Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E351738FAE911EEA31CEA66017001B1.roa
File: 2E351738FAE911EEA31CEA66017001B1.roa (raw, json)
Hash identifier: b34k7xCIrszSmpqZpuAfMBowdbzWVRVnFz+RqSCxsso=
Subject key identifier: 52:B6:26:22:AA:DE:E5:A7:7E:50:EB:FC:A2:8E:72:C2:57:36:99:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E351738FAE911EEA31CEA66017001B1.roa
Signing time: Mon 15 Apr 2024 05:29:50 +0000
ROA not before: Mon 15 Apr 2024 05:29:47 +0000
ROA not after: Thu 30 May 2024 05:29:47 +0000
asID: 63139
IP address blocks: 154.94.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44178 (0xac92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:29:47 2024 GMT
Not After : May 30 05:29:47 2024 GMT
Subject: CN=661cbb4e-e1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:b5:e7:51:93:fb:70:2e:49:07:eb:35:a2:
4e:3a:76:c5:b5:34:a9:1e:62:b3:be:93:c1:59:59:
d6:7c:e6:41:20:18:98:f8:1c:70:69:e0:ab:b4:09:
ce:71:49:d8:32:a5:cc:f2:44:a7:97:86:29:72:68:
70:68:a4:64:53:1b:2f:0c:d0:7b:40:bf:2c:68:c3:
e6:d3:69:97:0a:0f:d1:65:18:73:9e:03:25:22:0b:
d8:22:43:fe:13:dd:90:d6:8f:98:92:ba:7a:a4:5a:
8a:46:0d:a7:59:9a:66:1a:f4:92:38:ce:75:0f:0e:
75:d2:70:c5:ba:16:c3:7a:56:d1:7b:b7:e0:44:66:
94:5a:59:70:95:1a:81:1e:49:ca:0a:21:68:ac:75:
bf:b5:95:85:7c:ae:78:11:76:b5:4e:f4:a2:2b:2b:
97:ea:19:ad:ed:cb:b0:34:f6:d1:b6:86:b9:43:a1:
ab:9e:c6:18:b3:f3:5b:96:fa:d1:d4:3a:2b:b7:fd:
5a:02:cc:d1:92:d7:8f:3f:fd:4c:5d:02:dd:18:f4:
01:d3:30:a9:df:2b:f1:1d:3d:05:4e:53:b3:80:e7:
7b:80:4d:fc:86:b4:cf:03:89:25:5b:4b:8f:44:97:
b5:a7:87:66:a7:2f:e5:41:cb:70:77:76:d4:3e:b9:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:26:22:AA:DE:E5:A7:7E:50:EB:FC:A2:8E:72:C2:57:36:99:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E351738FAE911EEA31CEA66017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6e:2d:bf:af:93:b8:4c:37:17:3b:ae:0d:4a:09:7b:46:3a:
2d:45:26:27:30:82:48:7d:8e:5c:be:46:b9:47:08:2e:8c:64:
6f:83:fa:80:3e:5c:a2:6c:6b:ca:0b:2b:e6:24:82:a9:82:eb:
60:f6:bb:25:d5:16:70:52:8e:72:7c:a9:b1:e1:f8:16:86:33:
b7:d7:c9:ad:b4:3b:f0:8f:df:3d:3e:79:a0:30:2d:73:7a:5c:
c5:2b:72:67:aa:b0:c3:9b:48:16:a5:7d:ba:4e:5d:5f:f4:34:
5e:d7:89:fc:fd:5e:b8:df:6a:3b:5b:06:31:f9:6a:dc:55:b6:
9c:ae:f6:58:c1:18:3c:05:e7:e4:d9:43:ec:48:8e:b8:38:80:
06:b0:c0:0c:0d:89:8e:64:6c:44:10:6e:d4:4d:f5:55:ec:59:
38:aa:d3:9e:b8:ae:93:9c:11:dd:0e:ba:73:c3:3e:04:ab:07:
ca:07:d5:ba:3c:7e:03:f2:04:49:da:23:89:27:6c:bc:d6:3b:
25:2a:86:fa:92:3b:7a:62:73:3f:33:df:9a:5e:17:cc:75:10:
8d:b4:5c:0f:0f:2e:3d:a2:b4:e0:58:79:f8:0c:6d:63:b5:c8:
2e:ba:bd:67:ea:3c:58:8a:27:b1:60:e2:0d:73:a2:8c:cd:65:
ff:fb:41:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org