Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B01B8EF01211EEBFB30F9C775412E6.roa
File: 85B01B8EF01211EEBFB30F9C775412E6.roa (raw, json)
Hash identifier: VzhL/GeB1qRVElZKkiDiDGwtEM0qliHZ9TYZHPTHGC8=
Subject key identifier: 22:26:6A:E3:AC:70:EC:12:14:FD:EF:03:1B:4E:1C:E4:28:10:6F:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A89A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B01B8EF01211EEBFB30F9C775412E6.roa
Signing time: Mon 01 Apr 2024 10:28:04 +0000
ROA not before: Mon 01 Apr 2024 10:28:00 +0000
ROA not after: Sat 11 May 2024 10:28:00 +0000
asID: 63139
IP address blocks: 154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43162 (0xa89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:28:00 2024 GMT
Not After : May 11 10:28:00 2024 GMT
Subject: CN=660a8c34-ff23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:c6:40:1d:ce:27:9c:63:9f:65:5b:01:57:
cd:17:7f:0a:80:56:5e:5f:65:1a:95:17:16:8a:28:
c3:f1:48:3b:31:82:9c:1f:16:66:5c:3d:20:51:fb:
27:3a:bc:ab:62:f2:f1:41:43:2f:c9:7a:6b:2a:0d:
ec:b5:1e:8a:5b:ad:27:1e:32:75:a4:5d:55:2c:7f:
85:14:71:c4:77:ab:fc:99:d9:b3:12:14:23:52:7c:
3d:a3:f3:fc:2b:b1:34:42:f6:22:35:0e:ac:dc:53:
b5:71:27:e9:a8:33:82:64:7c:81:e1:a1:dd:6b:83:
e0:60:61:ab:8a:d5:29:2f:e8:e6:37:ad:e6:46:af:
9a:ab:9b:88:62:70:32:64:67:03:57:ab:c8:1b:24:
a4:34:7f:de:65:02:0f:a1:f1:83:68:7e:3e:4c:aa:
40:01:66:61:55:64:33:35:b8:03:e2:b1:76:a3:c9:
03:e8:13:bb:0e:43:57:07:28:c5:56:30:58:eb:56:
53:db:12:67:8b:17:fc:b3:42:6e:f8:27:06:bf:ec:
ce:22:67:8f:e3:db:2b:80:f7:a2:91:08:f5:f8:b7:
ce:58:2b:52:51:40:87:b7:65:84:15:38:70:bb:71:
f5:ba:20:8a:90:1d:34:54:a3:66:ca:c8:27:a8:03:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:6A:E3:AC:70:EC:12:14:FD:EF:03:1B:4E:1C:E4:28:10:6F:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85B01B8EF01211EEBFB30F9C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:74:31:59:f3:78:ca:35:ea:39:54:ab:37:dd:0a:43:a1:9a:
6f:2f:45:96:1f:07:83:82:d5:e8:36:33:9b:9e:9e:b7:26:d0:
7b:c7:7c:6a:c7:e0:31:37:79:b9:62:b4:fc:1c:71:3a:67:53:
b4:01:08:54:64:d0:ab:97:3c:f1:6d:54:8c:f4:84:89:40:3b:
73:7c:d3:09:95:49:4d:b3:45:61:e1:0c:a4:a7:6b:b8:ab:51:
17:9d:04:ee:b4:21:3f:ac:0f:7a:1d:98:9c:71:fe:9f:9b:ba:
79:8c:1e:7a:81:0d:0c:9c:19:8c:0e:52:d4:b8:e5:c8:6e:d3:
f9:49:79:24:43:84:e0:88:3f:2a:12:52:27:ba:c8:41:6a:70:
95:60:1c:6d:a2:4a:79:ce:cc:d6:e9:a8:e9:02:85:5d:bf:c8:
4a:f4:12:1b:15:94:c2:f1:b2:9a:32:14:a3:86:15:c3:e0:13:
1b:5d:6b:70:2a:14:e9:f9:8d:6d:ad:27:39:28:56:9c:5f:e0:
97:64:3b:dc:11:de:61:74:d2:90:b3:71:59:97:42:7e:37:7b:
8f:04:05:1e:6e:0c:4d:ce:00:38:bb:c5:20:50:19:36:bf:50:
8b:e5:ad:54:cb:a3:97:8c:fc:03:08:e1:d7:f3:24:93:e7:dc:
dc:d4:0d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:30 2024 by rpki-client on console-fra.rpki-client.org