Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/202C5B4CFBAC11EE9F752222017001B1.roa
File: 202C5B4CFBAC11EE9F752222017001B1.roa (raw, json)
Hash identifier: k5iKpxTlCfwVXKTNVHYkonyjyWDUGHGKwN+8c4UuBUs=
Subject key identifier: 48:41:7F:E3:73:9A:BF:16:E0:B8:36:E3:3A:09:D7:2B:A4:DD:A2:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/202C5B4CFBAC11EE9F752222017001B1.roa
Signing time: Tue 16 Apr 2024 04:45:19 +0000
ROA not before: Tue 16 Apr 2024 04:45:15 +0000
ROA not after: Thu 30 May 2024 04:45:15 +0000
asID: 63139
IP address blocks: 154.94.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44475 (0xadbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:45:15 2024 GMT
Not After : May 30 04:45:15 2024 GMT
Subject: CN=661e025f-c0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:5d:09:dc:60:b9:e8:14:40:fa:8f:a7:21:
d0:87:a0:2a:69:90:fc:66:75:53:bd:a3:39:41:d2:
62:8d:d6:f1:79:01:64:f9:c2:8a:68:d7:40:90:eb:
b9:00:2d:dd:9b:da:6f:95:0b:ac:9e:b0:94:6e:0c:
8a:98:0f:5b:21:37:59:c4:84:71:95:85:49:5d:d7:
36:49:69:60:57:4a:79:28:7c:a5:27:89:92:d7:25:
8d:b3:89:ed:de:ae:f1:bf:b1:99:bc:63:47:3e:3f:
85:f0:fd:dd:89:99:3d:5e:64:9e:b6:eb:59:41:40:
b2:90:09:f4:e7:47:48:b8:94:0b:5d:13:c5:ba:b2:
d2:4a:5e:08:e5:dd:45:15:f7:b9:c9:d2:33:53:69:
b9:3b:88:b9:97:fc:22:6f:7a:1e:bc:33:1f:70:77:
c5:b7:e2:87:c7:6a:c6:ac:84:9c:c9:32:80:f6:fb:
89:13:92:55:7d:a4:70:1f:19:27:c4:32:c3:ec:42:
2d:56:db:ca:c1:d0:22:f9:bb:4d:d5:c2:fb:22:07:
5a:a4:47:e1:5a:3d:eb:9d:25:57:06:a2:03:9a:50:
87:5e:08:36:a5:ce:20:83:0e:3c:fb:e3:a0:5f:80:
e4:32:1b:2c:2b:ca:06:dc:c7:e0:8a:ee:df:2d:5f:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:7F:E3:73:9A:BF:16:E0:B8:36:E3:3A:09:D7:2B:A4:DD:A2:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/202C5B4CFBAC11EE9F752222017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:b2:9d:93:15:16:9b:f2:dc:48:3d:b0:91:df:fc:91:3f:24:
ea:4b:d4:34:58:80:fd:d6:31:92:ae:6e:e4:60:26:bf:1a:85:
67:a9:33:f4:5c:6a:45:ee:1e:7c:af:9a:7c:95:c3:c1:88:6f:
02:f9:58:f0:06:ae:61:7e:b1:47:f1:56:10:a8:d1:d0:2e:fa:
76:8a:21:98:e1:d0:5b:27:f7:df:6e:a6:f5:ac:cc:a4:86:d3:
af:4f:73:f4:2e:9c:8e:65:cc:af:9d:d1:f5:f3:e0:fd:ee:18:
fb:a3:e9:94:18:9a:ed:19:b3:e5:88:f1:38:f7:32:de:95:f8:
fa:05:e3:d4:e4:05:b1:9c:55:90:e7:54:7a:8a:04:05:0f:0d:
f2:5f:af:5e:64:a5:46:54:e7:8d:ab:00:22:20:bc:e9:63:f8:
f0:e3:1a:9a:bf:5b:a1:08:c3:eb:96:91:b4:f2:70:7a:f6:99:
63:94:3c:12:85:ad:2d:32:d6:e9:eb:e9:cb:34:cc:fc:3d:86:
1e:03:81:e0:bb:2d:f5:0d:ce:f9:d0:d8:c4:57:05:39:d5:54:
c5:08:bd:34:5e:95:bf:98:9c:03:81:3f:3a:87:99:6b:42:4e:
0e:04:21:8b:38:3f:5c:42:1b:c3:37:e2:31:62:13:3c:a6:b4:
65:fc:6d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:49 2024 by rpki-client on console-fra.rpki-client.org