Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740F230F70411EE90FC1D82775412E6.roa
File: 4740F230F70411EE90FC1D82775412E6.roa (raw, json)
Hash identifier: rHjNev6MQZF7jXD9uaI7PJqv/pvpg18ymRyreSW9jUA=
Subject key identifier: A3:A9:A6:A5:D3:CD:38:0E:F9:F6:D8:0C:84:28:79:39:66:06:FC:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AABE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740F230F70411EE90FC1D82775412E6.roa
Signing time: Wed 10 Apr 2024 06:33:44 +0000
ROA not before: Wed 10 Apr 2024 06:33:41 +0000
ROA not after: Sun 13 Apr 2025 06:33:41 +0000
asID: 134687
IP address blocks: 154.91.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43710 (0xaabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:33:41 2024 GMT
Not After : Apr 13 06:33:41 2025 GMT
Subject: CN=661632c8-5f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:d1:88:5e:f5:8a:ba:c0:57:55:ef:8b:41:
a6:03:e9:8c:64:16:78:b2:b1:20:10:85:11:19:13:
2e:01:2c:9e:59:f9:c3:77:a3:40:c6:63:d5:0c:57:
11:e4:bf:58:e6:05:47:6b:6c:00:a5:7e:26:10:ce:
9f:b5:43:48:d4:42:05:8e:2e:c2:38:d4:57:ae:d8:
a3:b2:a9:5e:87:15:05:b8:09:db:90:ca:ed:92:85:
24:b1:c0:92:4b:ec:ef:e8:e9:f7:7d:bb:63:f8:13:
51:92:77:e1:a5:3a:bd:5b:de:60:a2:80:4c:1e:7b:
e9:20:3d:07:06:06:ca:3e:27:e9:09:a6:e8:7e:e5:
d5:7e:ca:2e:ff:0c:d3:4b:44:15:7a:ec:e8:0c:5a:
5a:f0:d0:07:b2:20:61:26:f5:18:d6:8e:c1:59:c4:
fb:6d:f7:e5:c1:51:e3:81:da:85:85:15:2a:64:88:
b3:1e:67:0e:c0:da:dd:4b:b8:5d:cd:ca:54:37:d5:
cf:da:3f:7b:28:30:b1:51:78:bf:2a:07:09:8f:fa:
30:89:88:67:85:ad:91:99:df:ed:94:38:17:c9:5d:
b6:66:0e:a2:b1:e7:d6:cd:22:95:9a:cd:84:38:c4:
e6:55:86:87:bb:2f:55:82:0c:6f:12:e3:d0:24:a4:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:A6:A5:D3:CD:38:0E:F9:F6:D8:0C:84:28:79:39:66:06:FC:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4740F230F70411EE90FC1D82775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:a7:55:5a:ff:f6:ec:8f:be:b6:74:93:e7:a5:67:40:fd:86:
24:15:02:b4:fd:06:fe:43:16:ea:06:69:9a:fd:41:ff:6d:3c:
0f:82:ad:ee:d8:50:dd:62:38:fd:62:8d:94:3c:4d:29:12:fd:
c4:97:93:54:4c:94:c8:88:86:4e:25:f9:3e:0a:61:b3:19:1b:
b6:58:7b:ab:4d:b3:6a:c3:05:24:22:04:b2:57:c6:ad:9b:5d:
dc:a1:ea:44:ab:c2:ca:8b:4d:09:d6:11:7f:60:4a:86:7e:8d:
32:6f:24:bf:6a:e2:63:ce:8a:b6:99:0d:63:ca:ce:5f:0d:36:
4b:91:2d:f2:e1:1d:ab:cb:01:95:a5:9a:56:ec:a7:fb:58:ad:
e8:7d:79:a0:35:bf:07:8a:ea:e0:b5:39:48:f9:0a:b9:7f:3a:
03:47:d9:27:bc:b6:26:e1:76:4d:f4:6c:cb:a6:14:e6:e3:08:
0a:01:ba:6b:06:04:26:2d:53:dc:d0:dc:f4:29:c3:e2:74:a1:
ed:cd:6f:4a:3a:1c:fe:00:ac:46:59:2c:99:53:ef:e2:b7:59:
0a:83:37:1c:0c:fe:42:24:21:ee:16:c3:13:9a:7a:db:c2:9e:
52:9f:5e:24:e4:86:19:0a:82:5b:a8:4c:da:b2:d2:be:3a:e3:
da:bf:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org