Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647BE6E0F1A311EEBE1FEC60775412E6.roa
File: 647BE6E0F1A311EEBE1FEC60775412E6.roa (raw, json)
Hash identifier: MOA786VIv6GJk5mzP/bnoBKF/BBlp41FIL3ja/sOcNw=
Subject key identifier: 9B:1E:E0:9E:F3:97:24:51:D9:D0:6F:35:E0:8D:54:75:94:AB:98:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A94C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647BE6E0F1A311EEBE1FEC60775412E6.roa
Signing time: Wed 03 Apr 2024 10:17:36 +0000
ROA not before: Wed 03 Apr 2024 10:17:33 +0000
ROA not after: Mon 06 May 2024 10:17:33 +0000
asID: 210542
IP address blocks: 154.84.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43340 (0xa94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:17:33 2024 GMT
Not After : May 6 10:17:33 2024 GMT
Subject: CN=660d2cc0-7ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:a2:e6:12:9c:3e:5f:7f:e0:e0:9e:04:1d:
e9:a6:41:26:09:c0:9c:d8:61:8d:ea:3f:b8:b8:0a:
9a:fe:2d:4e:07:a4:74:6f:83:ed:c9:3a:3e:0e:bb:
7c:80:7a:22:9e:6b:3e:a0:21:c8:77:c6:af:78:a3:
f0:ef:1e:27:58:e3:a0:b2:2c:33:7f:24:ee:2d:ff:
48:c6:2d:b7:1a:32:0e:be:71:3a:cb:b0:66:e3:15:
f6:1d:4c:0a:a2:1a:27:ea:46:fa:bf:b2:fc:36:ce:
f5:d2:69:fb:8b:02:5d:05:81:86:70:34:62:27:21:
49:29:5d:25:05:0d:f5:30:a9:03:06:72:74:33:aa:
56:11:21:a4:23:e6:3e:20:9f:26:a5:b1:2c:5d:7d:
33:dc:d4:d4:64:1d:a5:c3:1c:a7:39:f0:5a:fe:16:
5f:80:22:d6:86:e1:22:77:5b:93:85:d6:cd:f4:10:
c6:db:25:a3:fa:6b:c6:7c:f3:a8:b5:9a:46:7f:fe:
71:2d:98:b9:e0:e0:56:02:f8:96:9d:69:a3:54:6d:
65:e3:66:40:77:5e:3a:77:49:e4:b5:c9:c5:97:b4:
00:61:29:42:1b:83:49:e8:cc:7c:6f:62:56:39:29:
ce:76:85:96:72:06:9d:1d:a9:85:c2:83:d3:42:5f:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:E0:9E:F3:97:24:51:D9:D0:6F:35:E0:8D:54:75:94:AB:98:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/647BE6E0F1A311EEBE1FEC60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:31:80:81:d4:e0:f2:9e:f8:0c:4c:82:c9:58:bf:6d:cd:d7:
cb:a2:09:f6:f3:b7:fd:cc:93:a1:5d:e3:c8:16:fd:f9:81:88:
6e:4e:b6:c4:de:27:db:90:05:ab:30:e8:f1:fb:36:2c:09:aa:
09:43:f2:1d:98:10:e1:38:74:36:23:47:c9:9f:94:ff:b3:f2:
ca:d7:1d:d5:82:99:8c:69:82:0e:4c:e0:3d:38:f0:5f:53:cd:
34:2c:94:34:30:b6:b4:d2:8f:03:78:fc:9f:37:ee:54:f0:39:
41:d0:9f:b6:f0:83:32:e2:43:5c:d5:97:23:1b:dc:ec:ca:01:
2b:56:af:16:3f:19:55:0c:07:86:12:2d:96:e1:e4:97:8a:0b:
55:9f:8f:e9:3e:78:d4:b4:b3:79:67:e1:99:07:7b:19:29:9e:
a5:f7:14:6c:37:71:0d:28:b8:58:bd:da:de:8b:5b:cc:e9:8d:
aa:1b:d4:b9:8d:bd:c3:e4:56:a7:77:8f:f2:a0:72:f6:5e:05:
4b:80:fb:bd:fd:60:72:3a:7c:62:3e:a6:b2:a0:c1:c4:51:03:
5c:a6:28:b8:88:f7:86:91:46:a4:48:77:31:ba:83:cc:a0:27:
45:b7:f3:1a:fe:77:c3:85:a3:36:c3:bf:4c:96:82:c9:d9:99:
db:90:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org