Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54A8CEAA63911EEA1F25CB2775412E6.roa
File: A54A8CEAA63911EEA1F25CB2775412E6.roa (raw, json)
Hash identifier: Q0VcoZxWPMacYNYUkXTVPFMtda4ORl7hx+YxdkhuksM=
Subject key identifier: 44:20:0B:92:BA:AF:2A:52:F9:3A:53:DF:14:F5:35:71:7F:2A:62:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6AE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54A8CEAA63911EEA1F25CB2775412E6.roa
Signing time: Fri 29 Dec 2023 11:01:41 +0000
ROA not before: Fri 29 Dec 2023 11:01:38 +0000
ROA not after: Wed 01 Jan 2025 11:01:38 +0000
asID: 139805
IP address blocks: 154.201.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27361 (0x6ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 11:01:38 2023 GMT
Not After : Jan 1 11:01:38 2025 GMT
Subject: CN=658ea715-954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:ff:25:83:eb:59:d4:b8:a7:1c:a9:12:5c:
b7:2a:09:fe:0d:16:52:0a:06:74:74:12:dd:ca:68:
48:13:90:83:a2:d0:34:38:29:e1:1b:c3:4f:5a:cf:
e2:87:22:f4:75:2b:2d:31:dc:cb:2f:a2:ca:df:e9:
5d:b1:71:90:e3:35:2a:c5:78:95:c0:7b:87:1f:6b:
c5:60:ab:b8:37:29:5d:d5:0a:7a:18:46:90:e8:c1:
68:e1:21:90:99:3b:69:e6:c4:b7:0e:67:cb:03:78:
2e:9b:14:63:91:0e:22:ad:d5:2c:66:a8:13:cf:11:
a0:b9:75:f9:b6:f0:a9:17:fb:07:29:77:e5:0b:7f:
a9:d5:a1:1e:68:b8:6a:73:3e:f9:8c:32:a2:4b:db:
c3:fb:de:63:39:e8:fd:40:7d:67:bf:51:1a:60:89:
9a:3c:de:41:51:e3:8b:91:ec:b6:9c:59:07:84:52:
a4:f7:0b:44:ec:9c:de:fc:e9:8f:a1:ff:a5:cc:c1:
49:9f:51:75:da:0e:a0:81:55:92:bd:0d:54:61:e1:
47:23:ee:9a:8d:88:1a:29:42:c7:2a:5f:9f:df:54:
b8:3b:af:92:5b:2f:7f:2c:3f:4d:bc:9f:d7:c5:71:
e3:50:eb:03:13:e7:65:b3:6e:40:1f:53:a1:32:f0:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:0B:92:BA:AF:2A:52:F9:3A:53:DF:14:F5:35:71:7F:2A:62:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54A8CEAA63911EEA1F25CB2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.4.0/24
Signature Algorithm: sha256WithRSAEncryption
70:66:24:fd:14:8a:a8:f5:a0:99:6b:a8:d2:77:80:1a:e6:e8:
b7:83:ab:f3:8e:c6:a0:03:22:e7:8c:6b:25:15:3b:93:f5:90:
7b:f0:dc:41:81:b9:04:e4:85:af:fe:0f:e8:2a:fa:3d:d9:f4:
c9:84:09:8d:09:f1:05:76:49:00:f9:cc:ad:bd:86:08:a9:4c:
31:0c:c8:ac:de:dd:f0:d9:0e:72:4e:a6:76:ef:48:3f:63:f0:
3e:9e:1e:fa:d4:14:b0:3b:c1:75:40:a9:5a:c5:cb:2f:e7:e9:
72:a4:62:71:b9:d3:05:46:5c:c2:db:c7:31:9d:e6:23:bd:dd:
d6:12:be:f3:72:e4:46:a1:ab:d9:f2:0c:65:af:cb:81:f6:a4:
f8:3f:4d:01:ed:a8:f3:17:b4:2c:27:0c:b9:9c:4f:e9:42:6f:
d8:41:6f:e5:4d:f8:68:7e:92:1a:9d:29:65:5e:16:c9:aa:eb:
cb:3f:f8:5c:ee:d3:eb:cb:85:95:10:d9:b9:bc:8e:c8:d4:91:
f7:ca:a6:b3:40:23:02:fd:72:a8:6a:e5:d5:f2:ea:d3:3e:72:
85:8e:e5:99:6f:0f:ba:80:0d:d4:bd:ac:88:5f:d9:c6:94:19:
08:7d:fe:73:b5:c1:1a:8b:20:05:6d:0d:cc:ce:c0:65:ce:27:
ed:1e:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org