Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9604FDD4F72D11EE8DE95AF7007001B1.roa
File: 9604FDD4F72D11EE8DE95AF7007001B1.roa (raw, json)
Hash identifier: RH+WBZMUC6VLBtKEMQvIM7JuCOGLTODLKaxoRFZ93iI=
Subject key identifier: EC:BA:44:CC:E9:8E:D0:53:8E:04:72:66:CE:1B:69:EF:E3:46:C0:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9604FDD4F72D11EE8DE95AF7007001B1.roa
Signing time: Wed 10 Apr 2024 11:29:26 +0000
ROA not before: Wed 10 Apr 2024 11:29:22 +0000
ROA not after: Fri 20 Dec 2024 11:29:22 +0000
asID: 132813
IP address blocks: 154.211.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43746 (0xaae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 11:29:22 2024 GMT
Not After : Dec 20 11:29:22 2024 GMT
Subject: CN=66167816-a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:8c:2f:33:13:8c:37:b9:a7:44:42:48:84:
be:0a:ae:8a:51:0d:2a:3f:4c:a2:e9:ca:5c:0e:c1:
47:77:ac:87:24:61:98:d0:3f:bc:06:17:8d:ec:6f:
5f:b5:6d:27:66:89:ee:73:b8:74:a1:f0:cd:5d:83:
a8:98:b6:62:6b:a9:44:20:90:76:cb:f2:a8:da:71:
22:bf:8f:31:7a:80:6b:42:de:a6:51:e0:33:fd:cf:
cd:51:e1:ce:c4:31:d5:12:6d:9d:10:97:64:84:22:
c7:7a:90:f0:34:53:f7:b8:85:9e:cc:a2:eb:75:28:
bf:48:94:7a:eb:65:a9:82:80:3e:54:25:53:e4:eb:
78:7e:30:2d:af:df:c8:bf:ae:b7:f4:96:c7:b2:b8:
d8:91:30:3b:db:b9:b9:25:fb:c0:87:49:e3:f8:01:
90:79:08:74:67:2b:d9:54:70:97:f1:7f:c0:26:97:
28:51:8b:32:be:be:87:7e:e5:1a:42:4f:48:1e:38:
9f:31:35:2c:c6:c0:f5:96:0f:e7:f9:b0:d3:0c:97:
07:5c:9e:08:25:68:cc:9d:ff:7a:cc:92:e7:c5:54:
d1:8d:b9:5d:a2:c8:eb:57:2d:c8:6b:1c:ce:59:ea:
34:f8:00:1e:de:73:e4:79:29:57:d0:60:46:08:c9:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BA:44:CC:E9:8E:D0:53:8E:04:72:66:CE:1B:69:EF:E3:46:C0:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9604FDD4F72D11EE8DE95AF7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cf:a7:d3:9a:35:c2:37:51:19:82:87:94:90:b5:c1:12:25:
83:6c:e5:f7:3b:be:d6:4c:0e:d0:1c:1e:a0:99:2b:d5:71:de:
39:e0:6c:86:06:81:ca:15:74:86:0a:7c:6d:27:57:39:bd:49:
b4:d8:a1:6b:71:8c:40:fa:41:d5:bc:a0:04:33:4f:36:72:92:
1d:87:70:3b:98:c2:eb:8b:33:e3:10:c3:8c:bd:18:7a:03:c3:
18:49:cd:60:f0:32:c1:60:96:3e:27:3c:35:68:e7:69:d7:2f:
59:34:21:82:0d:5c:70:a5:d6:2f:bb:61:7b:e7:ce:b9:51:9c:
b0:35:28:26:6e:49:a3:04:90:fa:c0:a9:3c:8a:e8:62:c2:df:
34:5b:ca:67:44:d4:95:31:98:87:7b:8d:c7:a6:e5:44:29:7b:
ab:22:c7:bf:ac:bb:35:ea:4f:7d:03:a8:2b:ff:d6:3d:bf:29:
8a:39:3b:b8:df:05:49:f5:2b:fb:32:1b:fb:15:46:46:32:80:
09:dd:c4:21:de:b0:d7:76:ef:1f:6e:d1:dd:f2:2e:b7:55:98:
a1:74:b5:09:f1:66:2d:ba:be:e8:35:15:8f:2c:a7:86:2b:9f:
a6:4d:04:2d:e8:72:a8:9c:d2:c2:d5:7e:ad:cd:00:4c:1e:82:
ba:84:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org