Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C4E77CECAA11EE9CDE957A775412E6.roa
File: 95C4E77CECAA11EE9CDE957A775412E6.roa (raw, json)
Hash identifier: E1YuNf05mDIJ/Mn/osqK1AqadKMcx4lH0PEqm5losI8=
Subject key identifier: D8:71:8E:17:15:D2:8C:3F:1A:C5:EA:FD:34:1E:68:1E:FA:FC:9E:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C4E77CECAA11EE9CDE957A775412E6.roa
Signing time: Thu 28 Mar 2024 02:26:30 +0000
ROA not before: Thu 28 Mar 2024 02:26:26 +0000
ROA not after: Sat 22 Feb 2025 02:26:26 +0000
asID: 45669
IP address blocks: 154.81.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42702 (0xa6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 02:26:26 2024 GMT
Not After : Feb 22 02:26:26 2025 GMT
Subject: CN=6604d556-08d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:a8:35:b5:09:ec:1f:56:c9:a0:09:ef:28:
58:ec:dc:65:c7:de:01:39:dd:53:2c:2a:97:f6:28:
0c:97:12:be:d8:17:3e:9d:d1:81:ce:cc:25:5b:f7:
b5:a7:ab:dc:96:ea:f4:10:ac:c1:48:ce:b7:31:86:
18:cd:2e:44:7c:00:4e:ad:ae:00:74:9a:d2:e4:85:
4e:f5:e9:d2:e8:60:26:11:b7:d5:24:28:c9:7e:4b:
24:31:9a:bc:fd:fa:6d:49:63:8e:2a:7a:e4:d5:29:
ca:aa:1d:f2:11:e4:27:da:57:c2:e3:46:1c:d9:0e:
eb:6c:40:be:dc:dd:e2:6e:f4:f6:b7:3c:a8:4a:f7:
82:0f:3a:fd:27:72:ca:58:57:33:be:6c:9e:3a:bb:
10:96:5c:5d:80:ef:f8:a0:d7:a7:a2:40:55:43:e6:
5b:50:8c:7b:37:0f:a3:18:73:6e:77:a5:a5:56:bb:
5f:1f:cd:b5:62:7e:49:9c:19:db:88:25:b1:af:2b:
3c:fb:28:3f:37:15:e9:81:f5:db:b4:84:12:5e:72:
61:f3:b2:c1:6e:7b:98:c8:0e:1a:85:a0:3d:fd:61:
f5:78:0d:16:dc:21:83:d5:d6:de:48:25:11:54:92:
93:15:de:29:88:f1:6d:ce:9c:e0:cd:bf:ae:fb:c9:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:8E:17:15:D2:8C:3F:1A:C5:EA:FD:34:1E:68:1E:FA:FC:9E:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95C4E77CECAA11EE9CDE957A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.240.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:40:e8:b0:dc:22:34:8f:f0:d2:6d:c7:c8:4e:18:5f:88:b1:
dd:96:de:de:5c:7b:83:15:60:3b:d8:25:15:64:29:d1:52:55:
05:0d:6a:14:7f:a5:43:e0:64:ae:c4:1a:87:38:67:45:d6:6d:
73:e0:99:8b:a4:ec:c7:09:0e:3b:8f:8e:85:15:4d:03:8c:35:
60:79:52:de:27:42:63:13:73:a3:fb:88:68:a2:f7:df:6c:59:
75:64:b4:bc:b0:e9:a2:aa:43:ad:1f:a2:20:01:33:6a:ec:07:
1e:fd:47:1c:3f:49:bd:2c:df:40:2c:dd:36:17:b9:61:a7:f9:
a7:2d:b7:3c:86:c9:9d:20:2f:aa:00:b2:1d:51:5a:f8:ce:ee:
ec:b1:40:b6:09:0c:70:8a:e0:e8:9e:70:5e:a5:e9:d7:fb:cb:
41:ae:6e:e8:c7:6f:8e:95:f7:8b:74:05:f1:31:f4:ec:66:06:
0f:f7:a5:2b:03:92:aa:c1:ef:d3:60:79:36:e2:ec:9f:30:0b:
a0:9d:96:4e:f7:75:2f:68:ca:ca:d4:dd:ce:b5:51:97:6a:16:
be:95:8f:6e:8e:a4:a0:4b:e4:53:af:d4:ca:23:22:f4:bf:8c:
a3:14:1a:91:99:09:90:0c:d4:61:1a:01:47:3e:b0:79:71:7b:
f1:55:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:59 2024 by rpki-client on console-fra.rpki-client.org