Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED7ECBEF7BC11EE858B0108017001B1.roa
File: 6ED7ECBEF7BC11EE858B0108017001B1.roa (raw, json)
Hash identifier: 88Ajhf9DV6VEnqg3lc256p3qxjFwFagKbnXVGEFCqsw=
Subject key identifier: BD:9E:19:5E:48:17:74:AD:F8:58:1E:7D:0E:50:2B:23:A0:65:C5:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED7ECBEF7BC11EE858B0108017001B1.roa
Signing time: Thu 11 Apr 2024 04:31:58 +0000
ROA not before: Thu 11 Apr 2024 04:31:55 +0000
ROA not after: Sun 19 May 2024 04:31:55 +0000
asID: 138915
IP address blocks: 154.90.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43773 (0xaafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:31:55 2024 GMT
Not After : May 19 04:31:55 2024 GMT
Subject: CN=661767be-6789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:e9:d3:e4:e5:cc:d4:75:94:83:4f:0e:0e:
88:95:e4:dd:eb:59:b5:0b:41:f9:41:a9:c9:05:2f:
be:22:b4:4b:18:80:d6:98:97:91:d6:1c:2f:b8:53:
28:8a:55:d6:f1:22:cf:48:f8:4d:ec:87:e6:85:e8:
51:5d:28:e5:04:76:63:08:c1:71:5c:6e:17:6a:5a:
a2:b3:1f:1b:14:90:2f:f8:19:66:07:7d:50:0a:18:
08:a7:4c:e7:4d:3a:f2:bb:d8:44:db:75:3a:ea:a2:
fe:d7:1c:e6:0f:fc:df:1b:bd:70:4a:1a:47:8e:2a:
cb:c8:19:e7:79:b6:e2:74:30:95:17:22:28:21:d6:
3b:49:2f:b1:99:35:cc:d9:ab:85:00:42:95:d7:1b:
cb:8a:75:e3:e5:9a:eb:58:6a:89:89:33:3e:1b:aa:
a0:60:15:8a:c4:c8:e3:19:b9:47:ba:71:9a:c8:b0:
62:09:31:18:3d:81:e6:72:2c:dc:cb:79:8b:3f:5c:
10:1a:f2:14:a1:98:c9:e8:d1:0f:ed:b5:99:70:f2:
c0:54:2b:c1:fd:86:3d:30:7f:5a:0c:dd:bc:6e:8b:
88:2c:5f:10:74:d0:8e:2a:fd:9c:31:f0:c6:f0:84:
9a:09:d6:75:18:d2:6d:a2:c9:29:82:b3:da:10:16:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:19:5E:48:17:74:AD:F8:58:1E:7D:0E:50:2B:23:A0:65:C5:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED7ECBEF7BC11EE858B0108017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.56.0/23
Signature Algorithm: sha256WithRSAEncryption
99:68:f3:f2:69:44:66:f0:9d:3e:30:80:b4:81:cb:78:6c:5e:
4b:d7:7d:fc:c3:f8:b3:49:5f:8e:b2:80:86:3b:69:c6:c8:f0:
6b:eb:6a:cc:5c:8f:3b:0f:bd:67:8e:01:bb:87:d7:28:12:ad:
10:73:59:3b:91:08:29:47:6c:b9:9e:8f:04:38:79:da:2d:af:
b2:dc:4f:25:ef:c5:2f:4c:a2:1a:7a:fe:34:48:56:0c:01:3f:
1e:f3:10:56:02:2f:2d:2e:24:42:5f:ef:cd:2d:0d:16:fe:36:
b9:fd:10:bf:21:71:07:3a:a2:85:ee:66:1f:54:79:3a:3f:d9:
9e:3b:08:86:c5:23:65:dd:fb:ef:9d:bb:7a:26:b8:9b:95:7d:
e5:72:d3:89:ea:40:68:93:0c:10:85:7f:1f:45:f2:32:56:92:
ad:a4:95:45:04:ca:42:de:b3:2b:29:1b:f0:67:3d:b0:21:2d:
58:40:b3:36:0d:c4:9c:5c:92:24:be:b7:0f:d9:b2:26:57:14:
d7:7f:c2:58:70:2a:18:93:ef:d8:9f:91:50:43:cb:c5:4f:0c:
6f:dd:a7:06:5a:da:46:f2:7f:e5:89:1d:4c:45:fe:7e:9c:24:
a6:16:98:94:01:cc:a5:12:eb:05:20:d9:66:2a:83:91:a9:20:
0c:54:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:27 2024 by rpki-client on console-fra.rpki-client.org