Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F205EFEF86A11EEA520410A017001B1.roa
File: 7F205EFEF86A11EEA520410A017001B1.roa (raw, json)
Hash identifier: su2VF/EWn3xenU9L6pkKqBgT0/5s0NxsC6SnIWfcvDE=
Subject key identifier: 55:F1:E5:09:C6:8A:B0:45:82:88:42:08:42:3E:A4:86:24:F9:E3:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F205EFEF86A11EEA520410A017001B1.roa
Signing time: Fri 12 Apr 2024 01:17:58 +0000
ROA not before: Fri 12 Apr 2024 01:17:54 +0000
ROA not after: Sun 19 May 2024 01:17:54 +0000
asID: 138915
IP address blocks: 154.93.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43888 (0xab70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:17:54 2024 GMT
Not After : May 19 01:17:54 2024 GMT
Subject: CN=66188bc6-d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:15:3f:ed:6a:e7:ec:a9:5a:9a:fd:45:ea:
86:38:d3:21:f3:94:27:4d:22:db:a2:d6:51:d9:8f:
65:2a:34:3b:05:b1:2d:c2:7b:60:57:be:1a:a5:a4:
8d:1d:88:3c:18:3c:50:33:62:bc:43:62:37:9b:53:
44:ee:03:7c:ba:2e:34:c3:fa:9d:b3:34:e3:71:57:
ea:88:00:ae:99:77:67:f8:5d:d9:07:ef:6a:9e:09:
14:0a:4d:60:c8:74:fa:21:a8:e6:40:a7:16:58:9d:
40:48:19:9a:35:18:98:5f:07:93:b1:ae:46:7f:c0:
76:df:02:aa:9d:14:2c:15:b7:40:8f:b6:4e:5f:99:
a8:09:8d:b8:b0:67:ce:75:5d:7e:e2:fc:12:1f:e7:
30:6b:a2:56:06:5d:1b:69:ca:d0:dc:57:e9:29:f3:
b1:78:0c:d5:72:bb:36:eb:9e:74:e3:82:d0:b3:e4:
16:51:6e:30:51:8f:c7:99:1b:38:99:95:2a:eb:59:
ac:6e:c5:90:8d:06:d2:84:b7:f2:94:d9:e1:7d:70:
db:a3:18:08:83:33:ca:83:60:54:90:3d:ba:d9:4b:
69:1c:65:c1:f0:85:16:78:e5:35:a5:3e:ed:58:04:
32:65:64:33:06:0b:f5:a2:75:49:c3:23:ec:bd:cf:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:E5:09:C6:8A:B0:45:82:88:42:08:42:3E:A4:86:24:F9:E3:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F205EFEF86A11EEA520410A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.33.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:74:b8:f3:b9:41:0e:9d:5c:7b:6a:2d:1b:8b:5b:4b:48:9c:
c6:b0:fc:fb:ca:d2:78:ad:73:13:fd:b3:9a:fa:92:b9:30:56:
a4:35:75:a3:c7:b2:1a:5a:45:58:23:f3:f7:72:ec:62:31:c6:
ab:94:04:10:8b:69:99:5d:ab:bc:77:98:f2:71:18:b9:83:6d:
39:12:c8:00:ad:23:6a:3b:04:8b:59:13:9a:c4:f1:d7:56:e2:
5f:cc:5f:42:44:fb:06:10:0b:23:05:ee:b1:40:06:92:9a:f8:
93:0e:44:dd:82:16:5d:c0:87:3f:22:89:27:82:2c:c4:f3:58:
64:98:27:72:69:35:09:b0:3f:d6:19:4e:31:00:60:06:3b:68:
87:01:fa:88:41:98:88:99:d4:d1:6b:7c:3f:1f:7d:97:b5:fc:
11:22:3a:03:e5:77:fb:6c:eb:7c:3f:4c:4d:be:c4:30:ad:5d:
fd:ea:2d:11:2b:d5:e4:e2:99:e8:15:51:8f:d2:88:14:7d:ea:
8d:a8:91:1a:e1:87:fe:05:7e:90:74:23:08:95:f0:a0:f2:3d:
57:da:29:b5:c0:83:3b:95:02:c3:7f:7c:2b:b7:9e:a3:f3:2a:
c2:ba:25:ea:fd:19:4d:3b:77:19:2f:ef:0f:c3:c5:c6:c2:c9:
e6:39:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org