Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA1A9BEF47F11EE8D419BBF775412E6.roa
File: 8CA1A9BEF47F11EE8D419BBF775412E6.roa (raw, json)
Hash identifier: exKW5cwQzYavaYExrCfTjr+bK0M2zkv2cFzNRn9XCZk=
Subject key identifier: B8:16:14:2D:95:E1:66:5F:5F:D1:A3:3C:79:C1:DC:72:EB:27:B8:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA1A9BEF47F11EE8D419BBF775412E6.roa
Signing time: Sun 07 Apr 2024 01:38:35 +0000
ROA not before: Sun 07 Apr 2024 01:38:32 +0000
ROA not after: Mon 13 May 2024 01:38:32 +0000
asID: 138915
IP address blocks: 154.206.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43428 (0xa9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:38:32 2024 GMT
Not After : May 13 01:38:32 2024 GMT
Subject: CN=6611f91b-97e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:51:50:5a:88:19:82:b9:9f:dd:77:4e:47:
83:42:b2:f7:73:94:30:ad:00:d8:76:ad:e0:05:34:
1c:28:98:5f:60:a2:e0:58:81:06:08:8c:0f:c7:fa:
06:b1:90:48:20:b5:9a:e4:78:52:83:40:52:fa:00:
29:c5:57:4a:ce:71:60:e0:08:84:4a:fd:38:c2:36:
2a:35:ac:44:cb:4f:e6:a3:b2:0d:86:95:01:e2:71:
de:95:81:6b:d0:97:01:33:f2:68:29:4b:fa:24:df:
66:ab:35:81:8e:74:04:6d:b1:ae:12:3a:5d:5c:a2:
9e:0d:c1:cd:a7:a2:ae:11:b2:d7:b3:75:7d:11:10:
8d:2a:2d:6f:2e:1b:80:4c:71:47:00:a8:e0:34:a5:
a6:fa:55:ce:00:dc:3c:a0:56:1b:8f:a2:4c:19:79:
e8:45:14:a4:1c:e5:c2:25:7e:8b:c2:0c:87:e6:23:
0e:ff:4d:b2:88:16:aa:be:e9:87:f1:88:08:8f:25:
59:96:d0:c4:74:00:55:8c:12:f5:7e:58:5d:ed:4a:
c1:00:77:ba:b3:36:b6:a2:eb:0c:9c:39:a3:87:5f:
e7:4c:45:f8:7e:6f:ba:7d:4f:81:09:5a:3c:61:fa:
ab:31:7c:4c:9b:cc:34:f9:84:4c:a2:02:db:e6:d0:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:14:2D:95:E1:66:5F:5F:D1:A3:3C:79:C1:DC:72:EB:27:B8:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA1A9BEF47F11EE8D419BBF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:cc:8d:2f:34:25:c9:2c:06:3c:5c:b7:27:87:20:05:33:23:
b4:02:5e:d5:d0:4f:15:7e:52:19:05:14:7e:99:68:f7:c9:13:
d1:ca:2e:44:b1:f7:83:53:da:71:13:28:a9:2d:9a:54:f2:12:
f3:c1:2c:08:fe:73:fd:47:10:97:6e:53:3a:5e:5a:7c:44:46:
0a:b2:76:71:f7:40:f1:fa:2f:78:17:e2:91:fb:c1:cf:47:2b:
72:16:92:96:57:0f:fa:fc:c8:d8:09:e6:f4:9f:8c:b8:bf:a0:
bb:aa:8c:d6:df:82:59:40:ae:40:4a:e1:e3:15:7d:8c:46:e0:
c1:49:a8:e0:11:0d:e5:bd:2b:f2:b7:1d:42:73:5d:b1:3b:bf:
e0:38:3f:b0:2a:18:e1:2a:22:a5:04:e7:27:0c:9c:bf:17:99:
df:23:94:5f:e0:46:f0:bf:4c:42:40:fc:2f:3b:28:fb:5d:33:
72:c7:43:eb:aa:e6:ea:74:9c:44:70:16:9e:f7:b6:68:c6:a8:
e3:90:ff:7d:62:7d:29:12:49:84:29:7c:a4:49:d4:fb:30:68:
4a:7a:f0:ff:8b:41:9e:03:06:bb:8f:8c:bc:8a:33:12:79:66:
ee:88:4b:06:ae:e4:9b:9c:1a:9f:67:4a:0a:eb:4e:c5:d2:b0:
06:7c:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org