Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6014076F7C811EE8B449A6B017001B1.roa
File: A6014076F7C811EE8B449A6B017001B1.roa (raw, json)
Hash identifier: /BuAb8lxez5eOlC7uG65tkye5K3+o+qyygsjdeIxQsA=
Subject key identifier: 3B:48:6F:00:11:33:98:C2:79:4F:3F:47:6E:26:95:F2:31:EF:F5:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6014076F7C811EE8B449A6B017001B1.roa
Signing time: Thu 11 Apr 2024 05:59:25 +0000
ROA not before: Thu 11 Apr 2024 05:59:21 +0000
ROA not after: Sat 20 Apr 2024 05:59:21 +0000
asID: 7018
IP address blocks: 154.90.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 05:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43857 (0xab51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:59:21 2024 GMT
Not After : Apr 20 05:59:21 2024 GMT
Subject: CN=66177c3c-d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:e1:b1:6a:d8:d8:51:86:06:1c:42:0d:cd:
5f:4a:1f:52:40:8a:9d:de:22:03:0a:bf:7f:a8:d7:
0f:05:23:c0:d6:f8:5a:84:94:bc:b1:a5:46:e8:9a:
72:36:dd:3b:5b:af:f9:1e:9e:94:05:d0:ad:5c:f6:
4e:fc:73:3b:1b:25:a6:d3:95:eb:cd:e0:5e:60:46:
00:02:32:17:0b:63:aa:ef:40:d1:71:3c:2e:08:8d:
b2:05:a0:9b:ee:94:10:f6:a2:11:50:a4:6c:1a:73:
75:eb:22:4f:87:57:a2:ab:33:b3:fc:69:7d:78:71:
98:f7:8a:c3:4a:df:f6:96:ed:8d:d3:7d:07:b9:f9:
6c:88:2f:a4:93:cb:e8:75:40:d6:be:ce:27:8f:9c:
2d:2e:58:ee:35:c9:04:2c:4c:23:d4:73:09:76:1b:
8a:c0:3f:fa:58:12:ca:a3:9c:9d:6e:8d:bf:28:49:
c6:76:eb:fb:ad:6b:58:f0:c8:a7:bd:22:9c:3c:71:
f1:fe:5a:99:43:1b:9b:2f:7f:39:c0:2a:64:f6:58:
1b:1d:8f:cf:c4:da:29:55:4c:ae:04:da:b2:0e:34:
d1:b4:e4:38:e2:05:51:37:1d:fc:0b:ab:4d:f8:9b:
2e:2a:37:21:b5:b0:f5:0e:ad:60:32:a1:5e:56:31:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:6F:00:11:33:98:C2:79:4F:3F:47:6E:26:95:F2:31:EF:F5:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6014076F7C811EE8B449A6B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:88:fb:0c:f9:8a:60:3d:47:dc:6f:48:69:e6:2d:c7:a0:65:
74:f1:07:e8:fd:6c:a6:86:10:b4:8b:93:24:07:8d:bb:14:83:
02:c0:aa:01:34:17:1b:2a:de:fc:b6:16:cb:9e:55:dd:2f:f3:
d0:5a:fa:0a:98:d3:2c:53:2b:15:ca:99:bb:da:12:b2:27:45:
59:08:a3:f9:0b:4d:28:9b:81:87:a0:19:3e:0e:2a:a1:92:54:
0d:ba:fa:0a:0f:82:fb:69:79:11:e5:4a:07:cf:bc:14:ef:b2:
f3:f2:0f:27:e9:8f:e9:99:8b:e4:e3:51:fb:a0:93:9e:6b:aa:
b6:f6:3c:f7:71:f6:f0:0c:d1:b7:3f:cb:32:5b:cb:4a:1a:47:
f8:86:a9:93:3b:08:da:a0:fa:a7:1d:20:a0:31:a9:bc:37:65:
a3:99:7e:60:ab:a0:0d:0c:a8:76:19:aa:d3:91:1c:9f:13:62:
d6:38:69:80:ac:7d:f5:fc:cf:b8:8e:c3:35:97:89:ea:17:04:
4e:42:bb:21:1d:bf:9e:fc:55:37:e4:f2:1f:74:d0:bc:b0:61:
2c:d4:a6:9a:36:b9:92:09:ef:6d:c1:64:85:36:a5:15:e5:c1:
cd:20:4c:e2:02:8f:72:63:53:a4:a8:21:a0:c5:d9:d5:e4:58:
ee:d8:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:31 2024 by rpki-client on console-fra.rpki-client.org