Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E010C24FAF511EEA4DC094D017001B1.roa
File: 8E010C24FAF511EEA4DC094D017001B1.roa (raw, json)
Hash identifier: JcnoNFlJvwk8Hfkn2qgZOS9NrZ1C2D7pXRuZN08XzXs=
Subject key identifier: 0D:E1:44:BE:CE:1D:3F:EE:09:D5:5C:D7:67:46:79:AB:66:AD:A4:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E010C24FAF511EEA4DC094D017001B1.roa
Signing time: Mon 15 Apr 2024 06:58:25 +0000
ROA not before: Mon 15 Apr 2024 06:58:22 +0000
ROA not after: Thu 30 May 2024 06:58:22 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44264 (0xace8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:58:22 2024 GMT
Not After : May 30 06:58:22 2024 GMT
Subject: CN=661cd011-3fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:19:d2:ef:3c:59:c1:ff:a7:85:0e:97:81:
50:df:06:38:e1:9f:3b:9a:f3:de:ab:e6:21:a8:09:
ec:84:60:12:8d:60:03:09:15:fa:8a:27:b8:14:b4:
d6:06:b4:94:c6:2a:f8:94:0e:e9:2b:fd:42:89:64:
92:13:29:b4:68:38:f2:d3:f3:af:b8:04:d5:d8:e3:
d1:7b:fb:ba:53:f4:13:ae:7d:20:d1:dc:37:3a:76:
8c:b7:18:f5:1c:50:43:c9:82:e2:63:5a:64:3c:b9:
1a:17:c3:70:1b:45:62:4b:88:3a:db:51:2f:af:c8:
70:76:0e:29:e5:fb:3b:f7:39:51:f8:8d:15:4d:b6:
37:4c:43:e5:ac:a9:17:90:48:0f:91:96:83:29:d4:
11:77:33:2e:ad:3c:5a:05:71:04:a4:c2:da:00:af:
bc:ca:79:26:97:9b:2c:38:e0:ca:cb:93:52:3c:fe:
36:88:fc:3a:98:b9:1f:00:2b:37:cb:25:68:62:5d:
af:32:cd:d2:42:43:cb:fc:1f:7d:01:09:9a:3a:61:
ac:47:3e:04:a5:22:f2:81:ae:87:7e:88:9d:c4:4c:
59:0e:62:b2:34:9f:d5:93:88:4a:ce:a4:18:e9:50:
7a:74:e2:1a:9d:5a:ae:75:16:42:16:34:fe:60:d6:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:44:BE:CE:1D:3F:EE:09:D5:5C:D7:67:46:79:AB:66:AD:A4:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E010C24FAF511EEA4DC094D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2d:46:33:48:cb:e8:cc:a8:ee:26:9c:ea:b8:2c:5b:93:78:
e1:a6:74:61:76:32:b6:ca:b4:f1:5f:6e:3f:d1:a1:6c:ba:14:
0d:54:e8:bd:90:64:f4:4e:cb:7b:03:bc:83:5e:e3:eb:4a:63:
31:9d:42:11:a4:42:33:32:0e:d0:c5:9a:7e:db:a2:6d:1a:47:
fc:2a:e5:81:d1:12:76:b3:dc:12:6d:cd:6c:d4:ef:d7:89:1d:
d0:e6:a9:86:33:65:96:b0:ae:c5:4e:c2:c9:d9:63:b3:fe:f3:
fb:4f:d7:ac:c7:a4:18:9f:d1:86:f3:0d:93:3e:fc:63:9b:86:
3d:ce:a9:ed:d9:f1:e8:e0:47:ed:f0:e9:d7:36:8a:79:da:00:
84:1d:ab:53:e8:85:1a:7c:9e:9f:82:1c:50:59:59:50:94:03:
07:ff:90:26:8e:f4:6c:41:b1:4d:f1:5b:c2:3d:30:64:7e:ad:
bb:c5:d1:a3:eb:89:f1:8f:73:08:cf:94:a1:13:ad:1c:2d:a0:
c3:fd:1e:dc:05:4c:2d:aa:d2:4c:f3:b0:a4:dd:6c:16:26:ac:
13:b9:d4:05:a1:5e:1c:74:4c:67:ca:f5:41:47:02:ed:02:72:
0f:c2:9b:25:2b:d7:1c:11:9d:49:bc:b1:ab:4e:f5:4c:27:7e:
9e:e0:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org