Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C1E66277C11EEB361608B4AD9E6FC.roa
File: 752C1E66277C11EEB361608B4AD9E6FC.roa (raw, json)
Hash identifier: nTk+trcA55JrDJ2WcxCA8jYgy9t+hFyVwmo3JZlJzOg=
Subject key identifier: C7:35:3B:FB:E1:4B:A7:39:69:19:79:87:20:6F:DC:29:B1:7F:AF:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3355
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C1E66277C11EEB361608B4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:09:59 +0000
ROA not before: Fri 21 Jul 2023 04:09:55 +0000
ROA not after: Thu 13 Jun 2024 04:09:55 +0000
asID: 22773
IP address blocks: 154.90.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13141 (0x3355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:09:55 2023 GMT
Not After : Jun 13 04:09:55 2024 GMT
Subject: CN=64ba0517-e71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:aa:b3:15:2b:9a:da:e8:4f:80:ba:a0:a8:
41:94:43:5e:cf:a0:bb:11:68:8a:81:ab:8c:b7:c3:
96:2c:86:6b:e2:75:22:60:db:8a:c5:84:e7:19:db:
a2:8b:57:83:f9:6f:35:85:f8:eb:34:9b:0f:54:f4:
02:09:aa:70:7a:9b:c9:56:18:72:f9:6f:fd:cb:11:
d1:0b:72:8d:b1:6b:02:e9:66:38:0a:a2:e9:c3:36:
62:49:97:42:13:38:59:1a:15:db:99:1a:de:fc:4e:
0e:d0:19:78:96:28:18:c5:a2:be:5c:f5:f7:79:0c:
d8:7f:02:be:8c:c9:8c:29:17:8f:3c:9e:49:9b:a0:
e9:f6:49:7a:07:7a:b5:b3:b8:ca:c4:e6:ce:e6:a5:
ef:7a:29:a6:9c:c0:a4:3e:21:72:1a:98:a1:55:5f:
a9:03:85:72:4f:15:8e:95:30:a7:35:a8:de:ac:b2:
bd:e4:2d:77:48:c9:cf:10:6d:4d:fc:b2:e1:01:c4:
e8:a8:36:7c:94:2d:69:6d:4d:47:72:50:fa:58:b6:
cd:3e:0b:fb:7b:45:a3:18:6f:ff:27:99:00:5e:9f:
8b:07:c6:fd:92:b3:c2:11:f8:f5:81:53:ee:51:32:
71:53:03:6d:31:0b:c6:61:be:58:c0:0a:1f:65:ee:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:35:3B:FB:E1:4B:A7:39:69:19:79:87:20:6F:DC:29:B1:7F:AF:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752C1E66277C11EEB361608B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.4.0/22
Signature Algorithm: sha256WithRSAEncryption
61:93:d5:46:86:fb:c4:fa:41:cf:1f:97:4d:8b:4b:bf:f9:72:
0d:8a:ba:10:9a:52:e8:f1:de:c5:9d:53:68:ee:c5:f6:b9:88:
a0:14:9a:d9:62:a7:1d:4e:08:bd:57:89:98:2d:93:91:5b:64:
f4:e1:ff:94:7f:da:67:0c:df:4e:4b:53:be:3b:cc:7d:bf:ab:
f9:dc:33:a7:5b:a6:9e:f6:6f:41:71:f5:30:b8:83:9f:5f:12:
ea:a7:6b:71:b6:78:9b:a6:50:b6:90:0c:01:c9:e3:e7:fa:0f:
e1:b0:0d:7a:85:8a:86:ef:e5:23:af:c1:19:33:49:ac:b2:96:
d0:2e:f4:0c:6f:25:fb:f5:83:a8:4e:99:dd:de:87:ab:10:82:
85:91:fd:3f:0d:2f:44:8c:11:33:34:7e:3a:72:f8:0d:ea:d9:
97:ff:4a:c7:9c:14:df:45:56:e1:1e:55:4b:3f:d4:82:ee:7f:
54:ff:84:7f:41:3c:d8:0a:12:15:a5:c7:48:2f:73:92:37:e7:
4f:cc:37:de:45:a8:e9:d9:18:11:99:a5:91:77:24:39:85:73:
4c:c2:78:78:a0:92:11:b0:93:e3:3f:2d:05:c9:34:34:a3:25:
c5:aa:94:39:81:2e:0c:96:60:2d:c2:2f:b0:25:f9:08:77:56:
20:ec:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org