Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A238D4FBAB11EE8D3E7B1C017001B1.roa
File: 68A238D4FBAB11EE8D3E7B1C017001B1.roa (raw, json)
Hash identifier: bo5xTC7BcvUPKmhNjMG3NTebwL6qZk+7ckAfeTp0V9k=
Subject key identifier: 5B:11:2C:2D:11:45:D6:45:72:CC:EF:A7:92:77:00:CF:08:68:BA:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A238D4FBAB11EE8D3E7B1C017001B1.roa
Signing time: Tue 16 Apr 2024 04:40:11 +0000
ROA not before: Tue 16 Apr 2024 04:40:07 +0000
ROA not after: Thu 30 May 2024 04:40:07 +0000
asID: 63139
IP address blocks: 154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44467 (0xadb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:40:07 2024 GMT
Not After : May 30 04:40:07 2024 GMT
Subject: CN=661e012b-d791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:75:b1:12:fb:3d:fe:7b:47:db:7c:9a:f1:
11:c4:b1:2d:a7:09:89:df:1c:ff:ac:75:ca:1b:3a:
01:0c:2c:d4:36:0c:65:b8:9f:f8:1b:46:48:db:ea:
de:62:45:4d:03:6b:83:e8:e6:54:ea:1d:d5:88:63:
30:3c:60:bf:77:65:88:55:a7:d8:94:12:f2:9e:18:
b7:c1:95:f7:11:f2:88:b4:c2:91:38:f6:e2:48:45:
4b:cd:b6:0e:1d:c7:2d:0f:29:bb:94:d9:3e:d9:51:
44:73:54:9e:27:0d:87:d5:51:4a:3a:d2:4f:fd:ff:
82:ea:9e:3a:94:00:1a:b7:56:ed:22:37:1b:8f:24:
e1:ab:d1:6a:ca:5d:56:cc:34:d5:6e:cd:46:d8:6d:
a7:35:0b:6d:4f:b5:60:18:b3:77:1d:16:17:43:6d:
67:28:3b:69:a1:c6:6a:e8:98:88:0d:be:d0:34:ef:
86:45:d1:46:06:5e:91:85:99:75:ca:5f:3f:4b:e1:
f0:f3:f9:85:5c:a9:65:1d:0e:84:ca:b6:1e:db:19:
92:40:2d:02:1a:93:27:b9:ec:ba:1b:0c:4a:7f:19:
58:72:99:83:19:0a:47:f5:b4:8b:07:94:13:9f:e1:
9c:b8:52:5e:7c:f0:20:dd:a7:07:86:18:64:63:4b:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:2C:2D:11:45:D6:45:72:CC:EF:A7:92:77:00:CF:08:68:BA:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68A238D4FBAB11EE8D3E7B1C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c9:49:52:27:3e:db:b6:9e:f1:2b:bd:57:ef:bf:dd:74:9a:
fa:03:34:48:bc:d9:30:8f:e9:c0:58:16:79:16:fd:8a:ac:e4:
93:88:b5:6b:56:16:ea:c6:aa:bb:cc:d6:bf:03:6a:f6:8a:2e:
94:16:98:e0:50:8e:2e:13:72:f5:f4:8a:5d:1b:58:51:5c:42:
88:69:4c:9a:06:48:0f:c5:90:1b:5c:58:79:13:d6:0c:16:1f:
1d:35:09:7c:92:14:93:8b:ff:23:4e:15:f5:c3:3d:25:0f:c6:
77:c5:70:58:19:2f:bf:18:20:1c:19:9c:73:9b:7c:b0:68:b6:
39:9e:1c:63:77:67:94:1a:f9:98:a9:45:88:40:31:c8:39:aa:
09:28:53:eb:63:5f:00:63:15:b9:77:14:d2:e3:86:16:2c:6a:
ac:83:f0:99:05:ea:44:eb:87:fe:fe:0f:cc:62:80:e7:35:86:
5b:4b:b7:a7:1c:54:ea:25:65:53:b8:39:69:66:31:9a:06:d5:
2c:62:fa:6a:09:71:b4:a7:43:5b:5e:54:2f:c2:5f:8a:b9:d3:
74:42:b7:4a:3c:95:99:9c:13:7c:e0:e5:53:69:b9:46:28:da:
4a:fe:02:33:41:d1:cf:96:2f:a9:a6:90:3a:20:8c:b1:ed:52:
d2:aa:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org