:b8:e5:85:
a8:ca:98:26:a3:65:1e:d3:af:be:f7:52:de:81:fe:42:9b:dc:
19:6b:ae:64:b2:88:0e:53:aa:72:0f:41:1f:b7:d5:e5:a7:ef:
59:39:0d:52:a9:a3:12:08:f8:85:59:83:e2:e8:55:18:0d:15:
1f:1b:6e:f8:96:6a:d0:c4:ed:1e:b6:95:71:4d:17:c3:cb:53:
e5:72:3d:d1:b9:1a:95:d8:41:1c:97:73:2f:ab:89:0d:44:8b:
8e:1a:f1:00:91:bf:48:c0:e2:4e:79:54:66:ce:df:39:a6:a1:
a2:1b:08:5e:27:ea:c2:51:55:08:48:95:59:11:e5:06:d8:76:
b1:d4:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org