Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C48CCBEF00E11EEA82DC77B775412E6.roa
File: 4C48CCBEF00E11EEA82DC77B775412E6.roa (raw, json)
Hash identifier: BT3MSjN/gTQLLVoBI+JE6up5vQZNElugcX2vrWVM/II=
Subject key identifier: BD:81:52:E8:09:55:53:6E:9C:74:ED:35:77:8A:21:14:5C:C5:17:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A868
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C48CCBEF00E11EEA82DC77B775412E6.roa
Signing time: Mon 01 Apr 2024 09:57:50 +0000
ROA not before: Mon 01 Apr 2024 09:57:46 +0000
ROA not after: Sat 11 May 2024 09:57:46 +0000
asID: 63139
IP address blocks: 154.203.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43112 (0xa868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:57:46 2024 GMT
Not After : May 11 09:57:46 2024 GMT
Subject: CN=660a851d-41cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:0d:92:b6:e4:15:1e:d8:ac:cd:7f:37:79:
4a:0b:84:41:fe:4d:21:82:ca:19:f5:9f:3c:f9:19:
ec:93:7a:99:54:88:77:74:34:7c:c1:64:66:b6:c9:
c9:dd:5f:63:ba:75:1b:5f:00:9d:2b:65:96:91:9e:
99:3d:c2:bf:b3:4e:e5:aa:4e:be:d6:bc:16:c3:93:
5b:07:f9:a7:27:f8:75:07:17:69:c6:d0:4f:e6:10:
92:ce:a3:39:60:56:57:58:0d:89:98:94:72:40:bb:
14:22:65:1f:79:6b:da:c3:8a:a5:d6:db:3f:4e:22:
08:56:11:a3:6e:fb:ba:67:e8:3e:39:8e:e4:28:86:
9b:c2:e8:73:86:98:d7:b6:fd:fe:88:23:a6:96:72:
3a:ba:e0:b0:fc:a1:0c:1a:37:9f:5e:4f:54:65:3e:
bd:4f:d0:11:dd:48:0b:64:66:9b:97:cc:8e:84:c4:
bf:b7:10:a5:f8:1c:0e:4c:d8:fb:93:f4:db:1e:45:
71:e7:ea:56:9b:f0:81:69:c8:3f:8b:c9:f3:27:c9:
ad:49:17:11:30:ea:ae:fb:f3:15:7a:f7:3a:f8:2c:
c0:5a:a5:af:45:e2:bf:9a:e4:57:2f:6f:7e:dc:f7:
fb:81:f7:81:b1:f3:cf:28:ee:80:ff:7e:60:81:6f:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:52:E8:09:55:53:6E:9C:74:ED:35:77:8A:21:14:5C:C5:17:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C48CCBEF00E11EEA82DC77B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.178.0/24
Signature Algorithm: sha256WithRSAEncryption
98:19:4b:36:ea:c7:70:00:15:c3:67:43:cf:ea:64:c5:4f:1d:
b1:62:f8:16:d4:4b:d7:a9:b4:54:c4:d0:1c:d2:a0:6d:6e:89:
2c:09:71:00:a9:5b:37:70:21:e4:a3:eb:ba:c4:2a:e3:fd:be:
27:30:34:fe:e3:8c:fc:bf:50:12:5a:25:29:ae:1c:0f:0d:58:
d7:78:d4:ba:05:aa:5a:ed:9a:64:22:0b:0e:a0:db:93:6f:4c:
27:aa:14:a2:7b:ec:99:f2:2b:af:88:ae:6b:4f:2a:c5:ea:fb:
70:dc:58:d0:a3:f3:ae:ba:3a:93:9d:9b:b5:fb:32:49:d7:27:
e2:63:57:02:12:44:0e:ab:bf:da:e3:2e:b9:8f:b1:2e:e2:f8:
d2:99:28:8d:ca:19:fc:1c:65:bf:9a:10:a5:31:0e:f6:8c:d7:
db:77:35:c2:4a:87:55:3f:64:22:04:a3:61:ca:94:e3:6f:07:
9b:b5:5d:f9:41:e6:b9:d3:a6:ec:38:8a:db:7c:92:6c:6a:90:
32:84:de:41:40:01:dd:8e:f2:7b:cd:b1:cd:ff:03:4e:f8:86:
74:7e:de:8b:5e:5a:bb:c5:0d:c2:23:54:4e:bc:0f:c5:0f:cf:
a5:ae:29:a7:f1:ef:3e:78:cf:70:3e:e6:00:7b:9c:bb:a5:fc:
51:cb:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org