Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5DD1ECF7C711EEBB106961017001B1.roa
File: 7F5DD1ECF7C711EEBB106961017001B1.roa (raw, json)
Hash identifier: zgrSF5h2c7BcfAUCBS4AogiBKPxs8gS9ZmmfQ4AZ6Ss=
Subject key identifier: 00:C0:C5:76:2F:5C:37:61:55:8C:B2:C3:92:7D:C8:64:2B:3B:D8:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5DD1ECF7C711EEBB106961017001B1.roa
Signing time: Thu 11 Apr 2024 05:51:10 +0000
ROA not before: Thu 11 Apr 2024 05:51:07 +0000
ROA not after: Sun 19 May 2024 05:51:07 +0000
asID: 138915
IP address blocks: 154.93.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43849 (0xab49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:51:07 2024 GMT
Not After : May 19 05:51:07 2024 GMT
Subject: CN=66177a4e-5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:7f:a5:37:aa:04:e3:0e:fb:49:31:3b:b2:
ce:f7:8a:f8:57:82:89:12:fb:55:a2:c2:1b:ae:34:
05:f1:a0:55:a8:c4:0c:8f:35:80:5d:bb:b8:cf:de:
c7:e6:6c:d8:70:cd:0c:83:70:f1:30:06:bd:d1:91:
a4:95:4c:8e:9c:21:0e:ee:64:f5:29:6a:0a:d7:d7:
b9:7d:43:bc:3d:04:4d:f4:ef:05:f8:7d:5b:9f:a4:
3d:6b:40:20:9a:f2:4d:a2:7b:cc:e1:91:9f:2d:42:
9f:fa:c0:52:3a:fe:6a:8e:9b:88:5e:62:a6:6f:f1:
d0:6f:e0:68:40:81:b7:b9:e1:a7:19:90:ac:db:f3:
c0:23:5c:24:27:ca:8f:99:a2:fc:d3:f3:53:0e:ed:
21:a9:4a:ae:d5:0c:24:a3:45:d5:12:4e:46:12:65:
da:f6:65:1e:44:11:ea:c2:e5:8a:f4:7a:48:0a:28:
85:71:f7:b4:27:2b:73:cb:65:91:e8:91:77:2f:6d:
b1:29:75:6c:ed:2d:0d:02:c8:29:48:0c:f7:b4:36:
0d:af:99:79:87:fe:b3:0e:9f:22:3d:b4:2a:44:87:
4e:0b:b1:ee:50:de:09:78:c7:d6:48:9d:8c:67:31:
be:75:15:5f:f6:53:10:10:5d:c6:51:69:c2:4b:60:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:C5:76:2F:5C:37:61:55:8C:B2:C3:92:7D:C8:64:2B:3B:D8:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F5DD1ECF7C711EEBB106961017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3a:12:c5:77:f5:8b:69:01:ad:16:38:ef:88:86:69:12:38:
15:13:a1:1a:1c:08:55:3e:d9:ae:88:1a:9c:b8:7d:a4:9b:01:
80:b9:09:0d:45:d9:27:ab:b4:23:74:e7:df:f1:5b:5f:55:4a:
5a:2f:f8:9c:e6:59:98:fd:fe:66:81:da:0a:e5:b6:51:1c:e9:
76:67:00:e7:18:13:44:68:d7:18:9b:9a:e3:98:21:63:fd:b3:
1f:99:a7:34:e4:a0:06:2c:ad:12:dc:81:1c:1f:86:64:83:4a:
de:5e:71:d6:33:26:b6:fb:14:c6:4a:5b:f7:af:f8:6f:36:41:
61:36:62:d9:ab:5f:ea:58:f5:b9:b5:86:d3:cd:07:07:b6:1b:
f0:67:8e:05:22:bc:db:f4:d3:9d:61:94:83:28:bb:58:1d:91:
1e:d0:2a:6a:82:f8:5c:e4:2a:b3:cf:00:ca:35:55:f3:5a:ac:
7f:ff:91:e6:f3:81:db:be:fc:f7:51:0c:bc:97:1e:cd:75:15:
68:b5:4f:b5:ed:ee:7c:ad:c6:a0:cc:87:92:a8:1a:b2:18:bc:
0d:41:fa:07:47:c1:93:10:a8:68:2a:d6:54:86:58:31:2d:6f:
35:f3:97:5b:af:9a:a0:50:9d:cd:9e:81:d0:00:dc:f4:30:ca:
ed:29:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org