Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E9E17CEFF711EE84DF93C4775412E6.roa
File: 26E9E17CEFF711EE84DF93C4775412E6.roa (raw, json)
Hash identifier: kFwKsqnpNJDgeTvxFxkRThFA0NgOUmpE90osX3c97pM=
Subject key identifier: 67:47:64:4A:F2:B5:CE:F4:DC:61:D3:83:50:57:1C:9B:94:9E:79:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A80A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E9E17CEFF711EE84DF93C4775412E6.roa
Signing time: Mon 01 Apr 2024 07:12:08 +0000
ROA not before: Mon 01 Apr 2024 07:12:05 +0000
ROA not after: Tue 07 May 2024 07:12:05 +0000
asID: 138915
IP address blocks: 154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43018 (0xa80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 07:12:05 2024 GMT
Not After : May 7 07:12:05 2024 GMT
Subject: CN=660a5e48-7eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:3f:47:11:9c:93:7b:75:de:ee:d5:d5:2b:
3b:d5:3d:23:c8:fc:50:0c:58:09:c1:34:96:be:41:
1e:02:b5:6b:05:05:c9:23:93:06:b8:17:bf:8c:0e:
a2:03:b8:f6:61:89:ad:6e:1e:b8:c3:d7:ce:9f:95:
ba:d4:a5:35:6f:4d:06:f7:cb:d3:a7:b5:50:54:45:
a3:e9:2b:ad:00:98:06:41:90:44:50:1a:8a:bd:f1:
47:55:26:3e:cb:ca:c8:72:2a:40:fb:33:61:83:e5:
8a:42:0a:14:c0:b6:e7:d1:1e:5f:f5:28:de:05:21:
f1:04:cc:90:d6:b0:38:3f:50:c1:5c:71:d5:97:e9:
44:e3:07:39:db:96:43:2e:f7:18:87:3f:9c:55:fd:
29:d1:27:77:b7:33:41:23:1a:d7:27:27:d1:a4:42:
54:8b:9b:1e:c5:2e:d9:18:07:e5:21:2e:38:9a:c8:
f0:d0:01:f9:49:b6:7a:cc:11:20:fd:90:ca:72:cd:
fb:36:6c:2d:4f:c6:99:0f:61:3a:31:06:58:23:d3:
d5:74:be:c0:37:aa:a1:36:3a:cb:24:3d:bd:3d:b9:
f8:a4:72:e2:8b:e1:73:ea:dd:2b:72:eb:69:9d:79:
a4:e4:a6:d3:43:53:9c:3f:0b:d1:9c:79:58:01:7c:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:64:4A:F2:B5:CE:F4:DC:61:D3:83:50:57:1C:9B:94:9E:79:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26E9E17CEFF711EE84DF93C4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4c:3a:46:50:27:63:81:11:f5:83:85:f5:55:76:83:b0:83:
16:80:48:e0:e2:a0:cb:f2:27:53:94:a5:5b:f7:a0:ad:69:7c:
f6:02:c8:18:ac:22:60:ea:58:64:91:b5:11:55:75:8b:a8:03:
13:8c:69:03:cf:2f:10:40:33:3e:b9:44:78:49:9c:df:61:a3:
52:9f:91:10:4f:11:9b:01:f8:33:79:b8:18:c5:d7:cf:86:2e:
f8:57:b1:88:69:71:be:97:7f:c9:7b:25:ce:e6:1f:62:25:26:
9f:13:be:e6:b2:93:2e:41:50:71:6e:43:0f:52:16:3a:68:0b:
c9:b2:24:71:ff:e0:bd:5c:c8:0b:b5:75:8b:98:b7:e3:56:b4:
53:9e:71:76:74:53:be:21:c2:3c:bb:7b:99:6d:23:d2:3e:a0:
99:ed:45:62:0e:08:42:ee:fb:33:f6:7b:1f:b7:51:3d:03:5a:
4e:5f:26:93:42:02:5e:76:bf:7e:6f:21:95:a0:18:68:17:b7:
20:c2:48:83:13:c5:40:8a:4c:88:8e:a8:7b:69:e6:32:37:45:
f0:65:59:70:9a:03:29:a9:9a:15:6d:63:57:85:b1:8c:40:b9:
90:2b:57:ef:6a:ee:5e:4d:eb:5d:b1:f9:41:63:fb:22:16:57:
bc:48:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org