Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A932DCBE183911EFAFAC2F51017001B1.roa
File: A932DCBE183911EFAFAC2F51017001B1.roa (raw, json)
Hash identifier: BXgPlEX+P7LSg6Mzmqhakgs5/irNaIYtk95P0iyfLiI=
Subject key identifier: 5A:62:33:FB:3D:30:F8:82:A1:74:E5:27:F0:22:91:06:BA:CE:38:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B9A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A932DCBE183911EFAFAC2F51017001B1.roa
Signing time: Wed 22 May 2024 12:49:00 +0000
ROA not before: Wed 22 May 2024 12:48:57 +0000
ROA not after: Sat 03 May 2025 12:48:57 +0000
asID: 63199
IP address blocks: 154.203.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47528 (0xb9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 12:48:57 2024 GMT
Not After : May 3 12:48:57 2025 GMT
Subject: CN=664de9bc-b403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:93:a9:cd:47:9e:77:98:5f:92:fd:3a:21:
0a:3a:45:1f:c5:eb:11:51:bf:f5:0d:b4:23:0f:4f:
03:dc:a8:7a:96:fb:80:c6:d3:f9:20:f4:23:40:97:
4e:8d:82:9e:f4:b2:ea:0d:fe:59:f3:04:64:60:d5:
8f:11:e4:32:43:48:e0:68:b1:3e:2b:c0:6d:3b:7b:
09:fd:dd:57:65:6f:c6:e5:32:26:39:71:53:61:36:
3b:1d:cb:1e:bb:5f:81:43:46:cb:ad:6a:28:c9:f6:
62:99:36:31:c3:5d:42:dd:a9:85:3d:89:ae:f5:fb:
2f:71:69:2e:6e:4f:a0:96:8a:7a:dc:52:e7:67:7c:
40:49:f3:cc:c4:13:16:dc:67:ba:6a:92:92:a4:87:
a4:3e:fe:2d:d6:58:c4:4b:73:6e:06:9f:27:97:5c:
00:80:95:e6:65:23:41:08:91:01:a4:1f:fe:be:e4:
33:fc:97:e3:bf:8f:ca:cb:12:ed:dd:a6:a2:0d:5b:
ee:98:0c:3f:63:13:05:ac:d5:d0:06:a7:42:98:39:
fe:75:03:54:61:74:69:79:cf:10:c8:09:2b:11:e1:
cb:a9:df:97:f3:8f:97:97:fc:1e:0f:e7:2c:a7:d0:
8f:fc:a7:34:b5:5e:fa:37:56:1b:ca:21:a3:3a:88:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:33:FB:3D:30:F8:82:A1:74:E5:27:F0:22:91:06:BA:CE:38:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A932DCBE183911EFAFAC2F51017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:74:41:df:c6:19:d2:9c:47:fc:8c:2c:28:0a:39:7b:4c:77:
f8:1c:0e:e7:62:95:d5:1e:e4:82:63:87:ea:a5:d0:0c:eb:74:
d4:cf:3e:a6:f6:10:6a:9a:88:d3:5d:11:fd:51:20:b2:c5:40:
79:a8:f6:a3:1f:96:e6:d6:95:f3:71:4d:b9:b5:fc:23:8c:65:
8d:8c:e3:3e:e9:78:b7:29:6a:0b:35:93:fb:e7:fc:01:7c:9f:
fd:de:e7:e2:91:cb:40:ca:bf:47:1f:f4:e1:17:d9:b0:9c:0c:
2d:01:0b:b4:db:da:6a:4d:67:22:c9:83:86:ce:0b:62:17:e9:
20:76:b0:e3:6a:05:09:96:b9:e0:09:20:33:b8:2f:a3:54:1b:
a8:73:bf:fe:83:eb:02:c4:ca:8c:33:79:e3:c1:73:d4:02:85:
fc:04:3c:d9:b8:4d:b3:64:39:96:87:9a:7b:48:88:6e:7d:aa:
15:b5:52:0e:93:e3:dd:49:85:3e:84:81:07:8b:90:d6:8d:3e:
de:7c:44:a2:02:24:69:50:6a:33:51:fe:40:c7:87:b2:7a:cb:
c3:d4:c2:0f:50:8e:8d:95:67:f5:4f:7d:07:4d:ae:02:bb:3f:
40:fd:76:16:8f:56:da:c9:5c:ce:07:f7:13:45:fa:d6:62:f1:
5f:7e:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:19 2024 by rpki-client on console-fra.rpki-client.org