Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA3854F01111EEBEA50592775412E6.roa
File: 59AA3854F01111EEBEA50592775412E6.roa (raw, json)
Hash identifier: H75HrjMPXUj9/4hzyU/Wz+fh4g8HgmQjSbqk1aa7QKU=
Subject key identifier: 62:8C:53:87:83:61:EF:5C:7F:D4:68:E3:FC:3B:E5:1D:FA:E1:49:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A88C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA3854F01111EEBEA50592775412E6.roa
Signing time: Mon 01 Apr 2024 10:19:41 +0000
ROA not before: Mon 01 Apr 2024 10:19:37 +0000
ROA not after: Sat 11 May 2024 10:19:37 +0000
asID: 63139
IP address blocks: 154.203.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43148 (0xa88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:19:37 2024 GMT
Not After : May 11 10:19:37 2024 GMT
Subject: CN=660a8a3c-7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:54:c3:21:61:d8:1a:39:82:eb:aa:0b:06:
b6:0e:49:b1:88:db:6b:66:a9:eb:4e:25:f4:37:ef:
d3:8c:cc:22:db:b0:6d:6c:d4:92:4d:30:3d:da:2d:
45:85:e6:d8:06:54:cd:4f:c3:11:b3:a5:48:ff:fa:
38:0e:97:f9:40:bd:8d:00:f2:95:51:89:d6:98:cf:
ed:cf:89:eb:a7:0b:5a:68:ef:71:e9:c9:ad:aa:49:
f3:de:4f:14:71:3d:7e:b8:52:9b:a3:63:eb:ff:3e:
37:79:7a:b6:31:5a:44:ad:c1:d9:5c:75:19:8f:f6:
22:b2:34:0d:83:05:ee:32:f0:d0:76:1c:97:67:70:
82:c1:3c:9e:22:57:14:ad:56:a0:c0:42:ab:c4:d2:
57:59:c5:e6:a7:81:85:38:d7:54:bc:02:6f:58:d3:
a6:cd:18:8a:19:92:37:7e:98:7c:30:1b:5e:01:f1:
d2:54:45:fe:f2:17:a9:2d:73:17:37:4e:46:6a:c2:
a0:97:d1:2c:a0:fe:78:f8:4d:49:fa:dc:32:24:9c:
d1:82:44:36:a4:23:71:ba:64:ce:88:9e:2e:61:a1:
44:9b:ed:79:d3:4b:ae:ad:7b:02:43:5f:27:48:0d:
71:cb:1e:89:c9:6c:c1:12:08:54:59:d7:5c:ac:56:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:53:87:83:61:EF:5C:7F:D4:68:E3:FC:3B:E5:1D:FA:E1:49:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA3854F01111EEBEA50592775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:76:e7:c5:1c:62:49:29:e8:27:d1:18:5d:e4:15:4d:ec:c0:
16:0b:ad:a0:f7:e2:f3:74:2d:15:70:2d:50:54:4e:7c:b4:6d:
11:e0:94:7e:90:7b:dd:9f:c2:63:e6:ea:83:61:14:6e:8b:b7:
26:e9:f4:de:df:41:ee:a5:c9:b9:b2:81:79:5a:0f:8e:79:da:
28:d7:fd:12:46:98:5f:12:93:5c:69:ed:ba:59:1c:e8:dd:71:
17:01:de:ed:9f:da:8c:1c:82:36:55:35:98:78:ed:78:4b:65:
9f:62:57:26:50:e0:71:c7:63:80:bb:86:bf:12:43:02:36:82:
77:a0:7a:53:dd:71:88:46:6c:91:9b:11:35:ed:44:75:13:61:
da:a5:a3:15:8b:e1:bf:77:69:8f:8a:ba:aa:c4:31:ca:86:56:
7f:99:fe:3c:fa:93:07:58:dd:85:fc:1a:1b:fc:33:2e:40:ed:
ef:15:f8:15:f5:c8:7b:6a:2d:88:4c:bb:02:48:ac:40:17:7e:
34:c2:f9:28:46:3a:54:28:6e:00:99:7c:30:8b:71:b7:e6:ed:
70:39:b0:d3:29:73:a3:d1:da:4c:4b:57:0b:4d:4a:25:57:39:
17:f7:1a:45:84:a2:71:ba:76:71:97:b5:f8:1f:ec:3f:b3:60:
2c:61:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org