Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FC8E916F86E11EEA53A5A2D017001B1.roa
File: 8FC8E916F86E11EEA53A5A2D017001B1.roa (raw, json)
Hash identifier: YMKeFYWMB8DAplKrwmffEYoX7kFP6LEPLdDausmDH8s=
Subject key identifier: 6D:15:82:88:CE:46:C2:72:52:CE:82:B1:6D:96:76:D3:F7:6B:12:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FC8E916F86E11EEA53A5A2D017001B1.roa
Signing time: Fri 12 Apr 2024 01:47:04 +0000
ROA not before: Fri 12 Apr 2024 01:47:01 +0000
ROA not after: Sun 19 May 2024 01:47:01 +0000
asID: 138915
IP address blocks: 154.93.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43936 (0xaba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:47:01 2024 GMT
Not After : May 19 01:47:01 2024 GMT
Subject: CN=66189298-4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:d1:e1:56:7a:21:4f:6c:e3:d2:6b:49:4c:
c2:f1:16:40:ff:7e:7e:76:ee:03:5f:33:98:c7:79:
0e:2b:d1:22:0a:44:9e:5d:b5:bf:9f:83:78:39:a2:
d2:2d:9b:60:58:f7:ba:4a:42:a1:a1:69:4f:f5:64:
29:30:9c:1e:5a:aa:99:13:2d:32:3d:ee:4a:5f:76:
e6:b5:e9:ed:8e:7f:c0:32:bf:a0:a6:fe:d7:d6:d2:
ae:80:74:4f:77:3e:46:73:62:4f:ea:5d:83:25:68:
3a:f6:fc:68:60:99:aa:30:d7:ef:30:6f:17:97:7c:
58:44:6a:73:21:c2:1b:3b:fe:2b:8b:ac:8a:a8:b5:
76:80:9e:d8:bd:40:cb:c0:62:a8:cf:56:e0:85:5b:
6e:33:35:f9:35:1b:a9:6e:ad:ec:f7:38:ae:69:13:
ad:88:19:bb:f3:d5:05:15:7d:e9:95:a9:cd:6a:d0:
19:de:94:0a:0e:9d:ec:59:57:66:39:11:cf:b3:40:
0e:8c:07:bb:f4:c0:2f:61:fc:78:4a:84:26:09:42:
b7:18:e7:d6:c0:6e:20:71:42:db:84:1b:27:d3:31:
ae:28:a4:b6:8b:b6:9d:70:67:92:c8:d0:fe:06:79:
05:03:0d:5b:39:52:2e:93:69:4b:dd:e0:c8:57:ea:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:82:88:CE:46:C2:72:52:CE:82:B1:6D:96:76:D3:F7:6B:12:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FC8E916F86E11EEA53A5A2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:21:4f:d1:5d:e9:ba:10:99:1b:ff:cf:b0:a3:58:11:76:1a:
0d:cd:72:ea:22:c6:65:60:ef:c0:42:e7:d7:5a:e1:49:e4:2a:
89:e3:21:96:01:f2:98:07:b2:76:a3:75:21:fd:cf:05:4d:5f:
42:b3:56:13:e0:23:59:71:5e:45:8f:77:bd:56:03:50:07:7c:
2e:b1:73:60:bc:24:41:79:7e:e8:58:8e:6d:5f:d4:7e:38:3c:
7d:b7:ff:30:2b:0f:11:2b:2a:0e:5f:a3:c2:1e:db:35:45:9c:
2b:ae:64:9a:2e:67:3d:b2:42:0a:ba:ba:05:f5:bd:8b:a3:56:
6b:3a:11:ea:e3:63:04:aa:9e:08:15:f6:21:51:69:56:56:1c:
59:55:4a:fd:e4:58:92:cd:45:98:6d:a1:e4:a1:8b:b9:57:39:
f9:ec:30:4d:5e:ce:0e:9b:c3:8d:8d:74:e9:92:8d:cf:c0:ce:
33:3e:75:4c:7a:91:3c:9c:97:b3:a3:fd:f3:59:33:d0:33:3f:
f6:5e:61:ca:04:05:d5:bc:96:62:1e:89:21:bd:96:4f:28:52:
ba:0f:49:a4:36:1f:8d:70:bb:0c:39:ea:01:4d:fb:94:fd:85:
e7:cb:79:9d:cc:28:3e:35:65:ca:e2:b3:45:19:bc:06:f2:1a:
c1:05:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org