Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDDF0CFAE811EEA72EF060017001B1.roa
File: 4FCDDF0CFAE811EEA72EF060017001B1.roa (raw, json)
Hash identifier: R21Aaku8f6YOUoslqrjfCE1fUHi6H/DT3OkJTEkK9dk=
Subject key identifier: F5:CC:E7:BE:51:C1:6B:A1:2D:E1:F1:31:8A:E4:A6:20:76:CB:46:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDDF0CFAE811EEA72EF060017001B1.roa
Signing time: Mon 15 Apr 2024 05:23:37 +0000
ROA not before: Mon 15 Apr 2024 05:23:34 +0000
ROA not after: Thu 09 May 2024 05:23:34 +0000
asID: 139646
IP address blocks: 154.216.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44172 (0xac8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:23:34 2024 GMT
Not After : May 9 05:23:34 2024 GMT
Subject: CN=661cb9d9-7094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:ce:36:34:a1:e7:14:15:fd:c1:70:4c:66:
56:e7:39:a7:94:75:c0:d5:8b:ec:ee:88:e2:6a:a6:
5c:7a:53:94:5f:fa:26:fd:92:5f:72:84:5f:aa:66:
09:38:cb:a3:ee:d4:f3:d5:b1:84:09:ce:11:9e:ce:
02:f7:84:ab:58:7f:fc:e2:b3:8d:01:c7:a5:78:b1:
f8:b4:73:c9:52:eb:1c:0d:b4:94:85:79:dc:3a:85:
82:8b:d6:0f:87:48:26:a5:7a:0f:83:42:0e:d2:ac:
df:ce:07:7c:50:3c:8b:a7:55:38:f7:cc:ac:51:ca:
a2:48:59:b6:60:a0:f5:08:37:ea:b1:09:4a:50:63:
f3:0d:cd:18:06:f0:f7:8c:da:f2:5c:b6:62:5a:f0:
4f:00:2b:52:bb:41:96:1e:7d:93:2a:8f:8e:7e:c9:
a0:0b:23:fe:12:85:63:6d:d4:bb:0a:d5:83:cb:8f:
9b:8f:ad:27:04:b5:7d:fb:f5:0f:c6:8a:7d:c5:bd:
92:34:ab:78:e7:f8:55:45:36:7b:96:93:f1:e7:68:
1b:d3:ac:85:ed:da:48:fa:3e:af:12:19:36:0d:cc:
1d:61:85:e3:d3:48:be:cc:5e:0b:68:be:90:b2:23:
43:37:ed:0c:01:5d:5a:be:23:64:9f:2d:9c:82:2b:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:E7:BE:51:C1:6B:A1:2D:E1:F1:31:8A:E4:A6:20:76:CB:46:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDDF0CFAE811EEA72EF060017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:4c:62:57:f2:30:d5:ec:be:b6:05:e6:f0:e6:83:cd:42:ae:
96:e1:83:ca:10:a1:3e:fb:d2:5a:92:59:47:04:bc:9c:83:09:
55:58:1b:84:87:e7:b3:6a:64:2a:3b:a9:d0:75:ab:20:b9:e6:
c0:23:1a:35:2c:44:6d:6f:8a:b1:ad:93:92:b3:70:39:bd:f3:
52:54:0a:46:5f:bc:11:3e:ad:43:55:cb:3c:8e:cb:9e:0d:e1:
db:f2:c6:52:cf:8b:73:b2:70:60:84:4c:0c:19:f5:fa:02:62:
2a:91:3d:35:ec:6d:df:c6:99:65:85:d4:1f:f0:ab:65:36:bb:
a4:ab:9b:f5:de:92:16:fb:c2:fc:bc:b6:6b:c7:d0:42:c7:b3:
4b:d5:7e:28:59:95:78:b6:da:35:b0:85:5c:ee:af:5f:ad:fd:
e1:85:0d:8f:c2:01:c2:4d:43:d6:66:64:4f:e4:63:61:63:05:
11:16:a9:95:fd:1a:1a:1a:dd:a6:f2:2a:26:14:f3:d4:df:98:
2f:b9:ea:18:a0:63:af:33:8c:2c:e6:b9:ae:f7:19:11:11:2f:
a5:c1:e5:5c:f7:b1:d6:e2:b7:6d:25:21:cc:89:a9:ae:0e:ab:
fa:30:41:25:7f:dc:6c:51:35:cf:43:e0:40:6a:83:cc:ab:3f:
9e:94:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org