Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7C76B2577B11EE8200AE304AD9E6FC.roa
File: 2E7C76B2577B11EE8200AE304AD9E6FC.roa (raw, json)
Hash identifier: ngUoXeVHLHRTEHul5R9bYGhpRmJwyBBr7rFk0YUvPWA=
Subject key identifier: 49:FE:5F:C2:9A:02:E8:8C:72:6C:5F:41:AB:92:3D:94:89:BF:D8:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3EBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7C76B2577B11EE8200AE304AD9E6FC.roa
Signing time: Wed 20 Sep 2023 06:01:47 +0000
ROA not before: Wed 20 Sep 2023 06:01:42 +0000
ROA not after: Thu 25 Jul 2024 06:01:42 +0000
asID: 151610
IP address blocks: 154.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16058 (0x3eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 20 06:01:42 2023 GMT
Not After : Jul 25 06:01:42 2024 GMT
Subject: CN=650a8acb-081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:19:0e:bb:0e:0e:21:30:7b:33:eb:29:72:
d0:32:99:37:52:e9:13:02:50:df:ea:00:c7:66:73:
4b:26:8b:c3:20:09:3d:ac:94:41:48:07:cf:31:db:
e1:6b:e9:77:a1:4d:46:6b:b6:e1:9e:35:81:2e:c2:
28:24:7f:87:84:07:eb:55:ad:b2:62:9b:94:bc:12:
4c:25:63:45:90:48:77:16:27:a8:f5:1b:c3:ad:5c:
a1:89:bd:5e:b6:8a:59:bb:17:31:e2:9d:11:48:94:
ca:53:39:57:d4:9b:38:3f:f9:ce:cc:b3:f4:1f:b0:
d4:4d:50:96:c5:0d:b2:27:fc:1c:3a:ce:5e:d7:6d:
6c:5a:9a:d6:cb:35:e2:02:a2:85:aa:cf:54:93:4b:
51:c9:6c:b4:61:b0:67:d6:34:42:a6:50:2d:c6:60:
75:c8:6a:e8:c0:67:48:3e:96:4b:3b:e6:18:5e:cc:
9a:d0:21:eb:37:73:df:fc:15:e3:a5:1f:85:8d:ce:
23:b8:df:0d:b0:05:43:46:84:27:9d:e8:4c:73:e1:
95:2b:d3:d5:f7:c0:47:8d:24:09:c9:9d:fb:3f:73:
88:74:3e:2e:5b:20:7f:8f:99:85:98:d2:42:8a:cc:
aa:f4:80:f0:bf:99:05:ad:85:61:26:b9:a2:a9:6a:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:5F:C2:9A:02:E8:8C:72:6C:5F:41:AB:92:3D:94:89:BF:D8:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E7C76B2577B11EE8200AE304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1e:f5:9f:78:e1:63:d2:90:17:ed:52:d7:ce:5e:dc:3e:9e:
c7:fe:af:1e:21:27:cb:68:81:51:0e:4d:eb:10:65:94:9c:aa:
31:b2:0e:a9:14:63:09:60:45:01:a5:dd:82:52:bf:aa:1c:57:
85:15:06:d8:5d:b6:e6:36:8a:66:d2:1d:d3:d4:28:c0:2b:bd:
26:8a:d0:50:47:ce:96:5d:d0:db:3d:1c:2b:4c:ca:e5:19:27:
5d:cd:91:95:25:3c:26:40:e7:cd:63:a9:ad:30:bb:fd:88:28:
8c:42:c8:4a:c6:5e:ad:e2:57:54:12:b5:fb:14:89:85:95:36:
01:eb:0e:78:4f:f7:9f:fe:55:09:9f:9e:a1:c9:43:04:34:7d:
f6:43:ae:12:95:b6:4b:2a:1c:12:a6:1c:31:5c:5f:90:06:ba:
e0:0b:5d:38:78:ea:d5:ac:d2:99:bd:18:44:77:32:94:e0:b5:
09:2a:8f:13:3b:52:55:6a:5b:58:ef:07:51:41:73:06:76:a0:
e7:0e:0c:f3:76:cf:0a:9d:45:30:4e:53:c9:59:b0:73:7d:10:
e8:9a:f2:dd:ed:76:5c:83:1d:14:8d:7a:07:b1:c8:15:cb:d0:
d5:c1:e2:bb:bf:f9:49:28:9d:72:fb:55:72:c3:de:08:74:10:
69:df:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org