Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DA9BC9643EE11EEB4BE3B5E4AD9E6FC.roa
File: 1DA9BC9643EE11EEB4BE3B5E4AD9E6FC.roa (raw, json)
Hash identifier: xufRYVajOdOBaEJ82PlCDeufeaLYJiTqum+6OLEJeE0=
Subject key identifier: CA:CC:80:0F:08:02:EC:91:C6:36:D2:1C:33:42:A5:CC:FA:47:47:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 39E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DA9BC9643EE11EEB4BE3B5E4AD9E6FC.roa
Signing time: Sat 26 Aug 2023 08:54:07 +0000
ROA not before: Sat 26 Aug 2023 08:54:04 +0000
ROA not after: Wed 21 Aug 2024 08:54:04 +0000
asID: 138995
IP address blocks: 154.196.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14816 (0x39e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:54:04 2023 GMT
Not After : Aug 21 08:54:04 2024 GMT
Subject: CN=64e9bdaf-bcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:74:91:19:3c:eb:9b:d4:c3:ef:5c:24:db:
fa:ab:f6:dd:13:71:e8:f4:fc:21:b0:68:46:04:0d:
c6:0d:23:2c:fb:45:e3:cf:8e:9a:7d:50:2c:17:89:
ab:c2:b1:d5:d1:6a:b9:4d:03:4c:0f:a5:0c:88:c9:
54:a7:3d:09:79:8d:51:27:79:02:82:04:da:55:64:
f0:8f:73:59:14:95:42:5a:81:f7:25:4a:59:57:b9:
b8:90:5b:4b:b9:83:a6:98:61:f9:02:1c:61:74:ee:
70:b4:dd:32:fc:ab:4e:3e:5b:06:84:4a:9d:33:bb:
17:b9:76:92:e8:b3:9b:25:31:ad:74:ef:3d:0a:27:
20:50:eb:32:66:5b:48:32:ca:41:1b:6d:2e:79:fb:
e4:8c:c9:a9:c4:d1:83:fc:ed:a4:08:a0:27:46:68:
6c:db:92:e6:b6:58:06:77:84:6b:14:2c:a9:ba:76:
20:23:a3:bd:e9:7f:22:51:a4:2f:37:c4:ed:50:86:
74:7f:ff:71:f7:65:a3:29:18:da:5c:7f:b2:d0:6b:
0f:15:78:81:4f:cc:de:bd:19:97:d9:84:df:e9:09:
63:ec:cd:48:8e:64:2f:db:75:b3:e3:66:dd:59:00:
26:61:9e:d7:d0:a5:91:cb:c4:d7:80:00:20:0c:9c:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:80:0F:08:02:EC:91:C6:36:D2:1C:33:42:A5:CC:FA:47:47:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DA9BC9643EE11EEB4BE3B5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e7:a5:3f:93:2d:3e:15:25:9d:3d:d6:1d:f8:54:62:06:08:
ea:84:8b:53:06:1c:61:95:47:db:6a:fa:29:54:5e:54:3b:90:
03:95:5c:7b:dd:a3:8d:a7:91:a9:9b:31:75:64:9e:67:74:92:
d8:f0:c3:49:9e:38:5f:0a:b8:a9:12:b8:2e:3a:76:f0:c4:9d:
4a:26:a8:18:54:e7:23:c5:77:08:e4:75:a0:cd:78:7d:37:78:
8f:32:ed:d6:0d:31:de:85:7c:fc:dc:e3:3c:b8:85:e6:38:b4:
8a:28:6d:8a:54:93:86:55:4a:d5:71:fb:ea:dc:8d:ac:04:61:
0b:51:97:18:90:80:48:e5:1b:9e:dc:cf:97:ec:ff:8d:45:67:
72:e4:ae:27:0b:f8:4d:fe:b4:d3:1b:08:a1:b8:fe:8e:d6:6e:
86:69:0b:ec:39:93:c0:85:72:b8:72:73:1d:96:13:db:ac:ae:
0d:89:11:da:19:4f:ad:8d:89:1e:41:91:ab:6a:8d:89:a6:9d:
4e:37:f1:30:d0:ab:5e:7a:2f:a7:2c:b2:5c:f2:01:6e:b3:70:
c1:8c:2a:90:53:cd:e0:62:55:dd:bc:7e:ba:7e:13:79:b0:e3:
ae:56:15:b9:85:04:ef:67:9a:42:b5:d6:71:05:65:0b:d9:cc:
fd:62:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org