Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7944F2D0FE1711EE81A3EC56017001B1.roa
File: 7944F2D0FE1711EE81A3EC56017001B1.roa (raw, json)
Hash identifier: rDZ/O1fZAFENY8ZkJw/E4RoPIX6Amr4nZwr4i6VAoFQ=
Subject key identifier: 80:1F:27:72:5F:5A:4C:14:AC:CE:47:41:4E:AD:CF:0D:3D:F4:FE:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7944F2D0FE1711EE81A3EC56017001B1.roa
Signing time: Fri 19 Apr 2024 06:38:47 +0000
ROA not before: Fri 19 Apr 2024 06:38:43 +0000
ROA not after: Mon 20 May 2024 06:38:43 +0000
asID: 15683
IP address blocks: 154.86.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44602 (0xae3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 06:38:43 2024 GMT
Not After : May 20 06:38:43 2024 GMT
Subject: CN=66221177-36fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:fa:6e:39:09:ba:18:58:e4:8a:bd:b7:67:
13:c7:21:0e:14:47:f9:7c:fc:db:d8:b5:6d:ca:f2:
fb:e1:64:f7:58:4f:4f:01:c7:b2:2a:8a:63:cc:ca:
a2:83:3e:ab:f4:56:8f:9d:5e:d9:f0:5a:ba:ab:ad:
4e:69:77:29:9b:e6:9c:56:64:0f:9e:9e:75:67:fa:
d6:34:6b:67:ec:27:97:ea:c3:0a:08:20:e7:8a:41:
cd:fe:b4:f0:d0:1c:93:b4:e2:f1:4b:2b:c8:26:5c:
33:32:94:34:dd:b6:2a:c5:b8:1e:a3:ef:3e:07:a3:
85:5c:43:dc:92:6e:96:6f:78:d7:b9:86:90:67:dc:
f1:78:15:7a:82:b3:86:19:0f:e3:b3:95:08:b4:7b:
05:87:e1:c4:86:ea:83:95:9a:ca:0a:f3:54:c1:7a:
7c:a0:5b:3a:cb:21:84:8c:73:54:95:9a:18:a1:e3:
32:51:1b:a9:da:ed:12:af:3b:6c:09:92:c6:1c:dd:
78:2c:43:6e:bd:bf:28:cd:f7:aa:ad:6e:a7:69:fe:
da:4b:bd:75:36:be:46:1c:7a:17:fd:51:b7:4b:85:
f1:5e:b7:a3:6a:98:d2:8e:62:b1:a3:b2:34:49:d2:
98:76:90:58:35:69:97:60:49:f0:58:45:ac:00:66:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1F:27:72:5F:5A:4C:14:AC:CE:47:41:4E:AD:CF:0D:3D:F4:FE:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7944F2D0FE1711EE81A3EC56017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c6:c8:71:1f:b3:5d:8a:e2:21:d4:cd:1b:72:b7:32:84:6b:
70:79:f9:a0:d2:81:8e:b5:2d:d5:24:9a:77:7b:ad:f2:c1:3b:
29:6b:53:59:8d:13:7d:5b:ae:f8:ed:aa:f0:a2:6a:04:70:26:
8a:fd:eb:e5:98:23:ac:0b:a2:e6:ee:69:a3:b6:7f:21:db:5c:
66:d8:5f:ca:32:a3:49:8f:d6:76:c6:54:fd:49:fd:6a:d1:71:
2b:cd:cb:1e:31:3f:9a:63:b2:23:9f:de:1b:88:e4:29:b6:ab:
b6:be:78:3e:fd:b6:36:d5:9d:c9:82:61:18:d0:8a:dc:98:3c:
cb:86:f2:50:ce:4a:42:cf:fd:72:09:0e:28:2f:7f:c8:f5:cd:
5c:cb:e4:7b:e3:1e:dc:4e:f5:90:7f:95:62:da:d4:4c:e4:a6:
c3:56:e2:bb:ed:ed:95:9b:7c:28:2d:17:a2:f8:98:71:b3:73:
75:91:c4:63:be:89:3a:80:e9:02:ca:81:b3:c1:2d:25:b9:36:
38:ce:f7:fe:2b:03:75:c0:7b:64:53:a5:c4:bd:d5:04:89:ab:
2d:67:0b:6f:e3:77:03:cd:4f:fd:aa:f8:18:bd:41:94:a3:cd:
fd:ed:84:ec:ec:6b:6f:dc:eb:24:d3:da:ab:61:47:c3:39:e1:
2d:ca:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org