Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922903F4EFF311EE86F282A8775412E6.roa
File: 922903F4EFF311EE86F282A8775412E6.roa (raw, json)
Hash identifier: gMmq/uL3DQYoQfL5DrYp/NwxPl6tlI/CB64cCRDPMaA=
Subject key identifier: CB:0F:4B:1E:4C:CC:CA:2F:A6:D2:07:D2:0B:3B:9E:0B:2D:99:80:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922903F4EFF311EE86F282A8775412E6.roa
Signing time: Mon 01 Apr 2024 06:46:30 +0000
ROA not before: Mon 01 Apr 2024 06:46:27 +0000
ROA not after: Tue 07 May 2024 06:46:27 +0000
asID: 138915
IP address blocks: 154.223.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42972 (0xa7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:46:27 2024 GMT
Not After : May 7 06:46:27 2024 GMT
Subject: CN=660a5846-36e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:48:25:97:fd:6c:d6:2e:d9:5f:ed:d0:9f:
da:6e:46:93:a2:0a:b4:55:20:db:13:22:2b:be:d3:
1c:9a:4a:c4:a9:0b:c6:a1:5e:64:64:a3:ba:96:0d:
d0:28:6d:52:0b:f8:99:43:01:f9:c3:e0:8e:17:cb:
6b:81:27:51:d0:48:2d:e1:19:74:dc:87:0b:dd:39:
6c:7b:c2:0a:a8:2c:ac:d6:4f:34:bb:9d:05:62:a8:
23:e6:66:5d:81:43:f8:6f:bf:22:96:8e:5b:90:f7:
0e:83:6c:fe:0b:9b:90:f2:8b:a4:1b:b9:b9:e9:eb:
ab:6d:1c:fb:0f:7c:24:e6:70:33:86:a3:9a:97:0b:
21:69:ea:93:20:9e:52:73:b8:6b:56:4c:9a:1a:57:
ce:10:a7:e2:e1:a2:6b:fe:73:4a:20:ed:a7:2b:23:
7f:49:26:68:d5:7c:17:ac:05:10:7f:c9:78:c1:b9:
df:cd:f0:dd:9f:f9:4d:f7:48:dd:1c:90:aa:97:5f:
1d:24:7a:aa:b8:24:3b:45:48:55:67:5e:a1:79:2c:
c7:33:6e:dc:9d:59:81:4f:31:e4:be:1e:4e:37:ec:
28:af:6a:9c:2a:3e:db:74:a3:1b:5d:dc:cd:44:af:
8c:4d:95:05:a4:44:57:94:f5:d7:0b:e3:31:cf:e2:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0F:4B:1E:4C:CC:CA:2F:A6:D2:07:D2:0B:3B:9E:0B:2D:99:80:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/922903F4EFF311EE86F282A8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:67:e9:78:55:e0:87:85:7b:af:6c:bb:4b:2d:e4:45:04:93:
e5:8e:20:5b:a5:26:87:15:39:e2:13:04:16:c3:5c:41:a0:6a:
35:e6:96:bf:3e:24:d3:8f:0f:9a:02:51:83:6f:3b:f9:43:3c:
26:a8:c6:f9:9a:54:a0:19:81:37:63:ec:b8:03:b4:d3:12:92:
a4:ec:e9:b9:07:29:02:89:b3:4b:86:47:e4:64:a5:e7:2f:19:
7d:97:82:e7:4b:11:af:d6:85:e3:10:52:3f:87:cc:12:01:42:
83:d5:b8:a4:21:71:36:f6:04:ea:60:2a:7f:5a:8a:d2:60:33:
af:97:8d:38:19:01:fa:51:ca:96:74:51:af:e7:80:f4:b4:bc:
9d:6f:84:23:8a:33:42:be:9c:9b:27:bf:35:3f:20:84:ca:d2:
92:9e:cf:05:e5:a9:73:c4:54:63:b8:a3:d4:8d:25:3c:d0:13:
33:06:35:d3:e7:e5:e6:c4:c1:c1:75:d2:24:44:20:82:0b:e1:
f9:e0:72:de:24:a4:69:91:68:c1:4a:e3:88:87:f0:60:8b:1c:
ef:42:83:ba:40:61:1e:8c:c8:45:6e:bb:5d:56:0b:0e:7c:42:
ff:7c:5e:d5:ec:a4:1a:54:fb:7b:01:70:7e:32:6e:a2:1b:55:
1e:55:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org