Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B596B60F7C011EE907B4B29017001B1.roa
File: 4B596B60F7C011EE907B4B29017001B1.roa (raw, json)
Hash identifier: A9Vfe8L37Vx4LwlWjXG76pr9PXEHTvmxXkp8NXNaPhU=
Subject key identifier: F9:19:6A:22:09:79:A7:7F:08:76:9F:AD:EC:9E:44:83:1E:83:5A:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B596B60F7C011EE907B4B29017001B1.roa
Signing time: Thu 11 Apr 2024 04:59:37 +0000
ROA not before: Thu 11 Apr 2024 04:59:33 +0000
ROA not after: Sun 19 May 2024 04:59:33 +0000
asID: 138915
IP address blocks: 154.93.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43813 (0xab25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:59:33 2024 GMT
Not After : May 19 04:59:33 2024 GMT
Subject: CN=66176e38-0bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:df:bb:77:d3:5f:d9:d8:ee:9d:fb:26:3a:
6f:b7:53:b9:cb:7a:25:33:b0:1b:ac:18:b2:8b:a4:
10:0a:61:35:98:5b:04:5d:91:3d:d9:25:6b:57:bf:
d8:11:8a:a6:af:99:2d:8e:ef:4c:6a:29:a4:17:11:
e2:59:01:0c:42:10:ea:e9:94:1e:e7:c6:c4:06:d2:
de:cd:9b:cd:f7:2e:3b:7d:ab:eb:17:8e:d3:be:3c:
80:70:e8:3f:2f:99:11:68:31:9c:5b:5c:a8:03:9b:
fd:f8:6e:2d:f5:a8:c6:68:c4:77:64:23:93:40:7e:
b5:79:93:30:fe:8b:21:df:e3:22:38:db:eb:4e:47:
ee:f2:05:9b:fa:ad:0a:b9:97:4b:28:b4:55:83:ab:
52:54:0a:57:14:b8:67:cc:60:5e:86:94:d1:19:c4:
90:cb:7c:d1:c7:a2:23:ad:87:85:a5:b2:32:ac:cb:
00:1f:f2:41:35:20:d0:fa:d2:ee:24:63:2f:8d:44:
37:05:4b:0b:07:3f:0c:e8:be:30:71:a5:af:7a:05:
3a:68:48:a7:35:e2:f7:fd:07:90:7c:a7:e5:1f:9c:
ca:d4:ac:4f:cc:b3:65:7a:4b:42:e9:d6:9c:3b:4a:
a4:5d:b0:33:27:52:29:3a:97:40:e5:15:c9:ca:ab:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:6A:22:09:79:A7:7F:08:76:9F:AD:EC:9E:44:83:1E:83:5A:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B596B60F7C011EE907B4B29017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:64:56:07:a0:5e:3f:26:a5:3f:55:ae:d1:59:8d:4b:35:d0:
8d:85:82:04:a4:26:11:df:a0:a2:c3:39:57:eb:c3:1d:2b:c1:
d6:d0:d4:1c:2a:d1:7f:2a:bc:a5:e9:1e:db:b7:c8:74:39:fe:
4a:ac:b8:40:df:e1:81:2d:12:77:c3:f5:43:4a:9d:42:96:7a:
80:3a:0f:af:60:60:22:9e:b6:76:37:8b:8f:7b:d9:ea:9d:cc:
96:79:72:61:c8:83:dc:61:a3:99:0a:68:62:e7:da:a1:34:f9:
2f:fc:e9:68:4c:d6:37:19:48:df:a5:d3:4e:1c:77:89:a2:f4:
d6:f0:89:7c:12:fc:69:08:a5:90:5b:f4:09:e1:10:ce:91:21:
c7:33:39:09:da:d3:91:8d:c3:00:6a:f1:65:72:2b:f6:92:40:
00:0d:d2:39:44:45:a7:7f:21:ef:c6:05:78:dc:74:8e:f0:6b:
40:2d:79:33:4c:bf:88:68:8c:23:80:9d:bf:3b:36:db:07:15:
c7:27:37:e9:71:72:ba:07:80:77:94:9e:7d:fc:93:34:f8:bd:
d5:62:e5:60:73:b1:32:e7:68:b0:54:76:6f:95:09:e2:76:61:
9f:2d:7b:8d:ac:08:58:d9:54:64:9e:0e:4e:7a:13:d6:cd:81:
09:eb:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org