Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C479EA2FD2911EEB23FC23A017001B1.roa
File: 9C479EA2FD2911EEB23FC23A017001B1.roa (raw, json)
Hash identifier: TE4rbMcI+J8Fmim4RC38qH+X2LcDSzZV1+o6nfg07ao=
Subject key identifier: 11:98:6D:FA:24:F9:3D:4E:8C:87:7B:33:21:13:F0:75:CB:EF:F6:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C479EA2FD2911EEB23FC23A017001B1.roa
Signing time: Thu 18 Apr 2024 02:16:06 +0000
ROA not before: Thu 18 Apr 2024 02:16:01 +0000
ROA not after: Fri 24 May 2024 02:16:01 +0000
asID: 18779
IP address blocks: 154.203.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44521 (0xade9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 02:16:01 2024 GMT
Not After : May 24 02:16:01 2024 GMT
Subject: CN=66208266-7a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:d7:0a:7e:5a:ee:e3:f2:20:f8:f9:bf:ae:
a5:cc:6f:da:c1:f2:a7:bb:c3:13:8e:f4:5c:32:64:
9a:d3:09:59:5f:1e:f7:17:5e:f0:33:d8:55:29:d0:
ca:7c:35:c2:dc:94:e0:9d:2e:f6:b7:fa:64:16:a9:
02:d5:bb:b3:bc:1b:15:8e:ce:1d:79:fb:53:44:ee:
c7:f4:b4:49:d2:e8:78:79:80:40:d1:35:27:b5:a3:
53:46:33:f8:a6:59:b0:ef:4c:e1:86:4c:99:cc:1c:
e0:c3:d6:24:15:9e:13:b1:38:be:66:3e:81:cd:22:
e3:8b:ae:87:a2:1f:e7:93:9b:71:2b:34:63:f4:8a:
38:3d:ad:67:9f:47:ee:6e:c1:de:cc:5b:47:2b:59:
ee:30:8c:b3:d6:32:a6:8f:6f:cf:2d:a2:8b:3a:35:
88:41:5c:eb:58:9e:0e:f7:55:b3:35:9e:73:f1:01:
98:e1:be:e0:2e:d6:b0:37:f0:9e:a1:14:76:3f:03:
ca:e0:13:8c:98:ad:35:62:ed:b5:39:e9:50:04:eb:
37:32:6f:44:e0:a3:fc:f9:98:22:00:99:e5:bf:a4:
12:bb:fd:98:81:88:a5:40:af:e0:45:9f:08:24:79:
7f:bc:eb:16:03:dd:4f:dc:72:ec:a6:0d:b5:a2:65:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:6D:FA:24:F9:3D:4E:8C:87:7B:33:21:13:F0:75:CB:EF:F6:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C479EA2FD2911EEB23FC23A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.62.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ad:9b:9d:53:6d:50:23:87:84:5f:08:6f:0c:e8:ec:8f:3a:
84:4c:58:eb:be:64:8f:8a:40:4b:28:99:bb:c6:c9:0d:7d:64:
f1:73:72:9f:2e:a6:d3:4d:c8:b0:bc:28:d4:18:7c:e2:0e:eb:
22:71:ea:ba:e2:b9:f0:36:65:a5:18:9c:7a:ca:99:42:36:d8:
ee:46:8a:9b:48:a8:1b:96:9f:a6:97:83:be:15:97:63:fd:d7:
c6:9d:8a:80:a1:42:ab:d0:67:f2:5f:7d:8a:ca:03:d4:76:43:
75:23:50:af:1b:ee:07:d6:2e:90:ce:83:7a:5b:78:c2:65:12:
a3:95:ef:ff:56:88:55:62:9d:a6:81:50:4f:be:e9:52:9b:69:
ef:8b:8c:47:f4:67:f1:18:a7:14:0d:55:96:6d:db:e6:cc:17:
ce:f7:b7:50:b8:16:3c:df:6d:fb:37:33:83:cb:a7:8d:8f:bb:
84:7e:fe:9d:06:1f:32:42:19:2d:cb:3a:19:43:13:53:0c:dc:
aa:03:a1:5c:5a:26:59:49:84:4c:5c:67:5a:1c:2a:a7:33:8c:
fb:1a:78:b3:c0:ed:c2:f2:fa:35:c0:a6:3c:f6:eb:0d:48:00:
44:91:ed:d3:1f:92:f2:4c:c8:7d:15:27:95:1b:52:43:a4:a6:
97:b1:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org