Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6EAD14F00F11EEA097AF81775412E6.roa
File: 2B6EAD14F00F11EEA097AF81775412E6.roa (raw, json)
Hash identifier: NPIH4CF9XUOvFlxkC4Fw1rNo8T4kY4gLtagFkVu+9qw=
Subject key identifier: D6:96:EF:36:69:E7:1B:F5:67:47:10:8B:87:D4:16:86:34:EB:7B:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A872
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6EAD14F00F11EEA097AF81775412E6.roa
Signing time: Mon 01 Apr 2024 10:04:04 +0000
ROA not before: Mon 01 Apr 2024 10:04:00 +0000
ROA not after: Sat 11 May 2024 10:04:00 +0000
asID: 63139
IP address blocks: 154.203.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43122 (0xa872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:04:00 2024 GMT
Not After : May 11 10:04:00 2024 GMT
Subject: CN=660a8694-c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e9:35:8d:ad:0a:10:e8:91:20:8e:c4:eb:30:
83:78:39:9a:db:4d:81:ca:9c:52:7a:05:60:b2:4b:
eb:46:69:1b:eb:aa:62:6c:a5:10:23:03:8f:6e:05:
4c:e3:f2:f1:00:a9:7f:9b:f2:35:14:86:bd:84:ac:
82:05:c0:75:97:bf:f4:46:59:c1:18:76:66:ad:95:
7b:57:f5:34:1d:a9:25:58:f4:13:32:70:50:05:c7:
43:04:b0:c5:1d:db:da:fd:bb:1f:02:0a:1c:4f:48:
1e:ba:08:89:af:1c:60:c8:e3:1b:5b:0f:d6:67:5d:
ba:a4:a4:e8:e3:05:e6:be:13:a3:cf:ab:be:14:a5:
72:c1:fc:ee:f7:fd:82:94:66:46:9d:0b:a9:67:88:
bb:a2:2f:cf:97:01:0e:9c:4a:47:22:dd:28:63:80:
4b:8c:72:f6:31:23:5a:b1:4c:fd:58:64:0c:1b:b2:
8b:54:43:4c:36:42:d7:78:ec:f4:9e:c4:2e:51:4c:
c9:5a:1e:c6:f8:33:d3:6e:ae:0c:a9:14:9e:b9:19:
db:64:56:dc:8b:67:e7:7c:3a:19:7b:67:17:93:63:
a5:e8:fa:ba:e9:b3:9a:4e:e3:3a:da:57:ad:e0:cd:
16:f2:d2:b9:2f:13:af:5e:c2:4f:b7:65:a7:d4:e1:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:EF:36:69:E7:1B:F5:67:47:10:8B:87:D4:16:86:34:EB:7B:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6EAD14F00F11EEA097AF81775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.173.0/24
Signature Algorithm: sha256WithRSAEncryption
31:73:a5:db:26:55:5b:76:b5:30:d3:44:8c:74:89:32:49:de:
ff:3b:05:08:e6:d0:78:7d:56:7d:41:bc:ec:0b:c6:dc:bc:6d:
65:a7:cb:a7:90:01:08:7b:e3:35:05:b4:57:46:85:c7:16:bd:
c3:2c:91:0f:f7:9e:79:45:a2:19:0e:94:22:67:bf:34:3f:38:
57:53:0e:0f:03:d2:7c:0e:dd:ac:0e:01:40:c7:fe:0b:fa:bd:
71:8a:9d:fd:29:49:e1:12:9b:c2:a8:e6:64:63:7c:20:fa:e6:
a8:6e:35:c6:e2:f4:53:c9:65:d3:e8:c9:97:e7:6c:e7:b9:88:
88:d3:02:17:ef:5f:5c:4c:74:37:86:9f:4e:97:aa:46:bb:e0:
f7:85:d0:7c:25:ed:d0:f1:2a:1c:34:67:04:2c:43:cc:b6:fd:
34:5f:f1:e2:02:64:b4:98:98:f7:48:92:47:9f:aa:02:ae:c4:
91:b9:6e:a1:96:1f:a6:94:02:06:d4:6d:8a:ad:93:50:16:0c:
74:90:81:b4:b3:93:70:78:b7:e9:ef:45:4d:17:59:4b:f9:3a:
42:48:88:1a:d3:39:78:af:88:3f:fc:3d:5b:31:13:5c:06:e0:
ce:aa:b9:d2:18:0a:c4:1c:c3:8d:04:67:0e:d3:d7:26:4c:3e:
4f:ce:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org