Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90945E5AF87511EE9942876C017001B1.roa
File: 90945E5AF87511EE9942876C017001B1.roa (raw, json)
Hash identifier: op4k8MPx4EzCYyPi3HuNxENCH253V7CsKditkEiKx3M=
Subject key identifier: D0:52:DE:36:DC:76:88:0B:26:59:22:3B:82:23:1E:C7:38:57:EF:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90945E5AF87511EE9942876C017001B1.roa
Signing time: Fri 12 Apr 2024 02:37:12 +0000
ROA not before: Fri 12 Apr 2024 02:37:08 +0000
ROA not after: Mon 22 Apr 2024 02:37:08 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 02:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43948 (0xabac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 02:37:08 2024 GMT
Not After : Apr 22 02:37:08 2024 GMT
Subject: CN=66189e57-0db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:f0:95:d8:c8:08:73:28:32:8e:7c:fd:90:
fb:2c:e9:82:e6:b3:b5:73:2e:9e:00:82:6c:d5:e9:
73:ab:be:67:bd:63:13:3a:43:eb:28:b0:c3:67:b4:
e6:30:c4:35:f1:d6:71:a1:ac:ab:a4:a8:3f:f0:8b:
17:3b:2b:e4:cd:75:54:8d:cf:44:59:44:1b:d6:bc:
2c:16:f9:dc:8c:82:49:96:4e:7d:4a:28:50:f1:f5:
2e:77:07:92:46:05:a0:b6:ce:e4:56:a7:e4:de:2c:
25:b0:7a:a0:70:af:80:4d:72:8d:41:cb:52:32:69:
c7:97:d7:43:32:d6:bc:17:c1:fd:b6:9c:91:20:60:
47:79:91:91:78:37:02:42:9e:6e:15:d3:1e:0c:6d:
c4:a8:78:48:17:78:4c:db:60:ff:39:76:fb:24:fe:
cd:28:00:5c:4e:75:0f:ec:f4:29:f6:72:23:f4:ee:
86:c3:d2:51:77:80:8f:4d:06:5e:8c:a0:f4:25:20:
1e:d8:82:69:cc:ba:91:19:49:69:11:d9:31:6b:ff:
7c:65:c3:40:22:bb:33:49:62:ed:bb:14:6f:d8:85:
9a:6c:00:c0:4b:51:67:f2:9a:72:2d:a8:3d:0f:0d:
fa:8d:30:d1:2e:51:7f:66:a5:5a:5b:3d:50:20:0e:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:52:DE:36:DC:76:88:0B:26:59:22:3B:82:23:1E:C7:38:57:EF:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90945E5AF87511EE9942876C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
66:83:4e:83:1b:d1:c4:d9:1f:b4:8f:37:7e:31:65:36:3f:c2:
b3:e9:49:ba:4b:ae:37:46:64:77:46:5d:d9:98:a8:82:5f:29:
43:9d:ac:bb:76:65:85:de:f8:89:87:55:ac:26:03:8d:1b:5f:
e9:28:17:b5:8e:b0:6d:4b:81:d6:82:47:ef:39:62:6d:e8:f8:
13:d2:b4:8d:df:52:c3:b3:41:84:e6:76:5c:5a:7b:14:58:a8:
03:f7:d3:27:ca:ba:c4:c4:42:3d:ca:ac:f4:1d:4a:d4:2d:0d:
f4:85:3e:64:e5:18:d1:e3:39:3d:a0:a5:45:22:69:a8:4c:4c:
26:64:66:5f:ea:29:a9:e4:1d:6d:6f:50:3a:10:83:40:d2:d6:
5e:21:12:b1:17:eb:69:d0:f1:28:82:08:27:7f:f0:7c:c7:cd:
aa:47:26:5a:37:4b:a4:da:8f:e9:fc:a3:03:69:ec:2c:c6:24:
97:09:1d:fa:98:56:43:7d:8c:df:24:3a:8e:72:c5:87:25:75:
af:a8:54:97:99:20:b8:6a:f0:10:bd:40:4c:17:4f:c8:4a:08:
b8:22:49:0e:76:3e:da:8b:ec:f5:3c:f2:b4:40:8b:06:4d:d3:
23:9d:15:f3:0d:c0:99:1e:2e:46:05:f8:58:63:23:88:8a:f2:
a3:19:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org