Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1652C9BAFAEB11EE876B05FA007001B1.roa
File: 1652C9BAFAEB11EE876B05FA007001B1.roa (raw, json)
Hash identifier: tB4VFaLsoORu97+l61ZygWu87F9gfJVpdP7B35BkUus=
Subject key identifier: 75:F8:70:18:DB:F6:5F:7E:64:6C:72:EE:2F:B9:07:65:14:92:96:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1652C9BAFAEB11EE876B05FA007001B1.roa
Signing time: Mon 15 Apr 2024 05:43:29 +0000
ROA not before: Mon 15 Apr 2024 05:43:26 +0000
ROA not after: Thu 30 May 2024 05:43:26 +0000
asID: 63139
IP address blocks: 154.93.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44198 (0xaca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:43:26 2024 GMT
Not After : May 30 05:43:26 2024 GMT
Subject: CN=661cbe81-2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:c5:5b:42:02:8b:f8:d5:63:92:86:c9:ae:
48:00:fc:e1:2e:66:5f:c8:03:6d:c7:e8:17:03:56:
74:b6:94:1f:7f:24:51:22:3d:91:37:b6:01:a6:c7:
cc:65:60:7f:16:b2:e0:fe:6e:e5:75:52:8e:fb:dc:
d7:02:32:38:b0:d1:9e:a3:1a:36:0e:97:68:a8:a0:
00:99:84:58:7d:1c:48:2b:ea:0d:4b:b2:1d:f8:11:
9e:18:e2:92:39:ca:af:d3:1f:33:fb:3a:f7:b5:37:
6f:3e:0a:56:30:4c:bc:17:66:c4:5a:d6:37:70:70:
89:04:46:32:f7:fa:95:35:a9:63:77:15:43:a1:7b:
05:52:05:c8:f3:4b:8c:c5:a4:a7:de:c1:81:6f:eb:
00:46:91:ea:a0:ed:7f:42:74:95:1b:d2:16:ca:5a:
3f:8e:14:9a:d7:f6:d6:64:18:2e:09:18:32:15:17:
5c:f2:2f:ec:73:d8:ab:61:b2:73:53:6e:91:03:66:
93:b3:45:54:03:d7:f7:f5:27:4f:96:4c:ac:cc:6b:
48:b8:ee:5e:e1:18:e0:5d:7d:01:a5:76:97:a4:2b:
c6:8a:e6:d3:bd:20:0f:78:50:af:e2:46:82:27:b8:
84:48:68:07:45:72:2c:cd:d4:e8:ae:a5:ea:07:7f:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:70:18:DB:F6:5F:7E:64:6C:72:EE:2F:B9:07:65:14:92:96:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1652C9BAFAEB11EE876B05FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:13:e9:e7:95:13:59:82:6e:78:43:99:a5:6f:08:53:1a:51:
6f:6e:2e:11:1f:e0:bf:d5:b0:74:24:0a:7c:15:20:b8:77:c1:
2c:2f:d1:f9:39:27:f5:2b:c4:0f:26:a7:49:44:3e:d6:63:bc:
38:5e:5e:2a:3a:a3:a4:f1:d6:dd:2b:4b:8d:ef:39:c4:b5:3a:
56:58:09:6e:2b:92:f9:30:c7:36:55:98:26:a2:50:b6:3d:5e:
7c:d4:2e:81:fc:b5:ee:4c:3a:b8:e3:98:d5:3f:bc:8b:81:ac:
33:c3:f3:de:e5:f7:f9:2a:a7:3f:a7:fb:85:a9:ba:70:0c:2d:
b2:02:82:04:aa:38:51:84:8b:1c:36:fa:39:28:84:80:bd:10:
30:b3:7d:3c:e6:99:2c:75:6c:a5:ab:2d:1b:07:ad:39:e7:ce:
f2:32:50:ba:3c:0a:ba:4e:c4:e8:eb:29:9c:1a:08:52:19:9a:
a2:8a:8e:76:2f:4d:df:44:c5:39:55:c5:44:d5:f6:2e:d9:0f:
84:2b:65:a8:16:bb:d3:a2:9f:72:c5:53:e8:80:20:eb:46:91:
b7:9a:76:31:34:85:ab:63:5c:b8:b2:9f:6a:b8:7d:25:fe:d8:
a4:3a:52:48:ee:ec:23:6d:11:e6:8b:32:69:64:b0:39:67:e8:
13:c5:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org