Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC973CAFAEB11EE994E74FA007001B1.roa
File: 3FC973CAFAEB11EE994E74FA007001B1.roa (raw, json)
Hash identifier: atdJdd9p5wsZquevGhv0ylzKSKz2FaEimeJeqCOK1/U=
Subject key identifier: 18:11:C6:7C:62:30:D2:99:E2:6C:0C:87:B6:B4:7D:30:CB:7F:98:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC973CAFAEB11EE994E74FA007001B1.roa
Signing time: Mon 15 Apr 2024 05:44:39 +0000
ROA not before: Mon 15 Apr 2024 05:44:36 +0000
ROA not after: Thu 30 May 2024 05:44:36 +0000
asID: 63139
IP address blocks: 154.93.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44200 (0xaca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:44:36 2024 GMT
Not After : May 30 05:44:36 2024 GMT
Subject: CN=661cbec7-a948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:6d:01:3e:e6:fa:32:f6:e4:cd:8d:3d:95:
3d:fe:15:bd:4b:e0:06:b6:a0:ff:b6:f4:eb:bd:86:
96:7b:74:bd:ad:72:ce:37:e5:85:f3:9f:43:37:43:
fb:70:b8:7c:62:e9:84:3d:e2:73:f8:cd:f2:62:bf:
c4:f3:c1:fc:12:22:ff:e6:97:27:13:80:19:8e:54:
e7:14:3a:04:87:c1:a2:fb:63:b6:14:70:94:c1:bb:
02:71:a8:a4:fd:8f:37:1b:e5:8c:d6:cd:f4:7c:5e:
50:d0:09:97:77:a1:31:1f:46:45:ce:62:36:3c:34:
d7:ce:2a:bb:ff:57:76:ac:ee:91:d3:4e:fd:8b:ae:
c9:a5:18:04:04:05:c1:71:56:26:ed:6b:43:e8:74:
53:18:34:9c:db:11:fb:1d:a4:68:c1:b5:a3:11:c2:
e4:79:df:3b:5e:c0:b0:7e:fb:65:7c:6b:8f:80:e5:
ea:89:36:d4:08:7b:ae:c4:40:e4:66:23:44:80:50:
2a:d2:69:01:6c:4c:28:37:6c:59:67:07:f5:44:3a:
70:fb:a2:11:d2:26:28:aa:ef:83:24:61:5c:b8:bd:
50:b4:4d:06:17:35:88:90:dd:69:73:6d:40:f3:a9:
3a:f7:f6:4c:86:cd:c1:8d:28:69:c6:75:fd:a5:da:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:C6:7C:62:30:D2:99:E2:6C:0C:87:B6:B4:7D:30:CB:7F:98:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC973CAFAEB11EE994E74FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e6:d5:45:70:89:fa:52:63:60:6d:74:e3:47:92:df:76:70:
08:3a:f7:1a:ee:5d:e4:bb:8b:8b:09:1f:4d:67:28:83:0c:3f:
7f:ee:d0:a3:f8:d7:39:8b:51:ef:42:3f:e5:8c:6e:a4:6d:5e:
89:7d:11:72:67:4f:51:7a:7b:81:68:de:48:cf:9e:f6:f1:8a:
47:0c:44:27:54:42:5b:37:5a:23:98:61:54:09:43:d5:5b:24:
41:7d:ef:ef:81:68:91:d4:5b:49:94:3d:e1:7d:7a:53:f9:84:
c7:a5:e0:9f:c9:6d:cd:ca:17:bf:4e:11:6b:d8:4b:d7:26:d7:
76:9c:dd:ca:63:98:f9:6f:74:d8:fa:47:04:e0:06:13:60:1f:
4b:4f:81:8c:d8:a5:e8:cf:77:24:2c:2d:ed:eb:94:05:93:14:
5a:71:2d:69:ac:c5:e2:86:11:32:ee:d7:b1:11:c6:9c:94:ed:
22:8c:a0:1c:43:5b:0e:db:ee:fc:b7:0e:4c:50:fe:b6:ef:6f:
77:59:b0:a8:6c:41:a6:20:a6:7f:d2:be:6a:1d:a7:27:8d:d7:
6f:9a:cb:7d:bf:55:0c:ff:e1:19:d1:b7:12:01:f2:c9:76:d4:
c3:9e:d2:b3:ab:46:b3:a5:9a:d6:b8:55:f9:99:48:59:eb:10:
8a:3c:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org