Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A065F60F86C11EE9CD29B19017001B1.roa
File: 8A065F60F86C11EE9CD29B19017001B1.roa (raw, json)
Hash identifier: M+WuG8PKfTRJ3hUEIbc/oRhNccRb4nCMQWyf+G8CVE4=
Subject key identifier: 21:A6:21:EF:E7:A1:F5:45:04:65:BB:18:3C:B8:04:3F:1D:EE:38:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A065F60F86C11EE9CD29B19017001B1.roa
Signing time: Fri 12 Apr 2024 01:32:35 +0000
ROA not before: Fri 12 Apr 2024 01:32:32 +0000
ROA not after: Sun 19 May 2024 01:32:32 +0000
asID: 138915
IP address blocks: 154.90.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43912 (0xab88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:32:32 2024 GMT
Not After : May 19 01:32:32 2024 GMT
Subject: CN=66188f33-a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:bd:62:75:15:c8:0d:e5:2a:6d:59:ea:cd:
11:4c:41:8d:3d:12:a5:03:d0:20:85:7b:36:b0:48:
fe:39:65:57:a3:2b:a9:d1:8b:5b:89:68:19:47:24:
20:02:f0:0c:e3:df:98:fa:7a:2f:f5:89:d4:6e:4f:
ec:00:17:d0:fa:69:c7:76:82:c4:4a:42:85:e4:d1:
38:d7:df:ba:18:5b:b8:5e:b1:d6:53:10:01:e7:f3:
ef:d9:44:aa:9e:1d:38:33:cd:1e:10:da:45:9b:51:
26:19:75:43:a2:f7:1c:d6:1b:ed:9d:20:cf:04:fc:
b1:ca:21:66:91:ae:3e:ac:12:ec:dd:65:e9:55:66:
e1:d4:20:32:6e:cd:df:06:50:13:ac:fb:c4:46:d6:
e9:b0:12:41:a1:0e:ee:1b:0d:d6:a9:4b:75:c1:c5:
dd:bb:6b:f3:1c:10:ba:e6:b0:23:56:92:52:2a:f6:
07:a6:c5:d9:08:8c:36:69:23:d0:37:d8:c8:f4:10:
51:80:62:2d:87:4d:a7:c2:b2:99:6f:b1:a6:d9:69:
ff:39:a9:bd:94:8f:79:b7:62:4a:81:34:42:e4:99:
25:9a:92:1e:be:b1:b8:e4:2d:2c:8e:9c:d2:bf:b2:
2d:41:90:a8:1f:f3:56:d4:45:e6:8d:8f:2d:4e:c8:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:21:EF:E7:A1:F5:45:04:65:BB:18:3C:B8:04:3F:1D:EE:38:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A065F60F86C11EE9CD29B19017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:08:c2:ca:54:97:c0:52:58:45:ab:22:98:49:8b:ed:fd:e2:
7b:31:ff:88:52:ac:37:2c:08:06:f4:50:f1:af:17:99:84:24:
ec:e5:6a:70:6d:b8:ac:72:e3:35:c8:25:b3:04:9c:91:92:03:
5c:13:64:bf:4f:42:89:79:e9:10:cb:1b:04:df:e3:8c:e2:fc:
01:fb:9a:1d:46:f5:9c:7e:37:b1:64:92:18:1a:71:95:27:37:
ef:90:82:39:19:d9:c1:ef:c0:99:1a:c9:ba:e8:b3:ff:75:d0:
73:08:b3:d2:cb:ab:5d:e8:ce:4e:7c:f2:31:e5:cf:0d:b6:39:
e5:0a:4f:3e:a0:3c:19:8f:83:db:5d:ab:3a:d6:2b:5a:cd:c5:
78:07:93:6a:ae:41:fd:d7:e8:da:e5:28:d8:f8:e5:f2:08:d8:
bd:cf:d8:8b:65:ec:bf:2d:75:d2:17:a7:06:bf:22:f5:26:7a:
d6:05:d1:c2:45:49:0f:8d:7d:67:5a:e5:01:61:72:37:1f:44:
8b:09:cc:ac:6a:ef:c2:14:7f:d8:6a:43:20:d2:b9:d4:64:da:
e0:78:2d:e1:ad:09:43:22:74:db:03:3f:20:a9:f7:91:9d:b5:
4f:1c:15:3b:8e:a1:1b:a8:5d:23:ae:3a:4a:27:ec:63:a2:4f:
71:b3:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org