Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B53678ECA411EE951557C6775412E6.roa
File: 92B53678ECA411EE951557C6775412E6.roa (raw, json)
Hash identifier: rB8RKG99KsLWaxrfxXK9LTv9iHum32CBF/YqMuBsjLQ=
Subject key identifier: 9B:ED:FB:F0:17:46:15:57:4B:E7:35:C3:D4:F0:5E:2E:3E:DA:0D:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B53678ECA411EE951557C6775412E6.roa
Signing time: Thu 28 Mar 2024 01:43:27 +0000
ROA not before: Thu 28 Mar 2024 01:43:24 +0000
ROA not after: Sat 11 May 2024 01:43:24 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42688 (0xa6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 01:43:24 2024 GMT
Not After : May 11 01:43:24 2024 GMT
Subject: CN=6604cb3f-3cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:7b:20:7b:3f:e8:5f:c8:61:e6:36:8f:e2:
d8:de:20:17:46:6e:4c:d4:20:00:9e:b1:e1:9a:f9:
25:85:da:81:c1:2e:af:8d:e6:55:7c:e6:70:77:83:
86:59:65:cf:d1:c3:90:7e:71:6e:a6:98:df:34:5a:
fe:91:9e:3a:d6:fb:65:f8:bb:e3:a4:36:52:ef:59:
62:81:ae:4f:01:9c:2e:a2:4e:93:85:90:7c:e2:4f:
f4:9e:3c:cc:76:83:75:8b:f8:63:28:04:2d:03:88:
90:d4:a2:7a:fb:71:e5:c4:0d:3a:cc:c6:39:c6:17:
9c:55:e4:3d:b8:77:b7:6b:af:2c:55:c2:3a:d1:0b:
73:d1:9a:93:96:d6:60:be:8c:f6:d4:ad:c6:c2:fb:
01:50:f4:eb:0d:a4:26:f5:56:48:51:a2:80:f0:60:
61:c0:d6:e3:3d:eb:60:88:0a:12:27:b5:6e:4a:23:
1e:c0:09:12:c4:35:53:1f:ab:97:78:d6:81:da:b1:
d8:8c:aa:0b:4b:91:17:92:7c:0a:6d:40:1f:96:80:
b0:8d:48:df:9e:49:4d:07:c3:6d:73:d3:f9:cc:db:
ea:ce:2f:ad:52:d8:63:df:89:36:28:c8:81:78:36:
5e:78:30:47:55:82:0d:57:4f:49:01:7d:68:be:75:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:FB:F0:17:46:15:57:4B:E7:35:C3:D4:F0:5E:2E:3E:DA:0D:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92B53678ECA411EE951557C6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:af:b0:b6:ca:1d:99:10:1e:5d:78:98:b5:11:b1:16:33:b5:
8b:29:82:1c:48:39:5b:db:92:20:5c:d6:8a:35:2b:80:74:40:
f7:12:19:5e:69:5a:11:57:06:0b:68:47:e0:50:82:b3:63:97:
29:ae:50:27:2d:72:9d:a0:00:f1:6e:44:53:78:aa:09:4f:88:
82:17:b8:3e:fc:4b:e6:d5:33:e2:e4:dc:6d:70:15:8b:f1:85:
46:44:6e:4c:87:95:29:33:7a:72:f6:09:ac:1b:38:1d:97:e2:
d5:8c:87:42:d8:58:da:61:e2:e2:7f:e4:8c:01:60:ca:f8:62:
b3:29:ac:34:07:09:c2:2b:8b:b1:9c:2e:7e:29:fc:6b:91:a6:
b5:a8:ae:08:0f:c2:8d:4f:dc:2c:73:37:ad:36:d8:b3:fb:bc:
f3:1e:42:9e:ab:76:64:aa:49:c9:14:cf:4f:0c:ec:e8:23:30:
47:ff:5e:c5:f9:57:6a:eb:92:de:1a:38:5b:1c:a2:bf:a4:ea:
37:8b:54:d7:a5:f3:8f:3c:1d:31:fe:0d:50:6d:9f:28:d9:21:
34:f8:01:8f:b3:80:16:66:3d:a9:b6:a1:01:cb:e3:c7:69:dd:
cf:35:a0:ac:cc:98:91:1f:7c:6f:ef:66:b4:24:7b:4c:01:f8:
15:5e:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org