Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCF735AEFF411EEAC7BD2AD775412E6.roa
File: 3DCF735AEFF411EEAC7BD2AD775412E6.roa (raw, json)
Hash identifier: /KMIWu8U878hwMQhR1qQ/0wETWJ1UO+Px9TTy8EiZeY=
Subject key identifier: E8:21:ED:1C:9D:D7:02:1C:76:22:CD:FC:81:50:98:54:8D:7D:CD:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCF735AEFF411EEAC7BD2AD775412E6.roa
Signing time: Mon 01 Apr 2024 06:51:18 +0000
ROA not before: Mon 01 Apr 2024 06:51:15 +0000
ROA not after: Tue 07 May 2024 06:51:15 +0000
asID: 138915
IP address blocks: 154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42980 (0xa7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:51:15 2024 GMT
Not After : May 7 06:51:15 2024 GMT
Subject: CN=660a5966-ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:1e:1c:c0:45:e0:80:88:c9:25:a8:3e:13:
8a:9b:4a:f8:11:8d:3a:44:63:aa:2a:0c:11:70:ef:
bd:d8:88:2d:1f:1f:28:63:20:1b:37:ed:e5:29:cf:
c6:46:52:56:6f:87:90:a3:f4:7a:ef:29:8a:04:5e:
5b:0b:34:f6:e5:b2:94:b9:5d:b2:c9:86:fc:26:f7:
a7:a8:4d:4c:7e:cd:6f:b8:cf:4f:10:e6:3f:96:43:
46:21:f9:92:69:20:e6:44:98:5e:ed:e2:0a:fa:84:
02:31:7d:8c:9d:5e:5f:33:61:39:f4:23:15:fb:b3:
a6:8a:ea:63:ba:7a:23:da:36:29:48:94:a5:c3:5e:
2c:5e:b6:15:75:7a:7f:8a:7a:98:8d:2a:df:7a:2b:
07:e1:e5:08:65:35:d2:fd:7b:00:26:22:f9:31:ce:
32:21:bd:0a:66:13:00:c2:5f:c7:c5:17:0a:be:26:
00:98:52:ab:74:15:6f:b6:cb:04:c9:47:ba:60:00:
76:0f:c5:5b:3c:40:a7:9f:9e:fa:99:36:72:6f:03:
59:48:d8:f6:cc:00:a3:c9:4e:71:54:0a:76:e5:98:
12:20:17:77:61:16:26:e4:39:7a:a4:77:7f:c0:ea:
92:5d:c0:d1:ba:dd:32:04:cd:0e:3d:60:4e:dd:31:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:ED:1C:9D:D7:02:1C:76:22:CD:FC:81:50:98:54:8D:7D:CD:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DCF735AEFF411EEAC7BD2AD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:32:cc:4c:3c:75:80:81:da:39:df:9d:72:82:19:64:f9:5f:
7e:f2:b8:eb:fd:18:a8:ff:26:be:ca:65:73:c6:87:bc:fe:1a:
16:1c:be:14:ba:ce:72:ad:09:99:4c:0c:1d:fa:f4:e7:89:d2:
c5:7d:40:c8:6d:90:d6:67:08:2d:6b:52:4c:37:bc:d7:ce:f2:
3f:ed:cd:89:37:7e:d1:be:9e:a7:0a:9a:63:fb:c2:9a:56:ea:
73:e4:e3:1d:23:e2:b9:74:5a:f4:0a:23:77:a7:64:10:a9:03:
d0:c2:6c:c4:e0:bc:61:f7:da:2a:ec:0f:75:2b:58:9e:eb:b2:
5b:bb:1d:f7:2d:eb:0f:d3:9c:79:19:dd:49:ad:fe:74:e6:8b:
73:fc:35:32:e8:66:06:e3:a5:1b:41:a9:c5:56:49:c6:a1:6e:
0a:24:77:8d:31:03:14:93:f5:90:f2:5a:e0:7d:57:63:a8:29:
87:ee:2b:c5:88:5b:87:f7:b1:5f:75:b7:c4:16:0c:e7:57:da:
09:e8:d5:89:3b:6d:6b:41:c1:f5:7a:ed:ad:a0:44:9d:eb:3f:
93:92:02:9a:07:d8:22:2d:b3:8f:8f:79:76:30:83:d4:8a:75:
3a:ea:b1:f7:a0:64:08:ae:c9:72:40:3b:b8:40:ca:87:7d:e4:
b7:a1:a2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org