Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87868424F01311EEAD8E7DA2775412E6.roa
File: 87868424F01311EEAD8E7DA2775412E6.roa (raw, json)
Hash identifier: ox9VbpUvouxb5OOtI5ZFKhD9V6C/smkQna6XL5tkt4g=
Subject key identifier: 01:80:9C:FE:53:F4:8A:9C:37:09:9B:CF:A1:96:58:20:CD:76:9D:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87868424F01311EEAD8E7DA2775412E6.roa
Signing time: Mon 01 Apr 2024 10:35:16 +0000
ROA not before: Mon 01 Apr 2024 10:35:13 +0000
ROA not after: Sat 11 May 2024 10:35:13 +0000
asID: 138915
IP address blocks: 154.203.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43174 (0xa8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:35:13 2024 GMT
Not After : May 11 10:35:13 2024 GMT
Subject: CN=660a8de4-0270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:39:36:77:38:4b:be:c4:32:1c:c0:bf:be:
d8:d8:0d:e4:51:87:eb:a1:15:bd:37:ce:ce:71:30:
e4:43:5e:65:76:93:c3:69:9c:76:3f:d6:c9:51:c9:
24:11:b7:21:f1:30:aa:64:9e:b2:d6:e5:28:7a:e1:
5e:80:7d:9b:36:69:35:cf:05:18:40:89:10:29:3a:
66:0b:20:b7:a2:18:84:13:a2:3d:94:db:70:79:71:
e6:2d:70:66:ef:10:f9:0d:e9:d8:0d:86:e4:7c:92:
70:a9:df:0f:0e:4d:9c:10:3d:f3:f6:65:9f:e5:0d:
25:27:92:e7:45:53:70:5e:1a:59:14:32:b5:65:10:
62:04:db:5e:8a:91:be:d5:40:b6:31:16:86:0d:0f:
cc:71:0b:23:ac:99:4e:df:9d:23:29:8c:dd:d5:42:
fc:1c:21:2d:79:9d:35:b4:00:3d:6d:6e:ef:8e:57:
42:3a:7b:c6:fa:99:14:40:6d:42:fe:ee:15:c1:17:
d9:2b:f9:de:82:1d:5d:c9:f5:eb:34:3a:d0:e6:43:
f7:79:15:6e:ce:9a:e3:7e:30:3d:81:f8:36:2b:4d:
50:46:da:92:a3:c9:4f:8d:2f:ba:07:95:96:ba:bc:
1a:0d:f1:b1:a3:4f:9d:1f:dc:e9:b5:e9:de:b2:61:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:9C:FE:53:F4:8A:9C:37:09:9B:CF:A1:96:58:20:CD:76:9D:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87868424F01311EEAD8E7DA2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.137.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a8:77:59:d3:c5:a2:b4:d4:08:8b:37:5b:09:51:ef:77:60:
91:05:29:50:b3:43:90:dd:8b:4b:86:63:15:3b:e5:b7:50:e0:
35:64:38:81:0c:09:20:23:23:dc:f7:22:f4:ae:a9:0b:af:ed:
43:36:ee:3d:e1:67:69:c6:c5:32:40:75:ba:19:23:32:e3:5a:
85:6d:bc:56:b5:e4:3b:4c:ef:51:ee:7c:70:71:bd:fa:64:57:
d1:0f:df:ba:aa:04:c7:8a:86:e0:91:a2:46:f6:83:f4:e0:9f:
43:5e:da:33:26:fd:c9:ea:15:5b:dd:97:30:6e:42:a3:0b:0c:
fd:19:58:d8:a9:4c:b8:51:09:c9:65:d0:58:c9:42:96:2d:82:
d4:c1:a6:fa:3a:f4:b1:bf:1c:52:87:47:68:09:17:51:d2:73:
40:ae:92:00:cc:73:95:38:3e:e2:f1:08:c2:c1:f0:eb:d5:55:
0b:60:3f:d6:db:a1:71:8b:86:c1:ca:6e:94:2e:22:c2:99:83:
d8:1e:5a:68:01:25:cd:c9:76:d9:62:01:59:8a:f0:c0:44:19:
c1:d4:8a:21:3c:e4:b5:1a:ac:bf:ca:46:b1:37:77:02:bf:22:
3e:93:cc:56:6a:53:eb:85:6b:f5:2d:fb:41:51:2f:38:b2:d6:
c6:37:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:24 2024 by rpki-client on console-ams.rpki-client.org