Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E30C5EA037F11EF980AA266017001B1.roa
File: 2E30C5EA037F11EF980AA266017001B1.roa (raw, json)
Hash identifier: dSJ1vKKc46yrOpu8BB6xsInB4QR7EBVWVqkdcpC8kJQ=
Subject key identifier: EA:B4:56:D5:7A:3E:D8:1A:AF:FB:65:64:65:78:C9:A9:DC:A7:4C:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B140
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E30C5EA037F11EF980AA266017001B1.roa
Signing time: Fri 26 Apr 2024 03:43:44 +0000
ROA not before: Fri 26 Apr 2024 03:43:41 +0000
ROA not after: Tue 03 Sep 2024 03:43:41 +0000
asID: 136800
IP address blocks: 154.222.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45376 (0xb140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:43:41 2024 GMT
Not After : Sep 3 03:43:41 2024 GMT
Subject: CN=662b22f0-3a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:53:a5:b9:86:bc:3d:f1:13:9d:36:bc:5a:
51:ee:10:60:6b:6d:55:00:9c:cc:73:b0:fe:c7:f4:
d3:e1:b3:b3:7b:42:59:97:94:76:0c:dd:4d:64:1a:
fb:1e:ee:78:62:36:4d:0d:ed:a6:fe:8b:14:df:16:
f1:78:11:d6:8b:8f:6d:f7:28:8f:69:ab:57:e3:99:
76:da:38:27:73:d3:d1:47:5c:42:91:d1:98:f4:61:
e2:30:a9:13:23:1f:44:03:a6:8a:c5:8b:4a:53:cb:
79:57:f6:1d:75:62:4b:ba:c8:19:89:53:a1:7e:22:
6b:58:f3:49:0b:b7:ae:00:90:c6:bb:37:99:7f:59:
c9:08:13:0c:fb:95:9a:8d:06:50:c7:d6:43:ea:2c:
16:07:4c:52:1b:f7:5b:fd:d6:5e:12:02:22:17:26:
58:d2:c0:8a:d9:a9:94:ef:df:7b:f5:71:15:65:81:
15:43:74:43:96:53:af:44:89:e2:52:d3:fb:7b:d6:
a4:e2:30:db:2e:b9:45:c2:05:fc:5b:6c:d8:6d:48:
9f:e3:bd:9a:1b:75:b5:1d:0d:0a:5a:e2:34:b7:72:
c9:a9:f9:11:5c:6a:9c:8a:c2:f3:b0:5a:2b:87:b3:
2c:0d:c7:b9:87:b3:aa:90:da:ce:2f:0b:de:90:e2:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:56:D5:7A:3E:D8:1A:AF:FB:65:64:65:78:C9:A9:DC:A7:4C:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E30C5EA037F11EF980AA266017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.64.0/18
Signature Algorithm: sha256WithRSAEncryption
06:97:fb:b8:dd:d9:4f:3c:01:07:75:ab:1c:6b:48:e5:5b:59:
b0:f2:51:67:23:2d:a3:af:fa:cd:9d:ca:79:28:d5:5d:21:cb:
2b:db:8a:59:85:b3:c6:b1:dd:f7:00:df:a5:29:af:b2:7b:7c:
55:1d:88:92:36:56:44:31:e3:90:c1:17:6d:af:46:30:72:08:
72:d7:32:05:48:33:f4:50:7c:20:da:62:92:f4:37:28:be:0b:
78:1c:72:8a:d3:4e:2b:1c:cb:3e:fa:1c:f7:84:8f:59:6f:20:
d4:c5:a4:7f:2d:31:15:9a:fa:d7:d3:1a:06:87:d1:8f:a2:4b:
8d:f1:de:c7:f2:21:c4:fe:72:98:81:c1:06:d0:89:f6:72:f7:
f3:70:95:79:a0:63:02:3b:95:d2:1a:33:a4:2a:86:58:bf:e2:
ac:59:fd:12:ef:8e:65:97:0a:1f:2d:12:e7:73:1b:32:ce:19:
af:59:bc:a2:63:49:ea:d5:fb:8c:a0:dd:2f:e1:26:81:04:47:
da:74:59:d3:68:21:ad:1e:10:71:0b:28:0c:e9:95:e4:e1:1b:
fb:8b:f4:83:db:a5:c5:c4:ff:99:46:37:34:10:03:9c:0a:13:
24:ac:a1:45:d7:d3:5b:75:b5:56:7e:8b:c4:e8:74:b2:e6:e3:
68:bc:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:47 2024 by rpki-client on console-fra.rpki-client.org