Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3005B158F01211EEBA05DD97775412E6.roa
File: 3005B158F01211EEBA05DD97775412E6.roa (raw, json)
Hash identifier: 1gsxEP+jY1MQQlwt+ei8RKVmugdW9FZFtxp40jslHPU=
Subject key identifier: 55:1E:B4:D4:85:24:A7:B7:1C:B1:90:9A:DE:75:C1:F9:17:27:0B:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A896
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3005B158F01211EEBA05DD97775412E6.roa
Signing time: Mon 01 Apr 2024 10:25:40 +0000
ROA not before: Mon 01 Apr 2024 10:25:37 +0000
ROA not after: Sat 11 May 2024 10:25:37 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43158 (0xa896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:25:37 2024 GMT
Not After : May 11 10:25:37 2024 GMT
Subject: CN=660a8ba4-bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:ad:07:e6:50:65:66:4c:4d:7b:41:19:d4:
24:c3:c8:0e:41:4f:99:4b:b3:5a:41:5c:3e:27:af:
f1:ed:fa:60:3a:14:e4:7d:88:75:56:f4:17:e8:0e:
da:4b:f8:20:0f:53:aa:15:c3:c8:78:a0:6c:ed:9a:
6f:15:54:b5:41:bd:5f:33:c6:01:cf:b1:ef:f1:cd:
5c:66:c7:de:83:2d:c0:61:e4:b6:c5:55:0f:87:0e:
f2:b3:e8:35:e1:fe:8a:2c:8a:89:8a:24:64:bf:a1:
0d:83:db:a1:b9:e9:05:46:bb:74:f1:b7:38:9b:fd:
f6:41:ba:f5:d1:07:92:f2:85:d3:cd:ba:ec:af:6f:
99:c6:70:6c:a7:d6:6d:70:bd:5f:fb:97:44:33:10:
e7:15:a8:ef:f8:9a:77:18:9b:b6:11:c9:31:06:f6:
1b:a1:98:df:7e:13:37:e8:87:4f:bd:49:ef:e1:cd:
1f:69:74:90:7f:36:d5:3d:95:54:bc:df:e3:46:ca:
a5:27:32:bb:2e:22:ce:25:9f:3d:7d:f6:d5:78:52:
8b:fe:12:26:6b:a6:8e:00:a6:7f:2f:3f:b4:c6:33:
82:70:5d:f5:fe:be:0e:4b:fc:f4:2d:25:75:bb:02:
72:06:8d:48:a6:02:6c:83:b4:b4:5c:a3:4b:c5:1f:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:B4:D4:85:24:A7:B7:1C:B1:90:9A:DE:75:C1:F9:17:27:0B:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3005B158F01211EEBA05DD97775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
Signature Algorithm: sha256WithRSAEncryption
69:50:93:b1:0c:a9:45:a1:ea:17:98:38:01:3e:57:b1:42:c8:
7c:26:ec:93:d9:7c:29:69:f2:57:9a:0f:64:a7:e1:db:14:53:
24:a5:cd:e5:cf:33:f2:c8:3c:39:46:1b:61:de:f9:1a:1a:db:
98:2f:a6:8c:54:2d:bf:d4:81:c0:78:40:df:72:a3:5f:26:e6:
e6:7a:bb:9b:e0:52:79:02:7e:46:70:89:a9:10:51:fe:7d:fa:
b1:44:52:99:05:29:1a:5d:d7:e0:83:5c:c7:55:fa:18:c2:a8:
30:7c:dc:23:6b:7e:eb:28:55:a1:c1:14:e8:2e:16:94:a2:e2:
57:56:d0:4f:63:6e:ac:e5:cd:09:34:28:9d:fd:fd:d5:9d:4b:
56:72:f7:7d:bb:dc:69:dd:b7:60:c5:9a:f3:9b:b1:cb:e3:49:
63:99:86:01:ef:91:91:4f:3b:b2:51:14:99:50:87:20:f3:e6:
79:77:96:1f:5f:1f:cb:8f:14:db:cc:51:26:4d:6e:f2:06:1d:
28:37:9e:f4:23:23:20:1e:d3:39:83:f4:56:b8:72:2a:c5:bc:
2e:b0:ec:7a:4d:ea:f9:36:a3:fd:bc:9d:cc:1f:b0:a2:de:cb:
9c:bc:1b:56:85:d3:95:f2:a3:6c:78:95:93:cc:72:fe:d6:a7:
ed:5c:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org