Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F64826C017111EFBE7D4822017001B1.roa
File: 3F64826C017111EFBE7D4822017001B1.roa (raw, json)
Hash identifier: 0omS5BIeta37S1XBN1J9EL5/Q4No2JnEEQb0+42QTMs=
Subject key identifier: AE:23:65:95:C3:31:2D:BA:8F:B2:3A:76:D3:64:46:5A:37:D0:D1:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F64826C017111EFBE7D4822017001B1.roa
Signing time: Tue 23 Apr 2024 12:58:58 +0000
ROA not before: Tue 23 Apr 2024 12:58:54 +0000
ROA not after: Sat 11 May 2024 12:58:54 +0000
asID: 9009
IP address blocks: 154.92.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44860 (0xaf3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 12:58:54 2024 GMT
Not After : May 11 12:58:54 2024 GMT
Subject: CN=6627b092-6219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dd:38:b3:1e:05:ef:c6:a8:f9:60:0d:78:d9:
03:8d:e0:f0:e9:ff:1e:b4:f6:7b:bd:71:72:cd:27:
2f:08:c3:28:96:2c:1a:c8:7b:59:00:1f:da:86:f8:
48:44:08:58:4a:6d:36:20:85:87:6e:7a:96:b0:28:
a4:48:e3:7f:99:b7:aa:e8:aa:67:80:fd:d1:2c:0a:
ef:38:30:27:7d:84:81:70:41:6b:bc:d6:f9:c7:21:
09:b6:07:e4:2d:3d:14:87:0f:7e:ed:ce:78:6b:c6:
cd:1e:bd:78:71:a8:d5:24:d5:d1:a0:0b:26:03:de:
58:91:4e:cd:13:8d:79:96:6f:6f:ed:62:87:2a:84:
6d:bc:7a:7b:10:0a:7e:4e:82:ea:27:f2:a5:8a:c9:
08:4f:45:38:69:99:13:92:06:dc:42:5d:cc:13:2c:
bb:27:7a:5e:d2:7d:c5:69:1b:0a:c9:fc:39:59:ea:
71:9a:d8:b8:a8:2e:c1:10:ed:1d:2e:4b:1e:16:63:
fe:c4:05:db:bf:67:16:25:94:5b:b7:d3:5c:66:79:
0a:94:e6:5d:03:c1:8d:a1:e1:da:a4:80:27:d1:9d:
2b:5a:ad:48:4d:eb:27:e7:55:d0:2f:d5:3a:05:6a:
66:8a:84:08:1c:4d:85:5c:bf:7b:57:cc:6c:1c:21:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:65:95:C3:31:2D:BA:8F:B2:3A:76:D3:64:46:5A:37:D0:D1:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F64826C017111EFBE7D4822017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3f:7c:48:35:ba:49:4e:c3:06:5e:5c:b5:86:bd:1e:1e:37:
a2:0b:03:00:f3:b3:63:b5:7c:84:ee:72:4c:a7:3e:c9:35:8d:
ba:1d:67:e5:d0:d4:ee:b0:07:7a:e6:50:e3:ae:f2:45:b9:9d:
bf:cf:08:24:71:38:0f:55:45:29:14:6f:7b:b6:cd:a5:13:c3:
0e:73:e4:64:5a:fe:74:95:f8:0f:c1:ee:cb:5f:f5:be:2f:ce:
5c:48:5b:38:70:62:fd:aa:22:34:84:5d:69:6e:f3:7e:02:cb:
f8:f1:81:5a:ba:d6:84:d3:31:9d:c9:97:1f:6f:f7:41:9c:80:
bd:08:d7:4a:2e:6e:91:ab:da:f2:d3:74:84:89:11:b9:99:32:
bf:31:91:d9:f5:1c:a7:3d:db:c0:38:32:ba:69:17:82:27:a2:
16:1b:c7:a8:8c:3e:6a:ce:5f:92:66:3d:df:e6:35:50:ae:e2:
fa:af:b3:17:37:8e:fb:4e:9d:d0:42:6f:4c:3a:9d:9d:92:92:
2f:fd:d7:71:e3:b6:26:5d:21:5d:c4:84:8e:42:a0:52:7d:bc:
00:42:19:0f:28:41:f1:bc:8e:67:8e:72:17:10:bc:6a:2c:06:
d4:fb:7b:99:87:05:14:f0:a7:34:c9:ec:d3:1b:58:85:90:54:
bb:ac:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:31 2024 by rpki-client on console-ams.rpki-client.org