Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E0984806CC11EF8FD81153017001B1.roa
File: 98E0984806CC11EF8FD81153017001B1.roa (raw, json)
Hash identifier: MjI0fkVFhpGAQWCo2DgiqJvr0gApKBxQfPvn5h8+W0k=
Subject key identifier: F5:73:D9:B2:CA:A0:38:9D:4D:03:A5:A8:B6:6E:EA:0F:2F:56:93:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B283
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E0984806CC11EF8FD81153017001B1.roa
Signing time: Tue 30 Apr 2024 08:35:28 +0000
ROA not before: Tue 30 Apr 2024 08:35:25 +0000
ROA not after: Tue 28 May 2024 08:35:25 +0000
asID: 984
IP address blocks: 154.82.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45699 (0xb283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 08:35:25 2024 GMT
Not After : May 28 08:35:25 2024 GMT
Subject: CN=6630ad50-a19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:fa:25:63:63:62:11:8f:11:b5:b9:4e:ef:
35:df:c0:3c:9c:dd:e3:f3:87:5d:64:be:a1:8e:5e:
41:e3:08:8c:97:77:90:34:00:6c:d0:0d:1d:f0:c0:
e1:c6:0c:0e:51:4b:5d:3f:a5:58:1b:0b:a4:c3:97:
c0:7b:bb:b2:e4:ee:2d:bd:3c:d5:2f:40:d4:e9:d7:
2a:e5:9e:66:fd:e0:18:12:0c:ef:06:3c:9d:d6:99:
59:4c:72:66:9b:a7:48:20:94:86:8a:97:b7:01:d4:
89:07:5f:dd:a6:f1:42:d8:b0:ec:e3:97:97:2e:a0:
ca:f4:2e:76:7c:e0:11:88:7e:d2:86:20:a1:74:40:
03:43:20:10:cb:f3:52:55:49:c5:04:30:d1:06:4e:
85:a2:70:84:90:92:22:9d:98:23:4e:21:ed:e7:6e:
06:bf:3d:23:84:62:5f:a0:45:82:7a:f9:04:f1:bd:
d4:4e:c8:db:29:81:25:fc:89:e7:52:d7:8b:11:b7:
a2:61:8f:04:d2:9e:fa:4f:25:b2:28:b3:19:a6:09:
25:f1:c7:5e:c4:e2:4f:a8:a6:43:69:13:f5:cb:7f:
05:1b:7b:3c:78:9e:c6:6a:c8:d6:0a:77:b2:36:47:
7f:fe:85:ab:5e:1e:61:0c:90:76:d1:b5:30:80:1c:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:D9:B2:CA:A0:38:9D:4D:03:A5:A8:B6:6E:EA:0F:2F:56:93:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98E0984806CC11EF8FD81153017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.135.0/24
Signature Algorithm: sha256WithRSAEncryption
93:92:1e:6c:d7:fe:96:08:f5:28:f2:2c:87:1b:8d:67:ae:22:
14:88:4b:7f:69:af:3e:d6:e6:4a:44:11:63:45:54:41:39:ab:
3f:97:05:4e:9e:8a:3b:5b:cb:98:09:0b:81:3d:b7:65:e7:94:
54:3c:24:9e:5f:61:e3:87:3c:0d:bf:b1:2f:02:92:9a:93:e2:
84:35:92:9b:38:38:f8:76:47:ed:6e:89:ca:74:87:1d:bb:b6:
92:de:b7:73:78:63:36:bc:aa:bb:12:1c:47:f8:cc:94:60:eb:
e9:88:31:91:a9:5b:66:ab:ea:91:e4:1b:67:69:43:46:86:20:
c3:07:20:05:68:dc:b5:ab:89:da:6e:8c:e7:1e:92:4d:d8:46:
52:a4:13:9d:d5:4e:ba:88:07:e5:e9:ac:bd:84:64:9d:4e:53:
74:52:e0:df:1c:6d:b7:fc:8d:f1:f6:c6:45:ae:44:ea:56:14:
dc:08:5f:2f:d3:d2:8d:f6:f7:1b:7b:9e:06:30:21:01:35:8f:
6b:4c:a5:4a:e1:3d:21:f5:ce:94:a6:40:42:f9:72:85:70:46:
07:a5:95:84:c8:cd:72:13:68:8d:50:2f:02:e1:98:cd:3b:64:
a0:c4:2d:24:99:0b:6c:35:99:69:f1:b6:5c:c2:3f:32:bb:0b:
92:de:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:03 2024 by rpki-client on console-fra.rpki-client.org