Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F31D0AEDB811EE86C93FB6775412E6.roa
File: 71F31D0AEDB811EE86C93FB6775412E6.roa (raw, json)
Hash identifier: dwMPS3STT+f/KVyhn+pFpjGl6o919k+WbatJb0TGDdY=
Subject key identifier: 1D:12:55:97:F7:60:DC:AB:0D:18:23:99:0F:DC:54:D4:B5:73:5E:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A735
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F31D0AEDB811EE86C93FB6775412E6.roa
Signing time: Fri 29 Mar 2024 10:38:14 +0000
ROA not before: Fri 29 Mar 2024 10:38:10 +0000
ROA not after: Sat 04 May 2024 10:38:10 +0000
asID: 142062
IP address blocks: 154.86.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42805 (0xa735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:38:10 2024 GMT
Not After : May 4 10:38:10 2024 GMT
Subject: CN=66069a16-2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:cc:0d:66:99:43:de:52:42:ba:57:be:68:
e5:65:26:3a:ac:00:fd:23:a9:69:35:af:3f:2d:97:
ec:33:fe:c0:3c:1b:b1:d4:6b:ec:0a:f8:e7:6b:2d:
fc:87:94:8d:e4:0e:44:f2:6c:ad:ea:f6:f4:31:6d:
e9:26:3b:5a:9a:0e:23:6f:20:86:5c:ee:52:97:fa:
3a:4b:3a:3e:5a:8c:96:34:08:38:e2:bb:df:94:81:
a3:60:3f:a2:17:2d:fe:15:b1:94:6f:ef:6c:b6:62:
7d:ab:cb:db:ec:3a:27:96:77:d6:ed:b5:95:87:2c:
ec:1a:b8:83:6d:0b:40:7c:a1:f8:b3:43:d3:ed:6e:
d5:06:2e:68:a0:4b:89:30:d9:38:6b:32:4a:ee:88:
2a:d7:90:a1:46:5e:d9:87:3d:6b:53:0b:2d:63:c4:
b9:2b:90:a1:1a:1e:c5:22:76:d3:5c:34:20:5b:24:
b9:ad:d8:74:16:ba:d1:0c:f9:4c:02:7f:58:16:3c:
9c:5e:d2:7d:a4:13:da:7d:de:99:d6:d5:60:37:f8:
e8:ab:5c:f6:26:61:65:4e:6d:6f:8f:a0:bc:f7:4e:
1a:9b:16:fa:db:41:d0:00:1b:16:47:57:e4:eb:94:
16:72:e9:84:d4:47:0e:f1:6e:25:76:0c:c6:33:07:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:55:97:F7:60:DC:AB:0D:18:23:99:0F:DC:54:D4:B5:73:5E:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71F31D0AEDB811EE86C93FB6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
38:33:f6:fa:59:ad:13:0e:43:bf:a6:a5:da:a5:03:43:d8:cf:
36:3b:f4:22:1b:c4:a9:01:f3:08:a1:c7:d4:fb:02:ec:b4:3f:
b0:9b:f5:ed:6d:07:2b:b2:be:4b:3f:ca:23:55:ec:a4:eb:4c:
78:4a:43:b3:72:8c:c7:2c:8d:c3:91:5d:c0:cc:b6:a7:84:2f:
6e:6f:70:dd:95:d1:8b:89:5a:74:ce:fe:01:7f:0a:fe:11:14:
90:75:3c:f3:3a:69:69:08:52:1e:06:8c:10:5c:56:a7:60:2d:
b1:92:16:5e:fe:c9:11:5d:89:2c:3f:b9:fd:8a:17:7b:02:80:
eb:bf:3d:29:96:cb:41:45:b1:32:d8:2c:db:06:3c:bb:8a:c6:
a8:74:0c:1e:43:52:e2:cb:a8:6b:3b:0f:dc:29:2f:a0:c1:72:
1e:9f:d3:34:80:13:5c:1b:d7:5d:10:c4:5b:4d:c0:e7:d8:df:
d2:d2:5b:a8:4e:74:85:09:86:5b:cb:95:83:df:12:9b:0d:04:
c2:7e:ad:1f:03:11:88:44:fb:4e:0a:b5:77:b6:44:fa:52:86:
ce:c7:20:ea:78:17:c6:48:e2:d3:7f:3e:ac:63:54:56:0d:b2:
e2:1d:48:c3:60:6a:86:1f:71:0b:ef:9d:f6:1f:38:28:69:7e:
1e:5d:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org