Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A1420E09B911EEACE2697D4AD9E6FC.roa
File: 42A1420E09B911EEACE2697D4AD9E6FC.roa (raw, json)
Hash identifier: B51CMJdTn5qIflLH/eSEIzf51+Pn0emm00YSYvjSMOY=
Subject key identifier: 6A:B1:FB:8C:09:04:C9:CE:80:10:6F:44:E5:2B:C6:FA:3C:5A:B3:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2B77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A1420E09B911EEACE2697D4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:09:39 +0000
ROA not before: Tue 13 Jun 2023 07:09:35 +0000
ROA not after: Sat 15 Jun 2024 07:09:35 +0000
asID: 134687
IP address blocks: 154.93.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11127 (0x2b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 07:09:35 2023 GMT
Not After : Jun 15 07:09:35 2024 GMT
Subject: CN=64881633-5ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:dd:44:cf:e1:b4:7e:39:c1:fc:87:ca:94:
15:24:1d:8e:dd:96:dc:76:f8:a0:92:09:42:e8:b8:
c6:f5:cf:21:97:08:82:b6:3c:b6:ec:18:15:72:f1:
59:43:26:0e:a7:67:6b:80:7c:c3:5a:15:0f:b2:e4:
d8:db:40:6b:ee:18:03:88:f3:e3:fd:5c:32:e0:eb:
8f:98:f4:66:64:c5:f4:f3:5f:3f:c6:d6:e2:c9:c8:
38:6d:cf:cc:f2:f9:63:e7:20:7b:cc:e6:f7:87:06:
57:bc:65:5c:0e:cb:74:7d:a1:54:1f:eb:18:69:03:
b1:c2:da:a3:32:a7:6e:e8:66:09:d3:be:7c:8e:c1:
e2:f0:81:11:95:56:f6:67:d5:b0:9b:83:72:94:48:
84:2a:36:57:63:28:00:ac:50:f5:a7:15:87:4c:56:
9c:0b:25:25:a2:44:69:35:12:1a:fb:50:a7:b6:71:
6c:89:29:0f:49:2b:a3:42:56:47:48:93:32:4e:e9:
88:a6:d7:c8:8f:0a:52:c9:32:c9:62:ab:c0:96:15:
6c:00:e0:c9:46:d8:9d:b6:53:0b:5b:8e:59:04:88:
a8:4c:72:97:4a:50:3f:09:f0:59:05:c3:0d:52:d5:
b2:c4:d8:cb:9e:0f:6c:5d:81:42:10:bc:22:9d:df:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B1:FB:8C:09:04:C9:CE:80:10:6F:44:E5:2B:C6:FA:3C:5A:B3:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42A1420E09B911EEACE2697D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.7.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e8:29:3a:90:c4:21:1c:cc:4f:ba:7c:49:00:58:0f:3e:dc:
39:02:f6:a1:00:78:34:be:0a:87:34:b3:95:87:f0:d8:b1:10:
51:05:8f:1d:b3:fe:07:b7:62:ca:0e:14:64:72:8e:1e:f7:b9:
c8:89:60:35:d7:2b:53:75:be:fa:c2:e4:eb:ab:47:ad:45:f2:
03:63:51:98:3c:06:4f:4c:8f:d9:92:59:f0:84:03:da:47:f5:
01:38:83:11:11:4e:55:0f:d2:30:e9:7b:9b:10:0b:6c:38:7e:
21:c0:ab:20:15:5e:e1:1e:a2:66:e9:28:b7:47:d8:7f:a4:22:
09:c3:2e:05:87:22:8e:cb:cf:42:fd:2d:3b:df:23:e4:93:ff:
32:a7:d5:d4:01:36:86:8e:69:3a:62:0f:0d:10:1a:e4:30:62:
b6:b8:5f:49:76:38:34:20:0f:a8:c4:09:98:3a:41:22:a5:12:
66:0d:c5:3a:f3:ee:9c:46:15:ee:63:fd:8f:3b:85:40:1c:97:
b4:ad:ec:d7:f3:2a:b1:07:77:11:03:d0:5d:8a:75:e9:da:0d:
0e:d6:66:0f:36:78:ef:9a:8d:11:00:70:14:b6:27:14:a2:69:
43:37:36:a2:fc:3f:b8:2c:dc:6b:18:81:48:17:47:88:c4:8f:
69:68:35:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org