Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A03759AF7C111EE83A3EF33017001B1.roa
File: 7A03759AF7C111EE83A3EF33017001B1.roa (raw, json)
Hash identifier: kVGnpm80qyLxWVgPXodN/tcy6mdfEj5uq6XrXouNT6U=
Subject key identifier: 0E:55:64:0F:21:CE:B3:A8:93:75:6C:61:66:63:8E:F5:5B:0F:FB:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A03759AF7C111EE83A3EF33017001B1.roa
Signing time: Thu 11 Apr 2024 05:08:04 +0000
ROA not before: Thu 11 Apr 2024 05:08:01 +0000
ROA not after: Sun 19 May 2024 05:08:01 +0000
asID: 138915
IP address blocks: 154.90.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43825 (0xab31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:08:01 2024 GMT
Not After : May 19 05:08:01 2024 GMT
Subject: CN=66177034-da7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:50:17:b8:72:26:30:af:3c:c0:c7:3a:8c:
e7:9e:37:79:97:f2:c0:03:b4:ba:95:74:a6:67:ca:
04:63:32:e6:e9:f0:f3:de:dd:9b:b9:1a:56:af:5f:
66:43:da:0c:52:54:54:ec:1f:02:cd:db:73:2f:0c:
36:97:32:45:eb:f0:32:ec:a8:2a:5c:b4:21:6f:db:
85:36:32:8f:ef:4b:13:5f:eb:15:e2:a6:35:54:40:
d7:85:f2:20:c8:9a:8d:b1:24:32:a7:85:34:79:36:
c6:dd:91:0b:41:ab:b1:b8:67:0d:dd:d5:e3:e2:2c:
d0:8f:0b:4f:a2:bd:d0:ef:38:d2:7e:47:38:c2:ab:
2b:3f:58:a4:2d:82:04:66:5a:ff:97:19:6b:40:a9:
ac:56:78:89:64:f5:f7:61:ce:25:58:57:e2:f4:0c:
8e:d6:99:82:d5:be:af:14:1c:69:e7:e7:61:25:e7:
03:38:7f:33:1a:fa:ef:3d:6d:36:bd:d5:96:a2:a5:
4e:d9:64:41:92:69:1e:95:ca:05:83:50:cf:0d:e8:
ad:63:f0:5e:76:87:30:57:39:e7:9c:15:95:b1:ee:
75:56:9c:ae:fa:45:8c:48:e0:9b:03:17:c9:f3:41:
d0:29:4b:df:7e:34:ac:f4:33:63:17:80:5e:d4:98:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:55:64:0F:21:CE:B3:A8:93:75:6C:61:66:63:8E:F5:5B:0F:FB:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A03759AF7C111EE83A3EF33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1a:c6:6f:84:44:65:33:e2:d7:23:7f:b5:68:44:e5:3b:b1:
17:06:03:c3:63:b9:b2:61:59:11:8e:c9:d8:3f:1f:ac:f5:78:
4f:cc:ae:df:ee:d4:b7:0d:56:78:fd:66:e2:77:78:23:6c:a8:
32:a6:ce:14:5b:4e:c4:c4:5a:16:12:a3:42:a8:05:61:cb:18:
0b:75:8a:42:2a:0c:60:ac:06:85:ce:32:1d:de:1a:80:46:6b:
ea:4f:24:2d:73:0d:1c:5e:eb:e3:43:63:3b:3e:82:62:78:1d:
c5:c6:52:53:80:a7:52:8e:88:d2:48:cb:02:f4:df:dc:3c:bd:
60:6d:13:a1:81:10:df:4d:93:61:93:8e:1e:9e:5a:62:ae:27:
e9:21:c5:2c:f5:ab:1e:eb:dd:60:4d:bf:6e:95:47:c9:da:b4:
e4:98:97:f2:13:ed:08:3d:5d:a2:5d:93:ec:58:88:84:95:d3:
f2:9d:b8:5c:0e:d7:28:95:ae:87:fc:93:49:a0:70:d8:af:4c:
5a:db:51:88:1a:2e:cc:e7:e0:d2:18:ba:56:00:3e:f3:e9:4a:
b0:92:61:62:2f:3f:85:c9:0a:58:84:7f:9d:93:06:d5:84:49:
65:21:48:9a:66:22:c4:81:56:bf:5f:39:73:51:31:49:ea:4e:
85:08:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org