Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3313C75CF49211EEA662E65A775412E6.roa
File: 3313C75CF49211EEA662E65A775412E6.roa (raw, json)
Hash identifier: DuG7aRMTrXppILNp6giLtrLpvieAdRgUC0MSUMGYOeY=
Subject key identifier: 96:08:00:BB:FD:9B:38:E5:C5:2A:5D:B1:F2:8C:3A:FD:14:13:75:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3313C75CF49211EEA662E65A775412E6.roa
Signing time: Sun 07 Apr 2024 03:52:05 +0000
ROA not before: Sun 07 Apr 2024 03:52:02 +0000
ROA not after: Mon 13 May 2024 03:52:02 +0000
asID: 138915
IP address blocks: 154.206.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43460 (0xa9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 03:52:02 2024 GMT
Not After : May 13 03:52:02 2024 GMT
Subject: CN=66121865-3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:d2:23:3d:96:58:a3:36:f8:6b:b9:23:44:
b1:3e:bd:6c:11:9d:af:e2:1b:66:0f:2d:a0:bc:e3:
d0:bf:ab:f9:88:80:84:09:16:72:d0:be:a9:41:06:
b9:a0:f8:3d:35:f7:8a:44:84:78:5e:c3:70:70:81:
f2:ce:b0:38:58:2e:62:f4:f8:91:d1:54:96:6f:ee:
4c:0a:77:a1:ee:91:60:cf:58:70:71:59:e6:43:92:
ee:e0:a2:de:1a:0c:e6:08:16:5d:23:38:ad:ba:50:
c2:82:0d:be:b5:8c:3f:52:16:66:55:08:94:f9:44:
f4:3f:ab:c9:e0:ba:39:13:2f:98:aa:1a:f9:0f:64:
9e:b8:ed:75:8a:2f:be:e5:7f:3a:7e:3c:77:dd:bf:
66:92:87:9b:e7:72:c1:2b:e6:be:75:0d:db:b4:6d:
68:03:00:1d:c0:85:d2:f6:b2:eb:32:31:de:d4:b4:
01:5b:5a:05:67:28:d8:a7:d4:d7:e3:03:af:c9:c1:
b3:c5:0f:18:af:a2:c8:a5:bd:c7:ea:d0:bd:e4:38:
79:0c:23:d8:ef:16:21:ed:cb:cc:41:d1:39:48:4d:
5b:ae:91:1d:81:dc:7f:29:06:fe:2b:28:77:dd:61:
f9:09:16:6d:1f:8b:63:47:f4:de:a9:63:bc:c0:f9:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:00:BB:FD:9B:38:E5:C5:2A:5D:B1:F2:8C:3A:FD:14:13:75:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3313C75CF49211EEA662E65A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:9d:76:bd:89:82:07:5b:44:f2:58:0d:c7:eb:4d:9a:e4:ea:
50:f1:c2:ec:b7:9e:f4:9b:a9:2b:da:fc:a0:83:86:4c:03:f7:
6f:5f:88:85:a1:cd:34:f5:0e:5d:26:e0:9e:ad:99:8e:a3:ba:
06:61:36:b9:24:06:95:aa:3a:7a:f9:3c:91:b2:1b:83:6c:9a:
1f:e3:60:f1:9e:98:95:b1:b3:74:48:53:47:a4:d7:9d:51:3c:
49:d2:66:a1:6a:2f:85:3b:92:ae:ba:b7:8a:21:3a:d0:49:03:
93:ff:45:17:b8:5c:3f:e2:34:01:fc:ff:d1:62:4a:fe:c2:a1:
2a:8f:b0:75:38:19:8b:c3:80:07:1e:10:18:db:12:60:fa:de:
6c:da:6e:c0:a2:e9:41:49:91:ba:30:9a:e0:3e:c3:69:8e:35:
1f:35:4b:a0:56:68:a4:a5:a0:b2:44:2d:a0:04:bc:d2:62:89:
24:30:1e:2f:fd:a8:b3:d9:ce:b6:42:13:a8:48:5b:d4:54:82:
80:91:ac:c8:90:36:0a:e7:7e:c3:e6:3e:82:6f:01:81:46:bb:
85:79:35:a8:0e:76:45:ac:16:7b:ac:cf:f0:e7:00:86:32:c0:
8f:df:bb:8a:7d:a5:98:05:32:da:9a:79:7c:4b:70:65:ab:c1:
45:a1:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:20 2024 by rpki-client on console-fra.rpki-client.org