Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA26EB5CEDB811EEB2F108B7775412E6.roa
File: AA26EB5CEDB811EEB2F108B7775412E6.roa (raw, json)
Hash identifier: ziOqLrNiGMFRSIDrl4p7eiK5pl9ZOS5be2xQEFmq/wQ=
Subject key identifier: 94:32:D4:69:5B:C6:73:D8:20:F1:3D:C5:6F:5C:BA:64:D8:AB:B2:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A737
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA26EB5CEDB811EEB2F108B7775412E6.roa
Signing time: Fri 29 Mar 2024 10:39:48 +0000
ROA not before: Fri 29 Mar 2024 10:39:45 +0000
ROA not after: Sat 04 May 2024 10:39:45 +0000
asID: 142062
IP address blocks: 154.86.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42807 (0xa737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:39:45 2024 GMT
Not After : May 4 10:39:45 2024 GMT
Subject: CN=66069a74-159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:7c:3e:36:d8:8a:00:b2:66:ea:97:bf:d3:
8c:b0:aa:5c:d0:1b:3a:47:03:d8:df:9c:88:50:98:
9d:70:d7:49:82:ef:18:3d:47:65:19:2a:4d:ba:7f:
e3:0d:d8:99:b6:b4:75:e2:9f:ed:85:19:16:2b:f5:
34:e3:60:63:78:b9:2e:d0:51:45:fe:ad:43:69:9c:
f0:56:14:0e:3a:b8:e7:11:89:21:ac:15:fa:5d:59:
02:ec:a4:4d:a2:ba:57:a8:63:f6:6e:5a:af:36:8a:
d2:e5:8d:5b:98:da:d3:38:9b:cf:7a:e6:80:2d:b8:
75:d4:ed:50:3d:4c:eb:7f:36:62:16:1f:55:25:37:
c7:7b:29:c6:ce:fb:93:3b:0a:5d:74:16:90:ae:35:
0e:a2:bc:ab:ef:ea:98:92:d5:51:1f:f7:21:2d:b5:
72:63:e6:1c:bd:09:23:f2:48:37:87:de:97:75:a4:
0b:53:62:75:b1:21:91:d0:e2:03:4d:85:88:75:7e:
9e:cb:2b:f3:db:db:49:a4:04:75:b9:51:09:59:c8:
ca:74:a1:4e:e1:b7:e9:e3:f8:a2:c7:83:fe:55:3e:
d8:aa:4a:7a:bc:65:88:a9:b3:40:48:77:a5:ca:da:
c4:0f:08:b0:a8:bd:7c:36:71:29:88:a0:8c:e4:ed:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:D4:69:5B:C6:73:D8:20:F1:3D:C5:6F:5C:BA:64:D8:AB:B2:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA26EB5CEDB811EEB2F108B7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:19:66:68:91:06:79:b7:a7:af:b6:ab:e1:cc:91:a8:78:99:
d6:7c:4e:7a:68:96:d1:6d:d0:76:fe:b6:29:10:d5:71:31:92:
d5:01:46:86:71:63:66:cd:f9:6e:e8:95:cc:aa:1d:64:30:48:
3b:cc:5b:40:73:79:19:3a:e0:27:47:df:2a:bc:32:5d:2b:e0:
de:05:9b:6a:19:b9:c7:19:e8:04:19:c7:3b:ce:4a:90:6d:16:
43:39:e1:e5:a2:b4:3b:b8:b0:5e:de:82:be:d5:5d:19:16:aa:
3c:41:12:ea:52:3a:c3:1c:62:e2:1b:9a:d5:34:77:0d:cf:27:
22:23:79:7e:17:7d:5b:64:a3:e3:e3:18:a5:a4:d2:ce:ec:a1:
81:09:41:79:1b:35:62:6c:53:2c:3f:d0:e3:5b:35:2e:9b:b6:
8f:12:8b:95:49:69:be:91:57:60:91:58:83:6e:19:3e:87:8a:
26:86:33:80:bf:a9:41:f9:39:06:33:02:70:ae:bc:99:f0:4d:
b4:3e:be:8c:3d:77:1f:1c:98:95:b9:b2:5d:36:3f:48:8d:03:
84:19:63:5d:e2:27:fb:9b:e4:40:b2:42:df:28:f8:42:b7:d1:
ef:20:d5:25:d2:d2:47:b6:7b:a3:63:bd:d5:31:32:80:bc:c6:
06:61:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org