Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A534E803C911EFB6555F3F017001B1.roa
File: A7A534E803C911EFB6555F3F017001B1.roa (raw, json)
Hash identifier: +7WE1B53my7xdhmDzsNWUHga4nQ8w6yQwQ2yiWqnRvM=
Subject key identifier: E0:13:05:AD:6E:7E:A1:86:B4:22:E7:EF:39:1A:2F:51:99:1B:9A:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A534E803C911EFB6555F3F017001B1.roa
Signing time: Fri 26 Apr 2024 12:36:51 +0000
ROA not before: Fri 26 Apr 2024 12:36:47 +0000
ROA not after: Sun 06 Jan 2030 12:36:47 +0000
asID: 984
IP address blocks: 154.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45478 (0xb1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 12:36:47 2024 GMT
Not After : Jan 6 12:36:47 2030 GMT
Subject: CN=662b9fe3-d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:69:b5:0c:e0:5a:7f:83:49:55:47:63:c7:
6a:94:2f:50:80:c5:8a:6e:0a:f7:f5:df:5c:9f:36:
a2:dd:48:65:3c:c0:24:eb:be:b3:52:18:37:3e:0b:
de:7e:fe:5a:17:87:fd:c1:c4:85:c3:3a:86:79:f4:
1f:81:3f:38:27:6c:6d:4e:ac:35:79:f1:43:91:c1:
be:f4:7d:3f:cb:bb:aa:14:18:b0:df:5d:63:3f:ff:
55:a3:d7:2e:a5:31:10:55:63:3b:bf:c9:c3:87:ed:
1b:61:0f:e2:24:24:46:f9:a7:58:3f:f4:10:49:f7:
d0:07:69:98:f0:ac:cc:86:57:56:0a:85:fa:89:57:
cd:5c:71:be:37:48:51:5f:b7:34:51:04:94:3d:88:
fa:ff:6f:1c:61:58:af:29:05:03:5e:9c:dd:89:f6:
01:bf:9b:a9:8b:33:69:19:d6:3b:67:30:95:b7:3b:
0c:b5:81:b3:fd:d3:aa:32:c1:22:4e:36:c3:1f:9c:
44:cf:92:f1:16:00:f5:c3:9b:16:55:7a:52:66:01:
82:24:e1:1e:92:0e:e0:75:d8:85:25:10:d2:ae:b7:
b6:97:0f:d3:ef:96:d5:ef:e5:00:5b:e1:d2:aa:f8:
0c:80:e7:a9:8b:cd:fc:8f:ee:2d:6a:8f:44:79:51:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:05:AD:6E:7E:A1:86:B4:22:E7:EF:39:1A:2F:51:99:1B:9A:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A534E803C911EFB6555F3F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4a:6e:11:03:2d:c8:66:91:29:ba:9a:76:a2:4f:43:f5:15:
39:eb:a9:5b:1b:8f:31:60:f6:8f:21:ab:bf:ff:6c:26:f6:f5:
ce:c8:73:6f:73:5c:0a:61:fb:a4:03:bf:00:00:7c:5c:36:d4:
1e:74:30:16:68:b5:b5:8d:e7:ff:bb:7a:90:4c:d0:18:37:f8:
da:0f:e9:b0:71:b4:85:61:e4:2b:bd:b9:4b:86:3e:71:43:51:
2e:4f:2a:2b:ca:ab:68:26:61:c1:b4:5e:31:a0:28:8f:ad:06:
16:c7:36:c7:dd:22:5b:3e:85:4a:84:22:f9:a5:8a:9d:dc:26:
2c:44:cb:81:6d:4b:48:6f:29:79:8b:35:71:34:25:23:38:ef:
82:9d:ee:f2:db:50:0e:55:07:79:0c:b4:21:ef:f0:2e:5f:89:
7e:e7:75:cf:0e:17:0c:f4:95:61:20:95:7c:76:e2:cc:0a:a5:
54:88:1e:bb:be:f9:7b:6f:11:68:8b:99:86:ff:97:8c:5c:e3:
b8:8d:b0:b9:b4:15:a0:fc:af:47:03:59:6f:41:77:1a:98:d3:
58:8a:ae:db:0d:c7:24:ef:72:86:7d:85:0c:93:85:01:66:76:
86:8d:13:4d:0e:8a:d0:4b:7f:74:e4:f2:02:fc:20:92:7a:8e:
17:f6:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:21 2024 by rpki-client on console-ams.rpki-client.org