Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6E2A76141F11EF9B293267017001B1.roa
File: 9F6E2A76141F11EF9B293267017001B1.roa (raw, json)
Hash identifier: 3Ya8U/wdbuEMUIZ7kiuEwNafBTanZ3orjrtUcfau+XE=
Subject key identifier: 9D:31:8B:26:56:7F:9F:22:42:5F:CC:DE:4C:31:1D:C6:C3:96:F9:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B831
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6E2A76141F11EF9B293267017001B1.roa
Signing time: Fri 17 May 2024 07:32:32 +0000
ROA not before: Fri 17 May 2024 07:32:29 +0000
ROA not after: Thu 04 Jul 2024 07:32:29 +0000
asID: 44559
IP address blocks: 154.219.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47153 (0xb831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 07:32:29 2024 GMT
Not After : Jul 4 07:32:29 2024 GMT
Subject: CN=66470810-f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:40:46:98:3b:0c:3c:73:38:72:2e:b8:10:
f8:e7:29:f4:89:c0:eb:42:f5:61:97:82:c1:3f:3b:
1a:82:00:e9:c8:93:04:9f:7a:fb:c4:6c:50:a2:c3:
74:9c:02:cd:96:82:ef:27:66:1d:07:22:fd:5f:4a:
b9:3e:e8:ba:74:21:b7:e7:7c:42:8c:8a:d5:5b:fe:
f2:9e:3d:a9:2e:11:40:56:bf:c9:c1:2a:a3:91:f3:
24:19:0d:c5:ab:12:e8:b3:27:1d:6a:b9:50:f3:76:
37:fd:db:17:02:62:43:fa:08:b1:67:a4:cd:1f:80:
4e:38:88:46:c0:d1:f4:61:95:ad:43:14:9b:f2:d0:
55:6b:7f:8e:a7:54:f3:d1:5b:c6:80:90:35:18:77:
3d:2b:5a:75:05:23:59:74:4e:61:ad:c3:d9:48:eb:
d9:ce:80:cb:8a:ad:07:df:fe:8d:96:34:5c:7c:88:
33:86:b5:dc:e2:48:33:b9:a9:6c:fb:06:26:e4:2e:
99:d7:b0:bc:2e:8b:74:6f:d0:d7:7b:89:72:a6:65:
f9:9e:65:91:b9:1d:1f:31:cf:fd:e5:73:31:af:e9:
aa:d2:db:c0:c7:37:7a:93:07:e8:54:c6:3d:b3:59:
67:8a:08:41:92:2a:c6:4d:ea:3b:6e:05:38:12:17:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:8B:26:56:7F:9F:22:42:5F:CC:DE:4C:31:1D:C6:C3:96:F9:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6E2A76141F11EF9B293267017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:12:7e:eb:d0:f5:32:7e:1a:80:88:b5:e3:b4:9c:9d:7b:d4:
60:74:2d:6e:02:c2:05:dc:ce:78:a1:a2:05:f4:65:e6:b5:b3:
c5:b4:2e:d6:be:be:2f:cd:82:5f:ad:47:d4:2f:25:35:80:87:
6b:e2:23:4f:bf:d4:44:e2:76:cf:0d:d8:5e:dc:6c:d1:4e:01:
03:71:b2:67:d7:95:80:4e:97:2d:a0:0c:22:03:e5:d3:37:ed:
2c:ac:b9:ef:2c:92:64:6f:e1:a8:06:e2:fc:83:8d:b4:3d:f6:
ac:44:5b:16:49:42:74:7a:44:80:08:e9:f3:e0:0b:a2:bc:b5:
c0:d4:e9:22:f5:33:9c:a4:f9:32:5d:78:3e:77:05:63:fa:46:
8a:0e:bf:27:7d:38:b7:16:7c:e8:0e:4a:37:ab:b2:0d:df:9d:
e6:15:fd:50:e1:c2:0c:34:25:06:8e:a4:8f:70:e6:3c:19:6a:
f5:c4:85:78:d0:69:11:99:2b:0f:58:90:9d:94:97:dd:e4:55:
11:c6:b6:64:35:ee:ba:e9:56:00:88:10:c2:47:33:c1:52:14:
d7:e9:cb:5a:4e:44:a0:8a:6e:51:3d:b1:fe:ea:68:de:16:96:
ab:1c:d0:6d:53:34:95:af:a1:26:9d:98:17:11:fd:37:c6:d0:
19:28:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:09 2024 by rpki-client on console-fra.rpki-client.org