Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8463ED64F7BF11EEAB687F23017001B1.roa
File: 8463ED64F7BF11EEAB687F23017001B1.roa (raw, json)
Hash identifier: U3r2geTjVkQA25V8fNZmW0FhZAQKDaOqoHzu5bOseCk=
Subject key identifier: 27:D6:4F:35:DE:00:1B:9D:CD:90:01:CC:1D:DB:8C:82:00:61:17:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8463ED64F7BF11EEAB687F23017001B1.roa
Signing time: Thu 11 Apr 2024 04:54:03 +0000
ROA not before: Thu 11 Apr 2024 04:53:59 +0000
ROA not after: Sun 19 May 2024 04:53:59 +0000
asID: 138915
IP address blocks: 154.93.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43805 (0xab1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:53:59 2024 GMT
Not After : May 19 04:53:59 2024 GMT
Subject: CN=66176ceb-241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:2d:74:d6:55:71:af:c9:29:2d:2a:48:ae:
02:37:d9:1c:9a:0f:fe:b9:44:9a:42:e2:03:95:fd:
db:73:63:77:d3:bc:55:1f:38:77:3e:f6:23:bd:3b:
83:2f:65:4b:4b:5a:fb:c7:00:38:3a:cf:9e:e5:fd:
24:e6:a1:0d:cd:c8:d8:50:51:c7:c2:d0:55:c2:59:
b5:59:a8:d9:36:7f:32:79:af:12:84:af:92:06:43:
2a:de:43:ab:a0:b2:59:dc:0d:f2:56:7b:2e:35:84:
59:ed:32:4a:31:88:8a:ea:3c:fd:23:8f:d0:46:74:
7b:ff:4a:1f:3f:0e:2f:49:52:d0:67:15:da:3d:d7:
63:a8:9d:6a:3c:99:cb:67:f1:98:d2:b8:c3:52:53:
43:dd:33:be:eb:71:fe:dc:d1:c3:8d:7f:d6:92:b6:
be:b1:18:fb:86:80:a8:a3:43:3b:f2:22:b3:41:11:
04:d1:65:e2:27:e7:a8:6a:99:92:35:92:d7:ae:1c:
6f:1e:08:e1:fe:a9:e2:53:c1:4a:2e:b0:a1:df:02:
22:72:49:91:60:19:07:10:1b:ef:29:43:5d:c1:99:
fa:32:7f:19:48:75:86:55:21:89:d0:be:94:20:e2:
d9:3e:3e:2d:c6:1e:e7:36:4c:77:6a:b5:4d:ee:de:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:4F:35:DE:00:1B:9D:CD:90:01:CC:1D:DB:8C:82:00:61:17:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8463ED64F7BF11EEAB687F23017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.54.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:39:7e:f3:9a:67:79:ac:1d:05:08:14:b3:f7:b8:b3:23:89:
26:b0:93:08:6e:14:4f:a1:76:99:70:da:24:7d:2b:93:53:21:
7a:4c:57:7a:f6:bf:77:fe:6b:f7:82:f4:27:7f:99:01:a0:59:
10:90:4c:b4:55:9c:7f:d7:1a:0e:e9:98:28:3f:c0:3c:26:52:
1f:13:93:1a:ab:0e:29:36:8c:79:34:38:f5:2a:d5:f8:3c:fe:
a4:c5:b5:f8:6f:7c:07:ed:72:45:87:6f:b9:4a:b5:a0:c2:13:
69:eb:b7:f5:5a:f6:5a:0c:15:4f:e2:e5:fd:ec:d4:f7:22:89:
ee:1a:f9:c2:a6:cf:57:0f:9b:fe:8e:48:3f:32:11:da:03:1d:
f6:08:81:4c:71:f3:d8:4f:2e:90:6a:5a:e7:02:c9:00:88:3a:
ea:8a:00:72:92:d5:2d:2b:08:dc:e6:9c:6a:5b:ba:c3:a1:e2:
eb:28:b4:b1:13:2e:78:25:8e:d5:4d:69:39:b5:83:64:37:c6:
e4:ea:ba:ec:8e:82:53:9b:ea:a6:b3:ec:ed:a6:3f:33:31:1a:
50:03:7f:f3:86:1f:76:87:08:2b:04:22:19:55:52:5a:d5:10:
ac:48:8c:7f:45:d6:6b:91:0f:b4:27:44:9c:f4:d1:a8:59:7f:
d7:fb:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org