Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901986AADB4F11EEA9326F7D775412E6.roa
File: 901986AADB4F11EEA9326F7D775412E6.roa (raw, json)
Hash identifier: F7i/mMbfyDR8q+BWZ8iWBjtyXFlblXWsB8EvUqgGNiA=
Subject key identifier: 69:7C:CB:20:30:9C:EE:72:EE:5D:2A:0C:E7:34:97:EE:63:76:AB:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 9D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901986AADB4F11EEA9326F7D775412E6.roa
Signing time: Wed 06 Mar 2024 00:22:06 +0000
ROA not before: Wed 06 Mar 2024 00:00:03 +0000
ROA not after: Thu 09 May 2024 00:00:03 +0000
asID: 25818
IP address blocks: 154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40264 (0x9d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 00:00:03 2024 GMT
Not After : May 9 00:00:03 2024 GMT
Subject: CN=65e7b72e-6f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:c0:79:bf:fa:09:18:9f:be:e2:a5:b2:24:
a5:7e:ae:97:64:cf:be:40:bd:b0:9a:18:da:df:77:
a9:d6:70:97:b7:2c:37:7e:fc:f9:96:2b:4e:d9:5a:
e0:52:55:f4:dc:e6:d1:26:9f:da:f0:9b:73:1c:5c:
76:e4:dc:8c:b6:7f:27:e9:1e:cb:68:90:67:af:65:
a1:da:93:de:cd:a1:88:14:62:b6:ac:cc:87:9a:f9:
88:c2:7e:64:66:85:5e:cd:a3:23:b9:76:1c:31:3e:
9f:3c:5b:e4:a3:8b:a9:92:56:38:68:7f:d9:37:99:
99:39:a5:71:26:b4:7d:1f:4d:28:6a:db:d1:34:95:
5d:6d:34:e2:fb:c1:c4:fb:8a:80:65:55:f3:ac:a6:
0c:52:23:05:2d:79:78:af:b2:c9:fa:b7:82:d4:71:
43:95:12:24:2b:ab:89:4f:02:ec:9f:c3:3f:04:03:
a5:2f:32:78:8d:8a:76:de:7b:f2:34:b2:4e:6e:cb:
b9:12:ed:73:ea:af:0a:88:43:77:b1:2b:4a:d6:9c:
69:58:2f:f6:87:8b:bb:a8:5e:92:74:de:32:40:6a:
4d:45:4f:df:0c:b7:7c:b7:39:a9:3e:82:85:37:a7:
1d:e1:00:e2:4f:76:86:9e:dd:11:47:e9:0c:46:7a:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:CB:20:30:9C:EE:72:EE:5D:2A:0C:E7:34:97:EE:63:76:AB:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901986AADB4F11EEA9326F7D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
69:84:68:25:49:be:f3:f3:9b:84:ba:1f:d9:55:f2:db:6d:22:
0d:13:5d:4a:de:1e:e6:21:0a:55:51:b3:1c:a2:fe:9f:9e:f4:
e9:51:68:e1:8d:d9:76:f3:78:4d:06:16:ca:ef:dc:75:da:4d:
6f:51:11:02:36:4e:93:7f:24:ad:91:ac:1b:65:27:a8:e3:a2:
da:6d:65:89:50:cc:33:62:06:e2:e7:c6:9a:f6:43:8f:27:61:
29:af:fb:e6:ca:2d:bf:27:b7:44:63:84:cd:d5:ac:df:9c:dd:
aa:20:05:76:16:8f:7a:41:9b:3a:39:3e:62:05:b3:66:e3:78:
b2:85:8a:94:ec:2f:5d:3b:a3:aa:2c:8d:a0:cb:05:b1:df:f3:
7b:47:07:31:8e:a3:12:64:a2:3c:45:71:66:ea:0c:f6:91:85:
af:b3:80:d9:36:8b:f2:f1:6c:95:a0:e3:10:c9:26:86:83:30:
f3:a8:f0:2f:b3:b5:8a:89:3f:68:5a:3a:d6:c7:08:1f:b9:bd:
bb:cd:74:14:c1:5a:ac:9e:9c:ab:7b:49:81:5f:3f:82:8c:7e:
8d:47:49:8c:5d:26:bf:36:ef:62:cc:10:da:3c:cc:e4:2a:f1:
85:cd:8a:ba:eb:9c:72:3a:6f:62:9a:b8:bb:6b:6f:87:99:20:
8c:37:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org