Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FAB03AF01011EE85C13D8C775412E6.roa
File: 83FAB03AF01011EE85C13D8C775412E6.roa (raw, json)
Hash identifier: Lc4sAPrdYax4nElFTmW8zRniHOY2VWvkeQprKbuZ3js=
Subject key identifier: F6:87:A6:C0:49:93:65:46:C4:25:A8:7A:92:0D:DC:DB:A5:E9:9D:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A882
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FAB03AF01011EE85C13D8C775412E6.roa
Signing time: Mon 01 Apr 2024 10:13:42 +0000
ROA not before: Mon 01 Apr 2024 10:13:38 +0000
ROA not after: Sat 11 May 2024 10:13:38 +0000
asID: 63139
IP address blocks: 154.203.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43138 (0xa882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:13:38 2024 GMT
Not After : May 11 10:13:38 2024 GMT
Subject: CN=660a88d6-e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:ed:d9:3c:6c:9c:cf:cd:71:15:3e:03:48:
28:58:39:cc:be:0f:ee:b0:bd:84:57:a5:76:7f:90:
35:d3:7e:a0:65:aa:eb:b7:4d:9d:5f:92:de:fd:97:
60:ea:6a:1f:05:58:51:61:1c:b5:07:66:8b:83:75:
d2:c8:3f:cf:b8:50:5a:8d:97:4e:ab:c2:61:ad:18:
09:0a:9c:12:09:71:b4:51:b6:b9:af:4a:f1:15:6f:
6f:d7:6e:8a:ed:ee:5c:eb:70:c8:ce:37:a2:6e:65:
ca:2c:7e:e9:92:7a:12:74:64:06:a3:d6:a5:3c:af:
da:60:7b:f3:92:2a:24:c1:11:62:10:b7:9d:a9:e9:
82:6e:c7:17:89:49:7f:99:50:f4:cd:ba:52:63:55:
2a:a4:08:4a:5c:95:38:d4:02:39:d7:fc:9b:47:69:
71:cc:0b:a2:85:e8:e1:97:aa:7d:bf:fd:b6:14:4b:
5a:14:04:68:77:3d:08:63:2b:2f:a1:64:18:ea:80:
19:5d:9a:4a:0e:78:00:39:80:0d:dc:cb:a5:39:51:
e0:15:68:94:ce:dd:c2:0e:48:4e:8d:35:e6:9c:b1:
c2:fa:11:a5:dd:66:5c:4b:d9:fc:f9:a1:db:a5:31:
f2:e1:c1:4b:89:d2:32:a7:37:29:74:4f:e5:59:8c:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:A6:C0:49:93:65:46:C4:25:A8:7A:92:0D:DC:DB:A5:E9:9D:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FAB03AF01011EE85C13D8C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.165.0/24
Signature Algorithm: sha256WithRSAEncryption
28:82:78:5f:9f:5d:6d:c5:d2:40:8b:10:14:02:f4:4d:a8:e3:
48:c6:18:db:db:0f:09:6d:e0:16:bd:7f:b9:6a:00:ad:71:03:
d2:71:7f:b8:c5:65:14:1f:28:44:f0:08:e6:da:76:44:10:9c:
44:b4:ef:39:49:f5:98:9b:c4:59:76:12:5b:42:91:88:cd:a0:
90:0e:81:0c:5b:7a:07:2b:69:8f:49:5c:f0:32:14:fb:4c:7b:
66:90:21:4d:fd:5d:a0:e5:81:38:26:17:f0:00:48:49:27:9d:
90:f0:49:1e:be:b9:72:ac:86:bc:42:7c:d5:48:3e:12:9a:0e:
d4:c9:fb:32:b4:13:01:8f:5d:a9:89:15:29:c7:ec:d7:c4:65:
5d:87:ba:10:6a:62:e5:e4:83:12:fd:66:3e:8d:84:02:e3:12:
ac:0e:c0:d8:22:4f:24:2b:4b:c5:94:85:65:86:39:75:16:23:
6b:8b:4c:ee:9f:a4:a3:63:a4:79:e0:97:72:f0:dc:7d:20:03:
ee:13:4e:d8:93:91:d3:b8:59:9b:8e:b5:15:4f:0d:81:68:58:
8b:82:59:2c:db:54:b5:23:0b:9b:6d:f9:a8:24:a4:e1:b9:0b:
9c:0b:f2:c8:38:12:3a:e7:78:10:e4:e6:bf:e8:c2:28:6e:9b:
a0:cc:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org