Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2E0BACEFF011EEBB88B991775412E6.roa
File: 4E2E0BACEFF011EEBB88B991775412E6.roa (raw, json)
Hash identifier: HdyCkZnwHHj8CQ1qxosNR9hgCMMYNq5ilFSSCZIZphk=
Subject key identifier: F3:7B:D2:01:74:D2:6E:7B:1A:EC:0C:85:E8:A0:29:4F:7A:19:7E:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2E0BACEFF011EEBB88B991775412E6.roa
Signing time: Mon 01 Apr 2024 06:23:08 +0000
ROA not before: Mon 01 Apr 2024 06:23:04 +0000
ROA not after: Tue 07 May 2024 06:23:04 +0000
asID: 138915
IP address blocks: 154.223.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42930 (0xa7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:23:04 2024 GMT
Not After : May 7 06:23:04 2024 GMT
Subject: CN=660a52cc-244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:9c:31:b4:43:f4:0d:c4:c2:c5:cb:47:66:
bb:d1:97:68:66:e9:36:33:eb:33:11:a5:46:40:65:
1a:60:16:c1:1e:a9:51:e6:0b:25:84:99:cf:7c:56:
bc:8e:de:6c:f0:a5:79:87:3b:ea:69:78:24:c6:7b:
06:07:58:78:90:cf:e3:0f:25:be:d4:47:67:6e:90:
4b:dc:da:d5:6b:02:76:be:99:45:37:1b:65:17:79:
af:7b:b1:33:85:ed:3a:77:4a:7d:ec:15:67:82:8e:
e5:7d:b0:8c:47:28:2e:91:66:53:68:02:28:1a:66:
64:94:7b:c2:0d:a0:58:15:f0:f9:91:25:2f:29:95:
58:92:ba:bf:a2:bf:ff:6a:dc:31:3e:52:16:8d:57:
7e:a8:6b:2f:43:8a:ad:17:d0:6e:65:e1:23:50:b2:
0b:d3:2c:07:7d:e6:b0:fc:90:84:86:7b:3a:73:55:
b5:df:3b:fb:16:97:65:3d:a7:42:6e:16:52:13:6f:
bf:b9:87:ce:0b:3b:9e:dd:be:45:3b:97:5f:e0:99:
b0:b7:32:00:87:92:0b:1f:1e:50:48:2d:0a:d4:b6:
a4:64:d4:ed:f3:d8:ec:a6:bd:78:76:e8:f0:4d:6d:
8c:4d:db:17:5c:74:70:53:c6:54:ca:91:a9:5f:c6:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:D2:01:74:D2:6E:7B:1A:EC:0C:85:E8:A0:29:4F:7A:19:7E:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E2E0BACEFF011EEBB88B991775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6f:ea:dc:e3:4b:18:13:67:e0:a3:96:16:5d:2d:3e:52:bc:
94:5a:1f:2f:e1:32:51:02:3c:98:ba:68:f2:27:d8:3d:48:43:
54:0f:f2:49:9b:5a:69:3c:75:3a:d7:82:c9:02:ba:a6:49:1c:
f0:07:06:55:18:90:66:18:9d:65:4b:ef:8e:91:b6:1c:47:0b:
e8:f0:6d:19:89:de:e5:95:68:e6:9e:14:d9:3f:9a:32:ab:9e:
c0:0c:fc:b7:fc:5f:93:e3:72:ba:d2:90:a2:51:86:07:84:21:
c1:58:63:09:bf:94:a4:ef:e8:88:24:d5:53:b6:df:07:7c:6a:
51:38:e0:01:80:8a:7f:a8:3d:a3:88:20:74:25:ee:87:4a:89:
0c:6d:72:f4:12:4a:ae:06:47:17:ac:f9:a6:c2:fc:cb:44:3f:
04:64:1b:27:b2:0d:24:db:2e:96:e5:e2:ef:ef:e6:cc:13:12:
ed:cb:f5:e6:92:25:df:13:55:98:37:dd:80:67:6d:83:26:a6:
c5:a5:9a:23:32:95:9a:54:34:a6:d2:f5:90:eb:63:0e:dc:60:
6a:db:80:d8:75:6e:6a:5f:11:8f:b6:c1:02:fb:53:de:25:94:
75:b7:5b:61:df:4b:85:d5:af:fe:66:f2:b3:e1:d1:cd:5b:b1:
f6:9b:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org