Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/868A8F22F00C11EEBDB8F16C775412E6.roa
File: 868A8F22F00C11EEBDB8F16C775412E6.roa (raw, json)
Hash identifier: kvocW1TOzpupVR+9GIVYVsEqOsESkb9UHI6m0P/5aWw=
Subject key identifier: D4:4D:EB:CF:B0:86:AE:6D:BF:97:37:2A:6B:B1:5F:EB:CE:72:1A:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/868A8F22F00C11EEBDB8F16C775412E6.roa
Signing time: Mon 01 Apr 2024 09:45:08 +0000
ROA not before: Mon 01 Apr 2024 09:45:05 +0000
ROA not after: Sat 11 May 2024 09:45:05 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43092 (0xa854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:45:05 2024 GMT
Not After : May 11 09:45:05 2024 GMT
Subject: CN=660a8224-1996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:2b:45:41:cd:33:a5:3e:68:09:01:cc:23:
59:c7:75:07:aa:54:00:47:9e:6d:08:98:9b:09:0a:
95:e7:ca:1e:f9:2c:2d:1d:8e:c2:7c:76:5b:ca:47:
9e:00:bd:79:1a:37:94:23:f8:2b:52:1f:eb:fe:16:
3a:e9:d8:30:57:88:f5:80:97:d8:93:11:34:a9:e6:
28:37:eb:e1:04:27:99:36:e6:c6:2d:e4:f4:3f:2b:
06:0b:9e:b0:6c:3f:93:08:69:b6:c3:c4:be:49:7f:
ea:bb:08:db:dc:58:30:c4:ff:04:7d:16:98:26:6c:
c2:81:7f:da:b0:23:e9:5a:94:be:83:24:5b:6d:51:
90:96:a6:ab:af:30:21:f4:79:9d:cb:1a:4a:98:c3:
96:87:da:73:18:d8:73:5d:35:01:4d:47:85:ed:a8:
11:11:cd:6a:bd:42:2a:4f:96:ff:01:86:74:c8:27:
0e:7c:a9:52:89:f5:4e:0f:dd:ed:b0:ad:2c:ad:5d:
2b:43:5e:65:2f:ba:6e:75:c7:10:80:46:55:fd:68:
64:68:15:fa:e5:f6:74:a1:93:6e:ff:4e:8a:1f:e9:
9a:87:30:91:58:ab:02:b1:a4:ce:49:fe:c2:91:40:
f1:d3:1c:5b:0c:af:e9:08:53:f4:ae:f9:c9:de:43:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:EB:CF:B0:86:AE:6D:BF:97:37:2A:6B:B1:5F:EB:CE:72:1A:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/868A8F22F00C11EEBDB8F16C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0/23
Signature Algorithm: sha256WithRSAEncryption
26:13:fa:5c:04:14:63:1f:73:62:4b:0d:cf:88:11:30:08:aa:
93:b5:b4:76:94:36:9d:33:85:77:09:fd:56:5b:fc:e6:09:2b:
86:f1:ab:16:e5:72:64:b7:54:db:f2:e3:be:71:a9:4e:97:f1:
75:85:0a:2b:15:00:fd:c1:65:b4:f9:b7:a5:59:1d:49:6f:1e:
fd:ba:03:7f:91:3c:08:51:38:7a:8f:3d:bf:1c:a2:8e:b4:be:
cc:a2:e2:b5:b4:06:5c:e9:f6:0c:c9:57:9f:47:d8:0a:fb:20:
79:bf:d7:c6:ee:99:90:65:c5:f6:85:05:37:d5:6a:7a:74:4a:
02:47:30:ba:fe:0d:78:c9:61:94:b2:26:0c:93:bf:a1:26:e6:
7c:c4:9f:b0:e3:25:bc:20:97:4a:2f:4a:e4:1c:e0:c4:39:fd:
ea:a6:5e:4f:63:ca:b4:81:e5:32:28:a3:c4:47:91:b3:b9:26:
fd:5e:65:9e:fc:72:6f:86:ca:5d:b0:5c:82:fc:23:11:3a:d6:
13:ff:ff:79:1c:4e:91:7e:01:c1:e7:b3:cf:3f:fb:e1:25:a3:
d6:9c:f7:0f:87:e0:8b:71:f5:b2:a3:ed:51:a4:c6:b4:4a:20:
cd:79:4e:8e:87:8a:0d:a1:00:6d:53:64:e7:3b:c1:c9:78:06:
25:97:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org