Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD465F8F00811EE9171044D775412E6.roa
File: 7FD465F8F00811EE9171044D775412E6.roa (raw, json)
Hash identifier: 4/6H/2FdxI9vgdtzKnCqUADQAjv8s+e+5FIa/2yQF0k=
Subject key identifier: 10:3B:C5:53:BD:7E:D1:30:BA:AE:23:9D:D9:7A:F8:6F:5A:D1:09:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A824
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD465F8F00811EE9171044D775412E6.roa
Signing time: Mon 01 Apr 2024 09:16:19 +0000
ROA not before: Mon 01 Apr 2024 09:16:16 +0000
ROA not after: Sat 11 May 2024 09:16:16 +0000
asID: 138915
IP address blocks: 154.205.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43044 (0xa824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:16:16 2024 GMT
Not After : May 11 09:16:16 2024 GMT
Subject: CN=660a7b63-da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:a6:3d:f2:e8:b4:15:9c:8c:84:fe:fa:65:
c7:3c:12:e7:c7:43:fd:6a:44:21:bf:6f:80:18:04:
7f:ac:28:82:eb:07:94:3f:66:9a:5f:b5:df:61:f3:
36:4e:90:e9:02:67:b3:c3:ea:97:23:36:dd:c3:48:
c0:af:a6:7c:f0:09:c7:a9:e4:13:07:8b:bb:c3:c3:
bd:6d:ae:47:7c:47:ee:54:a1:aa:ad:03:b7:1e:ea:
9c:23:35:df:6a:7c:1f:e4:38:ca:98:e1:01:6d:d2:
b1:8f:b6:bb:4b:f4:80:17:98:16:33:d5:95:58:6c:
94:5e:c1:5a:c1:f3:6e:7f:27:39:a2:f2:fa:95:d1:
4d:65:b1:b8:6f:49:ef:a3:ce:df:8b:6a:54:e6:a2:
46:ba:9b:d9:d8:1c:0d:e7:7e:3f:20:ff:fe:c6:68:
e9:2a:c5:a2:8f:85:9c:d5:23:8d:0b:45:f6:44:e3:
ac:16:cb:70:47:db:4e:a2:5d:70:a0:6a:20:fc:d9:
03:7a:6f:63:7e:83:31:c7:cc:d3:22:ff:ea:b5:02:
fb:1f:c3:6d:41:fc:bc:13:44:3e:50:b1:21:6f:8b:
79:fe:6a:e1:06:be:b3:30:96:c8:95:1a:cc:e6:3c:
ca:33:86:d0:7c:8d:45:f2:17:f4:a2:54:e2:99:58:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:C5:53:BD:7E:D1:30:BA:AE:23:9D:D9:7A:F8:6F:5A:D1:09:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD465F8F00811EE9171044D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e6:95:29:cc:d8:99:bf:e4:38:b1:f7:41:93:34:8e:c0:7b:
6e:bc:25:a1:4d:83:95:53:33:5f:a5:c6:ba:4d:74:84:cb:47:
49:a4:0b:45:42:aa:10:2c:0b:56:4c:c6:78:3f:83:7b:df:41:
96:55:69:05:a4:f3:ae:a7:50:03:17:7b:46:a0:ee:28:bd:8c:
b6:8a:e3:fd:d3:fe:2d:2a:04:db:d7:15:93:da:25:88:c0:34:
a9:21:af:89:8b:25:41:af:3c:2e:cd:2e:45:b8:bd:7d:23:50:
b0:89:98:10:27:e1:7c:50:c1:66:46:59:cb:c2:82:7e:11:71:
4a:6f:bf:c7:1c:b0:be:3a:58:b2:ae:ee:63:6f:cb:49:d9:9c:
82:00:71:e0:88:98:b5:da:40:9f:f1:1c:bc:af:4d:c2:3e:dc:
6c:b1:40:4f:dd:a5:a5:92:9a:8e:9c:36:24:6b:7d:fb:cc:8d:
4b:3a:cd:9b:c1:e8:05:ed:c0:f4:33:af:d9:b9:d5:67:23:7d:
de:c2:16:7f:93:80:00:8e:e5:39:cc:42:b6:14:79:e3:78:c9:
80:b0:7f:ab:93:a8:a6:f1:61:cf:d3:17:35:f3:7d:d9:46:55:
b2:87:dc:94:10:4b:02:55:5b:12:b0:ec:87:72:9a:94:7d:bb:
5c:72:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org