Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944843C2FD2A11EEAFE11145017001B1.roa
File: 944843C2FD2A11EEAFE11145017001B1.roa (raw, json)
Hash identifier: hs5kvADdR6smxVFQage5G+AEBobk1QF/tn/yRYMXyTM=
Subject key identifier: 2B:A7:8F:6D:56:2E:90:88:A2:6A:17:86:E6:A6:95:E7:00:33:34:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944843C2FD2A11EEAFE11145017001B1.roa
Signing time: Thu 18 Apr 2024 02:23:02 +0000
ROA not before: Thu 18 Apr 2024 02:22:58 +0000
ROA not after: Fri 24 May 2024 02:22:58 +0000
asID: 18779
IP address blocks: 154.203.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44531 (0xadf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 02:22:58 2024 GMT
Not After : May 24 02:22:58 2024 GMT
Subject: CN=66208406-386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:c5:65:7e:13:2f:f7:d1:53:27:d2:c9:d5:
a3:7b:96:69:19:9f:9f:08:98:1e:17:25:e4:00:99:
c2:62:c7:a5:46:6e:1d:a6:8a:4e:b4:0c:27:b0:bf:
bc:c5:f8:ca:ed:62:da:af:a1:c9:9a:7d:a5:9b:17:
78:a5:86:34:6c:2f:89:90:6e:e0:94:b0:0b:0f:be:
c8:12:4c:ea:1e:d0:16:05:4b:92:ae:c9:cf:78:ff:
ec:4c:84:42:a8:72:cf:ec:a1:e2:b7:f1:08:81:d0:
08:6e:80:5d:74:71:70:4e:dc:ab:cf:02:b0:dd:59:
5a:f4:2a:f6:25:88:67:c7:d9:7d:0e:50:d4:c7:e0:
49:73:9b:3a:25:45:4d:ed:1e:73:ea:10:b7:b0:2f:
29:f3:d6:17:8a:b1:f0:7a:92:e9:e3:38:37:fb:ec:
a2:a9:ef:ce:96:d5:23:ad:b7:21:39:a1:61:82:62:
b7:13:c3:0d:c0:89:75:6b:49:57:85:bb:32:6d:f5:
dc:2b:4b:1c:6a:58:69:24:87:7e:6d:22:ad:a4:1a:
e8:75:ad:ab:e2:b1:34:97:0b:fe:66:ae:22:47:3c:
bb:e0:a8:05:65:cc:19:71:7e:6d:4c:60:22:b6:45:
a3:ff:79:fc:53:e7:04:b2:a4:ca:5c:10:2c:2f:f5:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:8F:6D:56:2E:90:88:A2:6A:17:86:E6:A6:95:E7:00:33:34:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/944843C2FD2A11EEAFE11145017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.42.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:be:9b:ae:cf:55:c7:4d:c1:68:eb:6f:77:e1:27:f7:ad:8c:
90:a4:22:e7:7e:b6:5c:21:f3:3d:f7:79:ca:89:26:96:23:11:
e1:f1:ea:81:af:39:bb:9d:3f:2a:06:98:87:ac:e2:92:72:6d:
6e:e0:59:39:c7:61:2e:f8:fc:8f:6a:ee:e8:84:b6:99:c7:6b:
13:01:61:6d:77:7b:36:36:cd:06:71:42:6a:23:24:f8:2c:01:
1b:53:60:39:ba:ae:ad:67:91:6d:72:a7:14:67:4d:50:13:a8:
86:63:2a:ec:d4:2c:7d:56:b2:41:b7:b3:78:13:e8:5c:de:e8:
29:b0:3c:0d:48:63:b1:48:00:36:61:78:53:1b:a2:63:c7:59:
b7:40:51:31:62:9d:ac:3f:a4:9e:78:95:92:a3:74:fe:86:10:
cb:b6:8c:61:c6:0f:ef:ce:22:9a:c8:94:17:3d:c2:b4:c9:ed:
84:a8:00:26:af:b0:ef:e7:36:46:66:c5:b1:cb:52:5c:c2:29:
1b:75:49:c8:cb:96:9d:bb:44:7a:eb:fb:86:6f:dc:67:8b:87:
08:d9:f3:f8:aa:63:9b:1c:2b:62:d8:1a:fc:da:f3:40:22:a5:
52:48:75:9a:ac:1d:3b:75:02:88:fe:9e:ef:3e:95:ac:37:e2:
96:28:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org