Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E2CCB40FAF111EE91A8A027017001B1.roa
File: 0E2CCB40FAF111EE91A8A027017001B1.roa (raw, json)
Hash identifier: GWEZPTwMS6kZt0I6aN4ieEBv1tW/SJ5Etbd7qWIWw1Q=
Subject key identifier: 29:5D:A4:95:CA:33:49:A9:69:DB:8D:FA:D7:D9:2A:66:D5:0D:37:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E2CCB40FAF111EE91A8A027017001B1.roa
Signing time: Mon 15 Apr 2024 06:26:13 +0000
ROA not before: Mon 15 Apr 2024 06:26:09 +0000
ROA not after: Thu 30 May 2024 06:26:09 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44236 (0xaccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:26:09 2024 GMT
Not After : May 30 06:26:09 2024 GMT
Subject: CN=661cc885-1b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:42:a4:13:66:d0:f9:09:72:ea:5e:06:cc:2e:
7e:17:62:de:cc:fb:1b:fa:01:31:e3:b4:ea:9e:e9:
9f:70:90:3e:ae:08:08:68:1b:22:4b:71:47:07:1e:
a5:0b:35:96:47:53:e9:86:a4:55:3c:cb:55:9a:db:
d8:ba:51:ee:34:b6:41:c4:fe:7b:da:63:f8:b8:42:
e2:3d:9b:57:9e:36:bc:d6:85:a0:23:60:55:96:1d:
6d:21:42:c4:a5:0d:bd:e2:cb:44:fd:fc:92:2a:6a:
57:16:39:39:a7:9a:a0:da:f2:c9:4e:d1:2a:89:85:
a2:00:ea:a6:75:6d:f4:22:bb:c3:1f:0d:93:02:57:
d3:47:13:29:11:c4:88:53:ff:42:83:ac:9b:9e:88:
b5:e1:e7:ad:44:8f:63:60:6e:16:ff:f5:78:e2:4c:
ab:dc:58:22:fc:e5:ae:68:ee:16:cf:f4:21:74:d9:
01:28:8e:e7:a0:63:57:75:83:75:77:3d:3b:46:24:
60:c2:6c:5d:e2:1b:0c:0e:74:38:f0:7f:19:b5:cd:
15:51:cc:12:8f:26:e6:fc:17:77:8c:f5:fa:36:55:
ec:51:66:eb:4b:4a:a3:a9:75:77:20:19:86:c2:86:
b4:38:ad:58:a2:e9:c7:3a:cd:7c:a7:1e:72:bb:4a:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:A4:95:CA:33:49:A9:69:DB:8D:FA:D7:D9:2A:66:D5:0D:37:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E2CCB40FAF111EE91A8A027017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/24
Signature Algorithm: sha256WithRSAEncryption
86:da:37:a6:0c:81:0e:5e:78:72:74:59:2c:53:77:63:04:1a:
7f:d0:49:ec:cb:5e:22:e4:fa:5a:45:f2:f2:2f:37:e6:09:d0:
23:d0:63:8f:db:5d:a4:6f:f3:15:ff:d6:e3:1c:23:0e:b9:91:
0c:67:78:96:cc:b8:22:d5:3f:49:bb:f8:90:0e:e5:32:7d:f8:
1f:4a:39:02:b2:06:c8:20:5e:81:12:36:51:e4:ee:74:e4:5e:
1b:c8:3f:2e:cf:6e:9b:f9:0c:a7:4a:1a:0e:fe:b8:06:0a:fd:
b4:79:2d:18:95:b7:0e:74:ec:a5:64:31:d5:26:3f:18:46:1a:
bf:df:47:ce:a9:ed:a5:24:ba:fe:34:84:52:df:96:ad:c6:c9:
7b:7a:23:f2:a1:ac:bf:44:b3:3a:2e:dc:1b:5c:99:fb:78:bd:
00:ac:17:61:b9:3c:b5:16:cd:21:80:1f:d0:13:64:95:c3:c6:
f0:e3:34:ec:20:7b:7a:4d:50:e2:4a:fc:67:1b:76:3b:e3:d3:
be:bf:76:d9:ce:f8:cf:a1:1b:d3:0d:55:74:d0:a0:4b:aa:29:
a1:c7:04:b7:92:12:8f:6a:2d:d7:5e:00:80:7f:fa:f0:82:58:
58:49:95:b8:8d:56:ab:19:17:1c:eb:c7:4f:df:90:81:a4:6d:
bd:91:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org