Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29258D6AF47F11EE9E6CCCB9775412E6.roa
File: 29258D6AF47F11EE9E6CCCB9775412E6.roa (raw, json)
Hash identifier: 8ITfKk3RjmWJ2i9inYmm3qXJ6swFiXruGTLsVCeGAkk=
Subject key identifier: F0:E8:69:0A:FD:D3:8E:C8:6C:12:43:F7:3F:A1:51:3B:DD:93:BE:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29258D6AF47F11EE9E6CCCB9775412E6.roa
Signing time: Sun 07 Apr 2024 01:35:48 +0000
ROA not before: Sun 07 Apr 2024 01:35:45 +0000
ROA not after: Mon 13 May 2024 01:35:45 +0000
asID: 138915
IP address blocks: 154.206.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43424 (0xa9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:35:45 2024 GMT
Not After : May 13 01:35:45 2024 GMT
Subject: CN=6611f874-8f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:ed:97:c5:83:c1:d3:2e:48:77:e5:24:10:
53:37:29:30:36:a7:9a:fc:14:56:a8:a1:24:7f:c7:
9f:03:b0:5a:54:9c:bd:ae:71:85:52:03:2c:d2:fd:
b2:40:90:fc:6c:74:07:57:d0:3c:1c:8a:ab:ce:76:
6e:23:f9:ae:fd:0f:41:50:3e:84:de:29:ab:2f:3f:
c5:5d:85:53:18:3a:b4:28:2d:95:38:40:ea:c7:42:
cf:bf:36:89:8a:dd:c7:e4:00:25:c1:3a:d5:9d:72:
0e:b7:2f:1d:91:3e:43:10:66:67:1c:9f:bf:b7:da:
d7:1e:cf:bb:8e:c3:1a:38:9d:ef:65:e7:cc:92:9c:
b7:4e:6d:1c:ba:80:22:df:6c:8c:1f:16:05:2c:a2:
b6:9d:71:62:c5:5a:8c:8d:92:d8:84:4c:ce:3a:20:
84:4f:ec:74:84:2d:d1:70:07:99:42:c2:24:8b:21:
3f:74:9d:47:4f:e2:6c:f4:44:0a:39:88:66:26:2b:
2b:e8:f9:18:8f:c5:0d:15:d1:34:12:55:7e:fb:22:
c6:5e:78:9c:38:2d:47:6a:3f:8d:d4:b3:a7:52:ca:
38:b6:02:b9:2b:6e:72:07:07:08:07:00:0f:37:0c:
5d:b3:17:41:dc:6a:c9:49:a5:9a:5a:a1:9d:4a:3a:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:69:0A:FD:D3:8E:C8:6C:12:43:F7:3F:A1:51:3B:DD:93:BE:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29258D6AF47F11EE9E6CCCB9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.116.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:62:09:67:ca:ed:a3:7e:a1:21:64:9b:b9:6b:03:10:d2:72:
59:53:f5:bf:79:bd:07:a4:4f:99:f0:13:71:41:7a:06:2c:4b:
06:bb:9d:91:88:ed:83:86:de:67:dd:98:87:06:f5:02:26:d9:
e1:8e:dd:06:34:80:c1:63:df:4e:e1:c4:03:be:16:36:00:bf:
09:bf:d2:2b:0b:e7:87:64:5b:14:73:93:ce:20:01:cf:1b:71:
ea:db:cf:82:1e:fb:d9:a0:3a:f5:3e:4a:d7:95:04:6f:36:23:
d7:33:58:a1:3e:b9:2c:36:a1:39:c9:80:5d:01:e3:07:67:4e:
13:86:1e:62:3f:2f:f7:d8:2d:60:76:8e:95:c1:24:18:bd:89:
f2:ea:52:12:76:64:32:91:17:b9:ef:24:c3:a3:c6:36:f3:12:
cd:9b:b5:f6:e8:e2:38:d3:ea:57:0a:b3:a0:f4:5d:53:d7:f6:
f3:a6:5d:c2:f1:ce:63:1e:e6:32:f4:0a:e7:6b:0e:cf:f2:a4:
48:8e:47:e5:bc:90:ab:0c:a5:17:d4:df:30:39:50:7f:94:31:
4a:3b:9c:7d:12:be:27:b3:9f:38:1d:81:ff:9b:cf:64:a8:96:
a4:67:f9:58:b4:df:36:94:64:27:db:5c:35:9e:d2:b3:3e:84:
68:91:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org