Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E657F201DB11EF94DECDFF007001B1.roa
File: 33E657F201DB11EF94DECDFF007001B1.roa (raw, json)
Hash identifier: pXfcq2hXpX980xYRZo/EAeCUjuKWIpMc9utXntg65zI=
Subject key identifier: DB:6F:4E:E4:11:E1:03:2F:A7:1A:38:86:30:6D:4C:BF:68:49:19:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E657F201DB11EF94DECDFF007001B1.roa
Signing time: Wed 24 Apr 2024 01:37:25 +0000
ROA not before: Wed 24 Apr 2024 01:37:22 +0000
ROA not after: Sat 18 May 2024 01:37:22 +0000
asID: 138995
IP address blocks: 154.194.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45044 (0xaff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 01:37:22 2024 GMT
Not After : May 18 01:37:22 2024 GMT
Subject: CN=66286255-db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:9b:63:18:d6:be:28:6e:a0:75:44:e8:78:
7f:ab:bf:99:8b:64:45:14:e0:48:79:f6:0a:af:ae:
37:1c:da:3a:a7:61:33:87:b2:45:b8:0d:94:ee:fb:
d3:5e:56:a6:3a:7e:3a:3f:ce:93:da:36:12:ad:bd:
92:0f:48:cf:2b:cb:3d:23:d3:d2:cf:9a:50:73:d7:
d8:af:51:d5:d7:2f:23:11:b5:06:25:98:58:9a:d8:
96:bc:b0:40:b8:7e:de:ff:37:8f:67:ea:b5:52:60:
a0:6a:9f:b7:9f:9d:20:fb:a4:be:7c:92:7b:98:be:
ef:5f:93:6a:24:f1:8d:3a:d2:b2:a2:5c:01:2f:db:
8d:81:34:7e:8e:04:e0:b6:f3:9e:eb:e0:f1:4e:7d:
27:b5:59:6a:83:f2:2e:24:63:f9:1b:5b:ef:db:b9:
dd:ae:39:8d:00:d3:29:73:30:03:53:89:e1:2a:9c:
ed:9c:88:76:a6:5f:79:66:17:cc:cf:78:6b:a7:f3:
b2:4c:4c:eb:34:84:c1:ad:7c:a9:32:82:86:d1:e6:
54:5b:3c:ff:a0:99:f4:3c:bb:48:65:5a:36:48:5c:
17:1d:42:e6:ea:3e:42:9e:d9:05:17:da:49:fc:ef:
a4:24:c4:47:1a:78:d0:df:70:18:d0:92:94:af:13:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:4E:E4:11:E1:03:2F:A7:1A:38:86:30:6D:4C:BF:68:49:19:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E657F201DB11EF94DECDFF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:87:be:cf:97:f9:38:6b:f8:f8:1b:50:4f:88:db:6c:03:a3:
fe:f2:4f:cc:e7:88:7f:88:b6:2b:89:12:d8:f6:76:8d:32:41:
ae:9a:cb:d6:d2:ed:f6:85:97:32:20:10:bf:ef:4b:39:fa:58:
3e:c9:fb:a5:bb:34:22:3b:5a:e0:82:ea:8b:c1:3c:85:42:68:
28:ed:72:e7:77:32:ed:a6:2d:b1:d8:db:09:69:a8:bc:51:71:
db:81:79:10:08:60:32:bf:0d:74:f9:ba:5f:10:0a:0c:d1:fa:
d1:4e:f0:ef:dc:55:1e:e2:21:1a:e6:3b:b5:97:62:47:8b:e1:
33:16:6e:fc:4b:64:eb:d6:24:e3:ff:63:ad:4a:c6:1c:c2:f7:
85:88:e9:44:ee:1a:34:da:03:9c:cd:51:c6:f3:47:75:1b:92:
7e:d4:c4:4f:f4:cc:32:7f:61:e0:6e:84:46:7d:f8:ee:68:66:
cb:fa:aa:83:b9:f9:e4:02:75:87:8c:8a:b3:f9:10:22:3d:84:
23:64:48:b2:28:9f:64:01:fd:1e:23:55:0d:a9:e2:57:b3:e4:
91:ce:57:20:48:31:7f:60:0c:d1:26:0b:6d:c3:2f:c9:71:a2:
97:ed:a7:71:b8:e1:c8:84:26:5b:ec:00:6f:e1:5b:27:8a:ad:
20:fc:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:47:33 2024 by rpki-client on console-ams.rpki-client.org