Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6062CDB0F86C11EEA1710D19017001B1.roa
File: 6062CDB0F86C11EEA1710D19017001B1.roa (raw, json)
Hash identifier: T+k4SmlDFgXS1wX4ZOlH6Ol+UDnQvsaxg8XalRbTxxM=
Subject key identifier: AA:A0:2B:44:9F:7D:AC:CA:11:20:46:D1:78:4D:CC:D7:B6:6E:E7:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6062CDB0F86C11EEA1710D19017001B1.roa
Signing time: Fri 12 Apr 2024 01:31:25 +0000
ROA not before: Fri 12 Apr 2024 01:31:22 +0000
ROA not after: Sun 19 May 2024 01:31:22 +0000
asID: 138915
IP address blocks: 154.93.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43910 (0xab86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:31:22 2024 GMT
Not After : May 19 01:31:22 2024 GMT
Subject: CN=66188eed-cb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:c3:45:bf:7b:59:38:b4:da:ef:e5:3c:57:
d3:d7:f6:fd:58:72:22:d5:30:1b:70:fa:3e:7d:05:
74:d2:08:8e:92:f1:bc:e2:e4:ea:b8:4f:bb:d7:da:
22:70:cd:33:a3:e1:e7:d8:13:e6:e5:7c:9c:5b:24:
8a:44:68:15:ae:78:5b:fb:37:88:be:b1:d4:ea:03:
46:d1:1a:1a:a1:6f:6e:bc:69:c1:c0:4a:6c:2b:10:
6e:40:3f:d2:19:11:d7:ee:a1:fb:d6:4a:52:83:49:
5a:20:d6:d2:c2:bd:51:27:9b:fc:fc:d0:6f:0b:b5:
91:a2:e0:c0:b8:88:ab:f0:33:5c:7d:17:cf:78:9a:
37:b9:d9:70:50:ce:43:ea:9e:8d:98:84:d1:e5:42:
81:3f:f6:5b:ad:e3:1b:07:7f:ce:aa:02:50:64:69:
3c:74:4d:ac:8d:e7:f5:82:95:29:a6:0d:b7:4d:ee:
5e:af:f2:24:d9:c6:f4:c8:8a:b3:d5:5a:fe:f7:a6:
fe:02:14:b7:60:e0:61:5c:3d:01:24:d4:0e:87:f1:
58:20:14:70:d2:cd:35:ed:eb:e1:df:f9:97:a9:2c:
d2:23:62:71:88:fd:c4:2b:29:2b:2c:32:0e:d9:6a:
fa:99:bc:53:57:52:ee:58:93:61:8e:c4:fa:70:38:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:2B:44:9F:7D:AC:CA:11:20:46:D1:78:4D:CC:D7:B6:6E:E7:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6062CDB0F86C11EEA1710D19017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d9:b5:39:43:aa:ff:43:be:7c:4c:bf:4f:3d:fb:65:b4:c6:
7a:51:5d:63:68:65:2c:60:b0:59:21:8c:84:39:3e:cf:2a:45:
f9:c5:14:50:5f:7f:7a:41:0f:ff:e8:1e:39:10:b6:f0:61:1b:
1c:e4:36:30:5e:b3:3b:ae:16:60:37:5e:2f:51:d5:f0:5a:ec:
b4:6a:3a:85:4e:1f:32:56:4b:ee:ef:9f:8a:ce:3b:e3:90:4b:
22:c3:49:11:83:f9:06:9f:4d:a8:24:eb:c6:b8:98:95:51:0d:
d0:ab:f3:a4:0a:67:ac:2d:f8:47:5d:cf:02:78:dd:0b:e3:3a:
28:82:f1:b7:60:ed:4e:42:91:01:da:4d:55:24:2f:eb:8e:a6:
c4:f8:9a:c2:03:94:bb:bc:0d:14:b9:b4:d8:c8:a1:0c:4a:cf:
41:1c:2d:61:61:55:35:9d:2d:df:da:89:e7:cc:d7:49:7f:0a:
80:87:2f:53:ec:4c:db:d6:eb:bc:bf:55:6c:9d:ec:07:c1:29:
88:3d:7a:34:d5:e9:c2:fe:c4:a7:55:a7:82:c7:48:f8:a6:41:
cf:8f:9b:12:cc:59:69:42:45:50:2b:71:b5:a5:18:33:e5:9a:
a5:4c:a7:47:cc:38:b8:7c:1c:26:13:91:ca:49:ca:21:8a:b9:
6b:7c:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org