Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205BF6A0F7BE11EE81827917017001B1.roa
File: 205BF6A0F7BE11EE81827917017001B1.roa (raw, json)
Hash identifier: W4RjXOPiyHJqNWhuIEK94lTAfsjr/44vfNOn2nFN45M=
Subject key identifier: 89:48:94:A4:F7:99:A2:54:27:46:02:35:42:76:9D:8E:3B:3E:6E:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205BF6A0F7BE11EE81827917017001B1.roa
Signing time: Thu 11 Apr 2024 04:44:05 +0000
ROA not before: Thu 11 Apr 2024 04:44:02 +0000
ROA not after: Sun 19 May 2024 04:44:02 +0000
asID: 138915
IP address blocks: 154.90.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43791 (0xab0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:44:02 2024 GMT
Not After : May 19 04:44:02 2024 GMT
Subject: CN=66176a95-063e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:d8:68:2a:ba:ff:c4:a2:60:42:18:6a:03:
48:c0:0c:a0:0b:c5:ff:ce:f7:15:26:1f:15:a2:f9:
88:76:a1:6e:08:e5:6c:6d:51:e7:18:ac:30:6c:af:
63:8c:5e:6e:9a:9d:15:76:5c:64:e9:23:42:03:78:
5a:46:66:f2:3b:c7:9b:09:c4:2b:a4:a6:8c:46:81:
8d:0c:ea:6a:1a:f2:e2:92:71:3b:fc:1a:c0:a1:83:
f0:ae:d7:54:2f:67:72:98:b1:c6:c8:10:0e:91:bf:
c0:2d:fa:15:12:69:18:92:0a:79:99:c7:8c:e2:60:
6e:12:29:d2:68:37:c2:67:40:5c:bb:fe:23:f5:ba:
e0:ea:c6:09:3b:29:16:af:61:1d:47:6f:37:e0:9d:
7d:46:1a:e2:92:69:f3:44:60:81:66:ec:29:02:44:
4d:c2:a4:e8:1a:6a:a8:0a:9b:55:ff:f2:ce:ae:b4:
9f:d6:5e:50:6c:bd:24:76:b8:89:16:ca:08:cf:43:
3a:43:dd:c9:01:54:10:12:67:c0:93:d5:b5:ca:94:
e2:5b:46:f8:54:71:3d:52:e9:70:42:05:f1:5e:d6:
4f:c6:bf:85:95:9c:ec:56:45:ff:17:4b:cf:b1:ed:
3e:c1:b0:7d:7b:39:f9:58:57:c5:9f:03:87:6b:15:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:94:A4:F7:99:A2:54:27:46:02:35:42:76:9D:8E:3B:3E:6E:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/205BF6A0F7BE11EE81827917017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.54.0/23
Signature Algorithm: sha256WithRSAEncryption
29:9a:9f:8f:b2:fe:51:6e:cc:fc:a9:80:08:ea:87:55:9c:e2:
6b:f5:45:b9:71:dc:7a:7f:53:85:fc:0a:1c:a7:bc:d1:88:04:
5a:4d:25:e2:27:b8:81:5f:11:50:eb:cc:93:1d:a4:96:c4:8a:
39:ba:9c:e7:26:d6:ab:fd:b7:39:1a:c6:c9:d4:86:2e:48:7d:
a2:e4:0d:b6:1d:53:ea:bf:1e:0d:fd:fe:25:8c:8b:fe:ac:a4:
38:17:34:ba:62:85:8b:a8:bd:8a:a7:78:35:50:87:42:64:8f:
42:ba:9b:14:b5:28:21:75:aa:f4:ce:00:71:6c:92:9f:93:dd:
50:07:b1:07:a5:0b:33:71:6c:6e:42:ef:c2:c9:a0:e5:f0:77:
dc:0c:5a:d8:65:b1:79:4b:52:19:a4:96:3a:95:11:16:74:76:
67:05:2c:c7:86:5b:f5:37:97:ff:b6:c5:a6:b7:d4:8c:fc:b3:
f3:6f:84:67:64:89:de:b2:53:87:44:3f:9c:d3:59:b8:fb:0c:
d7:7f:6f:b5:bc:29:18:a9:2a:87:36:04:61:18:b0:25:e2:83:
1f:3d:1d:06:50:09:29:d0:a6:ef:66:df:61:f2:f4:46:7b:c3:
83:40:c3:91:ab:b5:20:30:8f:85:f4:8a:a4:d4:fe:53:e8:b6:
fa:f2:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org