Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5502B2F70511EEA9A8F087775412E6.roa
File: 0E5502B2F70511EEA9A8F087775412E6.roa (raw, json)
Hash identifier: KDSTzwC5P4dRQUkdE61wbZWoAvsgq7ahz0vOK3ByEzg=
Subject key identifier: B4:11:71:09:EF:CB:8C:6A:AC:08:5C:ED:67:2B:2C:23:74:EF:DD:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5502B2F70511EEA9A8F087775412E6.roa
Signing time: Wed 10 Apr 2024 06:39:18 +0000
ROA not before: Wed 10 Apr 2024 06:39:15 +0000
ROA not after: Sat 20 Apr 2024 06:39:15 +0000
asID: 54801
IP address blocks: 154.91.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43716 (0xaac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:39:15 2024 GMT
Not After : Apr 20 06:39:15 2024 GMT
Subject: CN=66163416-e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:23:d8:d9:db:8c:ef:74:a0:8d:a2:29:26:
69:cc:29:22:ad:99:46:0a:b8:56:70:f0:75:49:b2:
83:4b:f0:29:dc:70:75:38:0d:de:47:4b:6e:f9:8e:
35:18:fe:c4:df:5c:ba:5f:cf:4b:d5:54:81:56:75:
12:e1:05:3f:21:84:f5:85:c9:db:f4:63:e2:18:0a:
87:c8:da:a6:84:5f:d7:94:1a:f0:5b:90:c9:e3:70:
06:b5:02:31:34:24:f3:36:62:13:f7:13:1c:f0:e7:
25:96:33:d3:34:20:10:ca:8a:b2:dc:cd:ab:5f:85:
34:19:55:96:99:9b:38:37:ef:ae:90:73:2d:ea:ad:
85:cc:a2:0d:05:fb:93:bc:2f:5c:c4:fe:b7:ef:fb:
20:bb:7f:59:23:e7:88:6d:ea:3c:c6:38:00:e7:05:
4e:eb:0d:a8:f2:ce:0e:be:d1:45:6e:fa:3b:0c:2c:
0f:de:9d:e1:19:ec:54:e5:60:60:c4:16:70:10:e1:
71:36:83:5c:3c:64:3c:8d:4d:ff:f1:b8:f3:fd:c9:
d8:94:e8:ae:93:d2:1f:54:8d:2b:80:e4:10:bb:ad:
5b:74:0e:1b:f7:a0:ac:41:55:0a:d3:11:5e:9f:d3:
97:9e:0e:6e:b1:91:32:89:f6:fb:94:08:ce:2b:2f:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:71:09:EF:CB:8C:6A:AC:08:5C:ED:67:2B:2C:23:74:EF:DD:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5502B2F70511EEA9A8F087775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a0:8d:b3:15:41:30:ee:5b:9e:e3:81:0a:40:84:57:c6:0c:
5c:75:f6:56:ea:7c:84:ba:68:a8:b6:29:de:99:2f:dd:01:8a:
e5:01:c0:13:a0:4f:19:c2:6f:63:d9:10:4f:53:8f:4a:73:73:
de:15:f5:af:5a:af:82:1b:49:05:72:5c:c4:7c:b4:a4:79:05:
68:49:35:db:25:57:9f:11:d2:64:24:6e:c1:81:18:8a:8c:8d:
e9:fe:da:79:b0:64:bf:8f:03:5c:db:82:81:6d:a5:63:3b:7f:
a6:cc:50:f8:58:30:10:40:82:51:ca:1b:3c:85:2b:ef:a6:10:
79:13:ca:1c:5e:50:61:22:8f:9a:9a:16:3b:c5:0f:a2:87:e5:
0c:55:e3:b9:a0:d1:35:6d:91:f7:f0:47:8c:e2:a0:ec:fc:92:
70:27:e7:cf:1e:0f:47:a4:6c:38:1c:9a:96:10:e5:5a:6b:1d:
2a:f2:5e:a3:d3:62:1e:ca:1a:2b:d4:16:ae:cb:d8:33:db:f8:
89:0c:4b:36:7e:47:83:7e:fc:6e:17:28:76:8b:05:71:42:4e:
a5:e3:8b:f6:62:07:20:69:88:c0:c6:bd:47:97:e9:f5:18:0b:
d7:6d:7c:8c:35:b6:01:55:f2:d5:41:a3:4a:02:7e:00:e2:57:
91:f3:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:15 2024 by rpki-client on console-fra.rpki-client.org