Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A7E22C614F511EEA228C3854AD9E6FC.roa
File: 3A7E22C614F511EEA228C3854AD9E6FC.roa (raw, json)
Hash identifier: 6WFzfXA7nAkbaaKZBtcKv30VT7UdCKJXMxgtcvVhzl0=
Subject key identifier: 50:8F:61:40:E0:12:75:FD:2A:FF:B2:0B:D6:23:EB:DB:B8:29:AB:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2DD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A7E22C614F511EEA228C3854AD9E6FC.roa
Signing time: Tue 27 Jun 2023 14:16:38 +0000
ROA not before: Tue 27 Jun 2023 14:16:34 +0000
ROA not after: Sat 26 Apr 2025 14:16:34 +0000
asID: 138995
IP address blocks: 154.218.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11732 (0x2dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 14:16:34 2023 GMT
Not After : Apr 26 14:16:34 2025 GMT
Subject: CN=649aef45-f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:1b:29:51:47:1d:1c:b4:62:19:a8:03:d2:
ee:fa:30:be:43:e7:bf:df:04:cf:ac:fa:e5:dc:e1:
53:c3:b3:92:d2:1c:64:c9:be:be:a8:a6:b9:7f:47:
5d:72:fe:e9:bd:cd:8a:dd:15:f3:d7:00:1f:c1:9f:
20:94:17:30:01:12:83:43:5b:de:51:62:6f:d9:bd:
94:7d:cd:2a:f8:62:1e:be:a1:58:c3:55:08:23:a4:
3f:95:75:57:1d:5a:15:a5:19:bf:84:6b:88:cc:40:
6c:f9:e1:cd:dd:c4:e2:5b:de:c2:13:92:47:e6:da:
56:08:65:a1:1c:98:f4:02:0b:dd:b2:2b:77:cd:94:
48:ed:24:56:ee:ba:70:59:b5:89:44:33:c5:25:87:
db:fd:5c:6a:d7:e2:cb:0c:53:80:56:1f:49:fc:d0:
5b:5c:bc:06:c1:66:01:41:fe:44:3c:55:63:4b:05:
a7:2f:e6:b6:b5:11:f2:1d:90:69:7f:07:b9:c9:8d:
c1:16:ef:fe:64:ee:37:a4:1d:f7:67:b1:15:8c:51:
bb:76:f3:a4:5d:23:08:9a:fb:ac:08:f8:64:ce:a8:
f6:b8:77:c4:cf:c7:ab:53:7d:5a:80:aa:37:dd:ae:
17:ad:4a:9a:43:be:66:a6:c7:d7:2e:05:9f:14:67:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:61:40:E0:12:75:FD:2A:FF:B2:0B:D6:23:EB:DB:B8:29:AB:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A7E22C614F511EEA228C3854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a1:14:18:4b:84:40:70:2d:6d:94:d5:7f:d9:de:d2:21:a8:
44:23:9a:1c:d5:78:97:1a:89:97:19:55:75:d4:2f:5d:04:bd:
d1:db:67:6b:54:7b:27:12:7e:0c:f7:c2:7e:c5:3c:f4:b1:86:
5e:b1:3d:f9:cc:ff:47:21:06:2b:4a:f3:fc:4a:20:22:0d:4e:
e5:8d:14:d8:bc:68:0c:62:d9:40:a3:9f:a2:a7:75:24:d7:bd:
41:b6:83:2a:62:df:b1:9a:cb:33:f1:a4:7e:9a:7f:a2:e1:e0:
57:d5:15:12:dd:64:24:d9:1b:02:d8:b8:70:27:9e:47:5a:87:
dc:96:23:95:44:e9:f3:dd:bd:06:8c:6e:2a:5e:31:57:14:f1:
d3:54:62:67:2f:0b:fa:70:28:c1:ef:20:4f:af:65:57:68:eb:
93:79:a7:7c:31:d3:18:3d:41:7b:00:77:f2:62:e9:0d:7d:2e:
6b:dc:37:18:16:cb:33:e2:ea:90:ab:08:5e:75:5e:ea:4f:37:
5b:08:76:2e:4e:7e:81:3c:9e:b6:61:a3:1a:3a:7a:bb:04:0b:
9d:a4:72:b9:02:b3:1c:45:22:00:f1:8f:89:7d:d9:18:28:52:
bb:ec:24:fc:71:03:3d:1a:1a:4c:11:3f:fa:86:84:bf:ce:8e:
66:48:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org