Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/539EA24C7EBA11EE8C71F15E4AD9E6FC.roa
File: 539EA24C7EBA11EE8C71F15E4AD9E6FC.roa (raw, json)
Hash identifier: cSOvd5YycpXhNwnnh68nRhBObv8QYXU/TcW2x8wS7QQ=
Subject key identifier: 4A:FD:57:55:65:F1:09:AC:52:A4:58:66:A4:8C:BD:14:7E:31:70:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/539EA24C7EBA11EE8C71F15E4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:42:03 +0000
ROA not before: Thu 09 Nov 2023 04:41:59 +0000
ROA not after: Thu 08 Aug 2024 04:41:59 +0000
asID: 133861
IP address blocks: 154.197.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19913 (0x4dc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:41:59 2023 GMT
Not After : Aug 8 04:41:59 2024 GMT
Subject: CN=654c631b-024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:a9:fc:57:dd:09:36:61:28:24:a3:0f:1e:
9b:a4:20:fb:de:70:d2:63:23:34:04:a5:5b:81:2c:
c5:33:3f:0c:8d:67:cc:e6:ac:d4:85:88:f1:f0:50:
fd:4d:32:be:7e:ba:6f:a6:e0:41:84:d6:06:60:3f:
a3:dd:e2:82:61:79:5a:fe:5a:6e:cb:ea:7b:89:ff:
33:4d:2f:7a:4d:b2:d5:ef:60:c1:c4:12:04:a6:f1:
36:de:08:a4:f8:15:6f:a4:99:04:7d:03:42:8d:e5:
2e:71:dc:e6:31:ca:31:8f:37:94:25:75:af:60:d2:
04:4a:b4:87:d5:4d:67:21:40:d7:b4:64:11:61:ef:
9d:39:5b:47:85:5f:cd:6c:9e:53:f4:c9:33:c5:c4:
5b:66:59:46:80:ca:45:8c:40:ae:eb:02:49:9d:34:
d9:2b:be:a7:46:16:de:9b:7e:70:60:13:ec:6f:0b:
68:f5:dc:b6:70:59:ba:19:6e:03:85:18:18:05:ef:
01:48:37:f0:93:98:bc:db:a5:06:54:05:86:f2:28:
9c:8b:c9:98:be:30:2e:dd:fb:0d:eb:68:82:bd:42:
37:e6:2b:42:25:49:f6:40:b1:7f:c6:b4:61:c5:9a:
3c:0c:bb:ba:69:95:ba:2b:c0:f4:92:5f:eb:d9:5b:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FD:57:55:65:F1:09:AC:52:A4:58:66:A4:8C:BD:14:7E:31:70:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/539EA24C7EBA11EE8C71F15E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.27.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:34:76:bf:5b:85:64:d9:45:0e:4a:b3:54:6d:b5:04:3b:
1b:88:19:0f:7f:d1:49:e1:7b:06:e0:ca:bc:7f:ef:7a:38:0f:
f3:ee:65:ce:d2:aa:a0:58:45:f5:ba:c7:86:92:f4:52:f2:25:
93:8e:6d:e4:1a:a6:45:a0:6f:55:a2:e9:44:ac:01:96:62:cc:
cb:c4:39:dc:01:33:23:55:df:87:96:38:91:ef:75:e1:8f:96:
e2:9d:1f:4c:14:f8:3e:dc:32:3e:a8:5e:83:4e:64:b8:1e:d3:
98:61:92:9b:a9:10:c5:07:a5:2d:92:67:a7:cf:17:be:30:58:
ff:19:d2:e9:d8:45:6d:9f:19:ee:2d:2a:3c:8e:ff:5e:0b:16:
c1:c5:fd:e9:a5:3a:c8:f7:45:05:5b:4d:58:50:9a:40:0e:89:
41:07:2a:ee:18:95:26:ea:99:88:a1:fa:a3:ec:f0:62:6b:ad:
73:57:cf:33:7c:2f:8e:d0:ac:bb:73:54:8a:8d:c0:29:f5:03:
96:7d:04:ba:93:e3:62:ea:af:2a:3f:df:0e:5e:36:18:05:d5:
90:75:c3:23:85:7c:ec:3f:aa:a7:90:ba:21:bb:14:84:9d:1c:
98:ac:1a:cf:1e:84:15:4c:63:c1:76:df:49:9d:0b:cf:2a:7a:
7c:ca:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org