Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DCCD74A2BE11EEBAD00613D25BE465.roa
File: 94DCCD74A2BE11EEBAD00613D25BE465.roa (raw, json)
Hash identifier: /edMUmCqURxvovEokUIWS9YNkHGR0oXpPHTpD/uCX4E=
Subject key identifier: 2F:58:C3:4F:51:4A:4E:CB:FE:98:C2:FA:8D:2C:12:0F:FE:4D:9F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6674
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DCCD74A2BE11EEBAD00613D25BE465.roa
Signing time: Mon 25 Dec 2023 00:43:12 +0000
ROA not before: Mon 25 Dec 2023 00:00:09 +0000
ROA not after: Wed 26 Jun 2024 00:00:09 +0000
asID: 270157
IP address blocks: 154.208.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26228 (0x6674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 00:00:09 2023 GMT
Not After : Jun 26 00:00:09 2024 GMT
Subject: CN=6588d020-4ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:f2:2a:e8:9d:d1:5e:1a:05:12:b4:6a:50:
7d:3d:aa:d8:e2:d3:31:9e:a2:d7:fb:73:cd:7e:7f:
93:e2:b0:f4:89:70:5c:fd:18:ab:a3:7c:5f:5a:bc:
5f:8a:60:dd:a6:65:64:2a:c0:1e:f0:b3:87:2d:45:
63:c5:df:7e:c5:5b:eb:61:9c:46:ee:cb:f6:14:79:
f7:f7:60:c2:76:62:c8:4a:eb:af:02:c5:7c:85:72:
14:00:d0:ee:e3:52:2f:72:de:82:5b:19:55:4b:ed:
44:2c:a6:82:64:b9:83:41:7d:9d:db:5b:e0:f5:f1:
b7:d5:94:85:9b:c7:b0:1b:aa:a3:29:45:80:9f:51:
95:36:94:af:24:fb:62:56:2e:96:76:11:a6:a0:d3:
e4:a4:55:47:8e:da:70:56:60:34:05:58:d2:69:f2:
35:b2:46:fd:26:69:d5:dd:05:b3:c2:54:dc:ab:a5:
bd:67:56:51:a8:bc:7e:7a:84:a2:9e:cf:74:c6:27:
d1:fc:59:b9:de:e8:1a:aa:90:34:4b:33:94:9d:51:
ea:0a:db:51:d9:a9:0f:3f:3b:b3:cc:79:39:2f:7f:
bf:94:ef:63:1a:64:35:45:89:a9:f3:43:32:af:77:
1d:da:cd:07:63:8b:b2:f2:3a:a9:a6:b1:c9:be:0d:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:58:C3:4F:51:4A:4E:CB:FE:98:C2:FA:8D:2C:12:0F:FE:4D:9F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94DCCD74A2BE11EEBAD00613D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.130.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c4:f2:37:a3:62:e8:17:95:c3:66:c7:b4:7d:f4:de:82:d5:
d7:49:01:86:e2:d4:e1:08:d2:07:ca:d5:dc:b9:8e:72:82:d7:
e3:64:ee:fc:88:b2:60:b9:7c:d7:b2:3b:f1:df:8d:66:6f:50:
54:7b:ed:6a:04:5c:aa:0d:8c:65:9d:9a:38:98:df:0c:43:27:
9d:cb:71:51:33:22:91:38:79:95:3e:ec:4b:c1:3d:c8:05:1a:
f5:5e:2f:9a:90:3c:a1:d5:b4:d8:12:f5:2d:46:3c:11:5b:99:
6a:61:b4:5f:4d:74:34:d3:c2:55:45:f1:51:15:81:34:ed:aa:
dc:ef:47:b7:cc:a2:db:42:c4:94:29:c7:ea:8c:bb:eb:46:4c:
98:f0:96:cc:c9:dc:d5:44:4e:3f:fe:c7:62:5a:4b:65:8d:22:
e5:a3:6f:6f:ef:94:c6:b5:0c:50:e2:a7:83:3b:4f:9f:0d:34:
65:7e:b7:1a:08:1a:0c:56:02:d1:71:79:ef:53:b6:ab:89:9f:
33:f5:b7:ab:9a:ed:50:bf:f5:42:18:3b:cf:3c:55:33:9b:69:
7b:77:b1:6e:9f:34:1f:5a:76:1a:9e:b0:ef:3a:b1:7c:f0:c3:
df:c7:59:d6:4e:f4:13:f4:ed:a4:22:ca:b0:a0:28:57:97:3b:
8a:ae:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org