Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C912FB0EDBA11EE95BE39C3775412E6.roa
File: 3C912FB0EDBA11EE95BE39C3775412E6.roa (raw, json)
Hash identifier: yaVBhH4nRNr1iI/rb0dYCTEEI8GhKVLpOcptQAX77sc=
Subject key identifier: F6:A7:5F:15:13:DC:48:28:DF:43:20:E2:A0:60:AB:C5:E7:CA:1E:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A745
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C912FB0EDBA11EE95BE39C3775412E6.roa
Signing time: Fri 29 Mar 2024 10:51:03 +0000
ROA not before: Fri 29 Mar 2024 10:51:00 +0000
ROA not after: Sat 04 May 2024 10:51:00 +0000
asID: 142062
IP address blocks: 154.86.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42821 (0xa745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:51:00 2024 GMT
Not After : May 4 10:51:00 2024 GMT
Subject: CN=66069d17-5015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:eb:6b:61:b2:3a:9b:c1:5c:d2:60:ca:f6:
cd:c6:42:25:63:3a:87:02:c4:3a:ca:00:a5:94:93:
20:53:b5:7a:0e:e8:12:39:08:fc:a4:78:f9:11:c5:
73:29:86:5d:3a:ec:70:6c:8c:7e:70:e5:6f:66:26:
62:39:a1:30:15:bd:79:16:91:eb:00:5d:3c:c1:31:
4c:08:93:9d:67:86:b6:3f:fa:9a:f8:c7:fd:3b:18:
01:e7:9f:27:1a:97:4b:97:fd:f0:63:3c:90:61:15:
77:be:85:a3:1b:d3:75:2c:52:7a:21:2a:ce:2d:0f:
d5:2d:d1:fa:71:d6:4b:95:f6:c5:00:97:3c:f4:c8:
2e:a9:1b:e4:59:4d:2f:f1:12:88:ac:d9:38:e4:98:
6a:a0:7a:85:5c:e3:90:eb:5b:fa:b1:9f:ed:c9:f3:
27:32:60:f2:5d:db:b7:3c:b4:4b:ea:47:12:5b:16:
2a:34:69:10:84:e3:1c:82:1e:79:53:af:14:6d:9c:
e6:24:47:1c:43:e3:c3:c3:15:ae:8c:42:68:9c:77:
03:68:80:0e:e4:d5:1c:fe:96:fa:e6:a7:aa:a2:17:
2c:26:1b:54:3c:f5:73:8c:72:bb:27:3e:d1:8e:c7:
4f:02:37:c6:5c:53:1a:97:15:d4:1c:06:de:bf:ce:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:5F:15:13:DC:48:28:DF:43:20:E2:A0:60:AB:C5:E7:CA:1E:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C912FB0EDBA11EE95BE39C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.88.0/24
Signature Algorithm: sha256WithRSAEncryption
16:08:26:e5:71:29:11:62:65:97:15:61:24:56:ad:4a:a7:c8:
ff:9c:fc:ae:04:43:44:4a:43:4e:ef:b6:99:ef:a5:d0:1c:8a:
52:d9:4e:73:c7:19:0e:76:e9:0a:86:9b:17:f0:e7:4b:ca:ec:
e8:f9:36:5a:08:31:e1:9f:a5:a3:2e:fe:9e:03:b4:b8:43:16:
a6:c3:1d:37:b8:96:28:96:1b:95:98:94:11:8c:70:86:30:da:
3e:59:99:ce:49:d8:3a:5f:0c:ef:a7:94:17:7b:ca:c1:85:f6:
bd:31:56:f4:ee:de:c9:4d:df:be:c8:e6:82:b0:17:9c:1f:d4:
d3:9b:5a:55:2c:82:8d:ba:48:0c:a7:09:70:29:cf:47:3e:4a:
0f:ff:4c:72:9c:29:ed:ed:66:02:d8:c3:27:43:a2:57:4a:56:
c4:1b:14:6a:dc:d9:f9:88:f3:cc:90:85:db:ea:cb:81:e5:97:
7e:58:a0:2d:e0:82:35:d6:61:e1:6f:a2:35:df:ed:b3:69:3d:
ff:bc:3a:ce:7e:d4:8d:f1:a5:53:29:26:3f:c2:f0:6e:ba:18:
d7:10:21:f6:75:83:13:d4:48:10:36:61:53:02:21:13:fd:e8:
23:8a:f3:85:f9:a4:f2:fd:50:b1:04:5f:b0:87:bb:e7:76:f7:
2b:24:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org