Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3457FA96014B11EFAF650B6D017001B1.roa
File: 3457FA96014B11EFAF650B6D017001B1.roa (raw, json)
Hash identifier: NRkV/kDvKIo7wiXAhcHRI4Q33Cy3jbgfbQ1uiUikUxk=
Subject key identifier: 23:B3:9E:B4:6B:15:FF:CC:B8:4E:A9:00:FB:AC:1E:5A:98:D0:1E:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3457FA96014B11EFAF650B6D017001B1.roa
Signing time: Tue 23 Apr 2024 08:26:38 +0000
ROA not before: Tue 23 Apr 2024 08:26:35 +0000
ROA not after: Sat 11 May 2024 08:26:35 +0000
asID: 9009
IP address blocks: 154.85.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44801 (0xaf01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:26:35 2024 GMT
Not After : May 11 08:26:35 2024 GMT
Subject: CN=662770be-1c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:0c:25:2f:09:d6:80:33:ac:27:07:39:ac:
52:34:9d:aa:d1:36:f3:d1:2c:1c:29:06:10:06:1f:
05:10:6a:ad:4d:73:ab:51:fc:37:65:92:ec:13:45:
be:51:4b:ac:e5:b0:f1:cf:a2:71:05:e5:04:dc:49:
70:ff:b0:47:f3:db:fb:d5:65:5d:12:08:bf:83:1c:
82:d4:34:8b:cc:65:05:a3:dd:2c:d7:aa:ea:a0:c7:
ee:06:ba:ab:ef:a2:5c:9f:2c:8b:fc:c5:eb:df:9e:
01:13:55:04:96:e3:95:aa:af:44:f1:2f:a1:6f:b4:
5d:17:c9:3d:37:4c:85:f7:59:b3:27:69:24:bb:65:
07:c0:da:8c:d5:9a:40:20:b4:bf:ad:a4:30:1e:bf:
c3:6d:6f:6d:e0:c4:77:61:00:46:83:9c:01:2a:11:
1e:1a:c1:e0:d5:4e:df:f4:8d:49:56:35:d4:98:ee:
7b:f0:c5:f3:9b:88:5d:a7:de:1a:ad:e7:07:24:b9:
bd:a9:e3:90:23:69:76:18:fe:d7:94:09:c7:85:83:
bd:d7:49:56:7d:6e:40:9f:92:ef:ea:3f:69:6c:11:
63:2d:09:04:59:aa:ab:5a:a4:04:50:86:91:83:eb:
e4:a2:4e:80:03:65:cc:1e:7e:35:12:6b:73:60:6f:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:9E:B4:6B:15:FF:CC:B8:4E:A9:00:FB:AC:1E:5A:98:D0:1E:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3457FA96014B11EFAF650B6D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.125.0/24
Signature Algorithm: sha256WithRSAEncryption
96:30:2e:c3:71:ba:44:16:30:0e:06:c6:34:74:14:2e:b4:66:
00:1e:3d:68:55:d9:a8:ba:bc:dc:01:4a:64:dc:6f:ec:dd:b2:
5a:7b:32:4a:a0:e4:5a:8b:91:d1:86:a9:56:7e:50:5a:31:51:
43:2a:4c:9d:c7:ca:d4:87:ee:21:c8:7f:8f:58:73:da:ba:da:
07:29:a0:de:f3:9f:60:bc:56:b9:59:cb:0c:26:7a:80:16:de:
27:c4:87:90:33:05:f6:76:19:c2:bb:8b:e9:65:7a:39:b0:14:
0e:6c:27:e3:fb:10:bf:d9:98:f9:b6:1e:cd:c2:58:c0:fb:b2:
d9:cc:3e:78:9c:52:01:b8:67:d4:d0:30:bc:eb:3b:73:68:14:
64:7d:2f:17:53:5f:e6:17:f4:06:c2:c9:8a:59:e8:41:36:88:
a6:57:9e:58:6a:b6:fc:e0:96:fc:c9:b1:25:37:92:04:1f:00:
25:71:03:14:30:c4:d1:93:57:d8:4d:f4:20:80:5f:70:83:12:
59:af:1d:d2:6a:a7:da:d0:07:4e:60:8e:ad:94:3a:0b:88:0b:
e5:f4:7a:d9:53:fb:2e:bd:7f:d9:29:cc:d0:d2:ef:0b:4e:d5:
a8:6d:16:79:27:14:f4:ce:40:ba:05:7a:b6:be:27:41:6e:2c:
3f:dc:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:07:40 2024 by rpki-client on console-fra.rpki-client.org