Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97CA083CFAEB11EEA142ADFB007001B1.roa
File: 97CA083CFAEB11EEA142ADFB007001B1.roa (raw, json)
Hash identifier: 0viXIiprv5FSRicxetUNA/qZbo1Ne5XRo7kiG/+U+mE=
Subject key identifier: AE:AC:34:23:C2:11:AB:5D:9A:07:CC:5C:11:CE:5D:3E:7C:95:A3:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97CA083CFAEB11EEA142ADFB007001B1.roa
Signing time: Mon 15 Apr 2024 05:47:07 +0000
ROA not before: Mon 15 Apr 2024 05:47:03 +0000
ROA not after: Thu 30 May 2024 05:47:03 +0000
asID: 63139
IP address blocks: 154.93.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44204 (0xacac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:47:03 2024 GMT
Not After : May 30 05:47:03 2024 GMT
Subject: CN=661cbf5a-7429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:62:7b:35:98:bc:f3:c4:be:37:c9:4f:e9:
f1:5d:98:fc:4a:52:43:23:24:dd:9c:2c:3f:a3:20:
cf:94:1e:fc:02:03:44:56:e0:f7:dc:06:d6:61:c4:
5b:8c:5e:b9:ae:e1:e8:83:94:0e:bb:fc:2d:a9:95:
82:5a:50:dd:08:e3:0a:29:fe:c8:26:0f:6f:ed:78:
ce:a2:b7:54:72:44:be:40:ef:f7:b4:44:ae:71:34:
33:21:96:40:52:6a:96:14:68:77:52:19:94:12:06:
cc:c0:c3:8d:5a:e4:97:0f:7f:9d:e6:3c:87:a7:10:
f7:5e:a4:85:1d:7d:a9:88:a6:f1:d0:60:f1:f0:92:
65:9d:7f:fe:50:b0:28:51:92:cc:ef:c2:92:0f:dc:
f2:df:24:74:bb:bd:8e:b7:00:a3:e7:a9:c5:29:5e:
76:21:b0:c5:86:5c:0b:79:64:74:64:ae:82:28:10:
23:45:70:ed:7e:68:b8:f4:ba:7b:55:38:b5:86:f9:
c6:d6:44:9b:c2:78:ba:a9:94:f7:ce:93:24:b0:cf:
56:bf:fe:3e:7b:4f:ca:20:30:1b:f9:3e:73:44:a9:
f0:38:c3:cd:df:20:0b:61:cf:31:b0:d8:97:76:83:
72:f2:33:05:4b:94:d9:ce:05:72:f8:5b:42:9a:ef:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:34:23:C2:11:AB:5D:9A:07:CC:5C:11:CE:5D:3E:7C:95:A3:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97CA083CFAEB11EEA142ADFB007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.68.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ce:7f:50:db:26:cd:1e:39:15:47:87:47:62:c1:85:da:7f:
a8:30:5e:17:d2:3e:3d:9c:b0:a2:03:ac:06:68:22:95:df:e3:
44:3b:fd:fa:b2:ad:9b:d8:99:7e:69:c4:d7:48:c0:7e:70:37:
88:7d:14:4a:ec:45:ca:f1:8c:69:60:0c:05:15:66:2a:86:37:
4b:b0:1f:58:4d:ac:55:5e:f6:f1:cc:19:5d:0f:58:1b:1f:ec:
be:63:3e:9a:ad:06:42:a6:e6:90:7b:ca:6e:78:33:0b:c9:c5:
86:02:e5:29:65:a3:fc:05:47:3e:1c:12:14:3f:22:3d:d6:72:
d0:93:14:dd:64:2a:66:41:13:64:b7:0b:dd:cc:af:9d:a7:9c:
36:da:9a:4d:95:fa:6a:4c:e0:cb:86:7d:4d:b2:26:18:92:c7:
fd:27:b3:91:bf:93:3a:9c:78:f1:e3:59:eb:90:70:12:c5:17:
a2:bb:7c:a5:28:18:4d:f0:4f:92:90:d8:3c:e8:06:98:4f:4a:
b6:f9:b5:a1:bf:20:7c:6f:4b:e5:07:af:51:1a:9e:8d:20:f9:
b3:1d:05:bd:47:08:3b:df:e9:5b:db:85:9e:93:6e:bd:73:9e:
93:98:f7:ca:d9:36:2e:ca:c7:95:aa:0e:c8:26:5f:10:f1:cc:
68:77:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org