Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D38F7C4F86811EEA30B70F7007001B1.roa
File: 7D38F7C4F86811EEA30B70F7007001B1.roa (raw, json)
Hash identifier: lMSQMcQJ4qFFiDqbdXBCwaIABcFI7+yGQHaeRwVF0+o=
Subject key identifier: C3:29:F9:B5:4D:31:2F:12:76:8F:32:F2:5A:6B:42:4E:F1:B3:75:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D38F7C4F86811EEA30B70F7007001B1.roa
Signing time: Fri 12 Apr 2024 01:03:36 +0000
ROA not before: Fri 12 Apr 2024 01:03:32 +0000
ROA not after: Sun 19 May 2024 01:03:32 +0000
asID: 138915
IP address blocks: 154.90.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43864 (0xab58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:03:32 2024 GMT
Not After : May 19 01:03:32 2024 GMT
Subject: CN=66188868-b983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:03:92:9f:d1:2c:35:6a:d5:f6:2b:d9:d7:
4d:ce:29:bf:42:88:a9:70:b1:1b:10:fb:00:38:8c:
cc:61:05:f6:05:85:fe:ca:bd:33:5f:ee:47:fa:72:
e1:10:d4:8c:91:6e:97:97:8e:20:3d:ad:84:94:e8:
ae:d2:4e:c5:62:1f:fd:a4:09:ab:52:58:f2:de:66:
e3:f7:e0:b2:b3:b9:07:ac:8c:90:17:d1:be:50:6c:
3f:e4:22:4a:fb:32:32:a6:4b:35:9c:b9:9e:38:ce:
17:11:30:87:e7:3d:dc:3e:73:28:6d:ed:3a:32:00:
47:ee:d8:16:ed:b7:c8:01:d0:8b:b4:6c:0f:3b:89:
e2:49:ba:13:75:ed:77:90:55:9d:94:4e:b3:5e:01:
47:1d:c7:3a:fe:2f:d4:0e:f2:2c:16:7c:60:8c:78:
f8:f4:31:bf:a6:79:ae:ef:f1:2c:2e:bd:25:86:c5:
02:e7:45:7a:21:69:4b:88:1b:a4:c0:fa:15:9a:28:
57:1b:bd:f6:9a:db:19:d8:2f:6c:86:61:d3:58:69:
de:69:be:9e:7c:6d:90:d0:3c:c6:7b:d8:ce:d3:ec:
4d:b7:27:5f:c8:3a:93:b7:26:12:62:84:2d:03:bf:
bd:53:50:2f:93:7f:43:f7:33:95:d3:3a:cc:f9:3f:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:29:F9:B5:4D:31:2F:12:76:8F:32:F2:5A:6B:42:4E:F1:B3:75:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D38F7C4F86811EEA30B70F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.56.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:c0:c8:4d:f8:9d:d5:9b:c1:26:be:f5:ba:3f:9c:52:04:7b:
d8:28:9a:78:14:07:24:41:60:b0:59:db:87:51:6f:1c:2e:9d:
39:1a:6b:e8:ae:d0:f2:bb:5c:4a:bf:98:0e:40:d3:78:5a:ef:
c3:d3:da:9a:9e:08:99:04:40:3a:c5:d8:9e:9d:e4:5e:75:f3:
19:13:fc:83:c1:1b:f0:ab:95:ad:a0:2f:c4:81:a2:9d:c5:fe:
99:80:88:6f:19:96:fe:22:c8:78:68:75:e3:82:1d:6d:f4:8f:
8e:c8:62:c3:c1:db:11:8f:b6:e1:29:37:c2:05:c4:b1:3c:32:
e3:39:66:58:97:bf:f6:81:77:c7:f4:a9:f2:f5:2b:fe:ce:a7:
1f:61:a8:66:c0:1c:90:c0:0c:4a:e5:88:ed:45:ae:60:71:1b:
23:ae:ef:20:fb:55:0a:40:22:ab:b4:a7:8d:5a:3f:c7:da:f2:
a3:52:22:a1:0e:43:67:0d:08:d9:54:e6:86:57:85:d4:b8:00:
73:42:c7:41:2e:02:35:4f:90:d1:22:57:33:f5:5b:2a:a8:b0:
09:46:26:9a:ae:05:db:f8:ae:69:ad:2c:42:7b:18:ff:db:43:
c1:5a:54:89:35:04:32:b9:e2:b7:af:ef:ec:4b:4d:5b:07:e7:
91:11:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org