Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54781B6F7BB11EEA3114C02017001B1.roa
File: A54781B6F7BB11EEA3114C02017001B1.roa (raw, json)
Hash identifier: jB6mDXVhk+/lmrsTsBVNcaxqc8Cbbe5yfcSw8vSyoXc=
Subject key identifier: A0:05:86:96:65:6B:D3:83:A9:5D:F1:D6:65:6D:CB:AF:89:26:93:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54781B6F7BB11EEA3114C02017001B1.roa
Signing time: Thu 11 Apr 2024 04:26:20 +0000
ROA not before: Thu 11 Apr 2024 04:26:17 +0000
ROA not after: Wed 09 Apr 2025 04:26:17 +0000
asID: 137443
IP address blocks: 154.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43771 (0xaafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:26:17 2024 GMT
Not After : Apr 9 04:26:17 2025 GMT
Subject: CN=6617666c-6a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:05:fb:32:22:04:01:6c:ef:59:dc:07:35:
4f:28:cf:f9:3f:d6:d1:38:73:1a:f5:e7:96:74:58:
6a:f9:b4:45:2d:b1:be:7f:06:6d:af:0b:8b:3e:97:
27:54:38:c3:2c:26:fd:52:58:2b:8a:64:0b:f5:7e:
7c:ed:91:05:a8:91:a3:bd:b0:ba:de:a7:1b:70:89:
89:53:ad:84:09:d9:10:36:18:1c:1c:7a:0f:fb:6a:
9a:3b:85:8c:7f:40:95:ea:6d:14:98:40:e2:88:0d:
0e:fd:fd:28:16:3d:5b:0e:6c:fe:a8:43:4a:a1:8c:
89:9d:a1:51:09:da:c6:da:94:04:ac:8e:49:0d:3a:
07:4d:66:c7:28:9b:86:7e:4b:3e:85:b4:8c:5f:7c:
34:79:ac:46:39:94:c5:fe:0e:06:e0:61:0b:31:83:
bf:d5:f0:90:3e:db:8a:15:3c:a0:a5:06:4a:31:5f:
5a:09:83:2a:fd:c4:dc:1f:cc:8f:04:9d:0a:ae:c6:
9c:3c:fa:58:5c:09:55:2c:f3:cd:91:09:dd:eb:c8:
b8:e5:fb:9a:d3:b2:dc:89:2a:59:51:4a:a3:cd:e3:
7d:c7:6d:59:cf:43:99:54:aa:80:29:0f:79:fe:75:
a8:2e:53:70:5d:e4:a2:30:ab:95:bf:9f:79:f6:fc:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:86:96:65:6B:D3:83:A9:5D:F1:D6:65:6D:CB:AF:89:26:93:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54781B6F7BB11EEA3114C02017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:43:0e:c0:df:53:ee:8a:4c:27:1c:a2:54:2b:fa:a6:7b:d1:
46:37:23:41:42:2a:e2:d4:f6:b2:8b:e2:1d:a5:a3:4a:bb:27:
64:68:db:a1:59:99:f3:ae:5e:cc:90:3e:3a:a4:6c:eb:60:56:
c1:4e:9f:ae:21:54:13:d1:25:18:08:61:5c:c0:a6:eb:13:38:
d9:2b:8d:4f:39:b7:da:e8:97:9d:04:ae:4d:72:33:fd:1f:08:
b8:72:72:45:1d:ee:e8:b1:88:33:34:cc:c6:16:9b:14:ae:82:
a2:08:87:c2:7c:bf:d8:10:db:c9:80:00:26:40:fa:7b:fe:ad:
5d:dc:9c:1e:49:64:43:2a:15:3e:99:ed:49:d3:b2:94:0e:44:
af:08:87:da:ff:56:00:f9:80:a1:e1:cb:c5:07:dc:62:45:70:
37:2a:96:f0:bc:aa:bf:bb:d6:1e:4d:2f:b9:85:94:24:63:dd:
56:b4:fc:3d:20:8d:25:55:23:f8:9b:92:7b:e0:3d:58:6e:7b:
d8:b0:6b:8d:b3:9a:6a:6b:ae:8e:b5:9d:b2:34:6f:10:25:b6:
6d:0d:9c:b0:7e:33:90:53:ab:bf:f3:9b:9a:f3:2f:50:cb:8f:
c9:f9:07:e2:06:c2:66:d6:31:31:b5:90:6d:fb:6b:d4:d1:f5:
0f:6e:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:10 2024 by rpki-client on console-ams.rpki-client.org