Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46E78CF00A11EEB08E095D775412E6.roa
File: 7D46E78CF00A11EEB08E095D775412E6.roa (raw, json)
Hash identifier: jWp5d3e+hhbGVZw8u9eFG9zZQUTeyIYPd7A34kyuO1g=
Subject key identifier: 79:D3:2A:28:AC:98:C6:94:18:18:1D:9F:53:9B:B4:8C:BA:B9:33:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A83C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46E78CF00A11EEB08E095D775412E6.roa
Signing time: Mon 01 Apr 2024 09:30:34 +0000
ROA not before: Mon 01 Apr 2024 09:30:30 +0000
ROA not after: Sat 11 May 2024 09:30:30 +0000
asID: 138915
IP address blocks: 154.205.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43068 (0xa83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:30:30 2024 GMT
Not After : May 11 09:30:30 2024 GMT
Subject: CN=660a7eba-9b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:d9:0c:f0:18:5e:d4:33:8b:98:45:83:8b:
99:29:16:56:3a:a7:47:db:c2:62:e0:d5:aa:49:d8:
7e:5a:e9:4a:a0:f6:88:80:67:99:80:76:19:51:e4:
36:d5:d2:9c:24:19:41:69:5e:b7:70:ae:e5:76:0e:
f9:cb:ea:4c:f1:9b:61:de:d8:ee:03:36:3b:e1:7c:
62:f7:58:db:01:a6:10:b6:26:e4:10:55:2c:4b:4e:
fd:f4:a1:10:e9:63:40:67:07:bb:bc:f7:8a:13:a7:
cd:ed:78:fc:bc:68:44:75:d6:d5:b2:64:31:42:8f:
52:1b:d3:bf:bd:c0:f8:93:ed:98:8d:b5:ee:72:cc:
cd:f3:57:a5:b8:94:46:22:b7:26:d8:15:01:06:54:
2a:d0:9a:43:69:4d:29:1a:22:3a:5d:1a:09:e8:b6:
d6:2d:a4:27:eb:6b:ad:a0:6e:60:bb:72:a1:20:47:
9a:ff:fe:41:67:2b:b6:5d:8a:32:e7:a4:21:7f:f2:
23:d7:b4:a3:e2:02:ef:2a:88:08:f8:2f:72:f4:75:
2c:50:46:45:fb:b4:50:bd:a3:5f:6a:e3:9a:cd:08:
1a:b5:81:ea:76:00:0b:25:b3:a5:d0:fb:47:97:de:
dd:42:d9:51:1e:4f:e1:40:24:75:73:07:b3:46:ae:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:2A:28:AC:98:C6:94:18:18:1D:9F:53:9B:B4:8C:BA:B9:33:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D46E78CF00A11EEB08E095D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cb:90:ed:48:b2:ba:65:29:ea:bc:6c:66:66:b3:da:96:8c:
f6:99:61:cf:7e:8d:2e:65:59:ed:d7:a1:55:d5:c6:c8:90:19:
e9:1b:ca:6c:2a:a0:ac:3a:cb:1d:c2:5e:00:f8:7b:31:04:f2:
72:f1:68:26:ee:92:94:87:cb:6b:b9:21:fc:4b:96:97:58:65:
63:b3:72:1b:80:8d:f5:63:b1:6d:b9:5d:65:06:12:27:53:dd:
35:e1:ef:e9:5c:b2:38:5e:f6:e2:0e:94:b5:e1:f3:05:ab:33:
fc:e3:e3:04:40:02:9c:74:e1:cf:25:4c:87:80:51:f6:12:ff:
87:db:e7:87:51:3a:9d:2b:93:4c:2a:04:14:54:0f:79:c8:ee:
08:ec:72:e4:2e:8b:10:09:dc:2c:48:7b:42:5e:bb:1e:53:d1:
d3:d0:45:1e:77:50:eb:c8:be:b8:d6:a2:60:93:68:81:19:15:
1b:c0:5f:59:e4:c8:5a:ef:1b:f7:52:3f:eb:fb:d2:44:1d:c8:
a9:4d:b6:8d:30:b3:e9:9d:eb:77:98:db:e6:32:fd:9f:d0:ed:
e8:25:3e:dc:fd:02:0e:b5:c6:57:10:de:03:a8:20:47:7b:e1:
64:b2:26:33:46:f9:f5:c4:b0:33:91:44:f2:58:94:fa:27:6d:
03:98:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org