Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC80030EF7C011EEAF44992A017001B1.roa
File: AC80030EF7C011EEAF44992A017001B1.roa (raw, json)
Hash identifier: LjMTL7zzMEcn4JXz6TP1rMFvlRrhacy9Gq1HXd8/Ngo=
Subject key identifier: F3:0C:05:EF:65:71:D6:8D:51:A1:AA:EC:5B:25:5A:9D:F0:B4:62:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC80030EF7C011EEAF44992A017001B1.roa
Signing time: Thu 11 Apr 2024 05:02:19 +0000
ROA not before: Thu 11 Apr 2024 05:02:16 +0000
ROA not after: Sun 19 May 2024 05:02:16 +0000
asID: 138915
IP address blocks: 154.93.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43817 (0xab29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:02:16 2024 GMT
Not After : May 19 05:02:16 2024 GMT
Subject: CN=66176edb-7576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:63:72:af:6f:f2:f6:d2:b0:fd:93:fb:4d:
2d:bb:32:68:29:28:c9:c5:fc:1f:e3:78:4f:85:5f:
5a:0a:3f:14:c1:3a:7e:cf:d3:0e:50:9a:b8:7d:c7:
82:7e:df:23:e9:01:88:9f:2f:7d:ac:a5:43:77:30:
91:8a:45:0a:23:6c:63:f4:c1:21:fb:c5:d3:bd:65:
5a:af:1b:53:1c:8d:db:00:3f:25:b0:cb:89:81:3b:
fe:f3:3e:38:3e:55:8e:74:10:7c:14:ef:38:ef:6e:
ff:ce:e4:ab:df:b3:b7:82:20:30:5b:27:54:03:99:
46:56:d8:6f:a6:2a:4f:24:f3:f4:98:18:7c:bb:8e:
0e:96:00:13:9d:7b:2e:3d:64:1e:96:0c:d5:af:c6:
f5:75:4e:41:4f:df:22:a0:f2:59:31:e0:7d:67:3b:
e6:d7:4a:bb:09:05:a3:40:22:bb:4e:85:4f:83:c4:
6b:1c:d5:a7:e3:66:be:ed:1c:b5:be:ca:bf:96:10:
90:01:12:95:ea:34:9d:13:aa:3b:5e:bc:88:d5:de:
57:e0:d3:6e:0e:96:13:ed:82:f2:29:50:02:4f:74:
4f:2a:db:c4:23:74:fa:fd:2a:9a:ae:a1:79:92:c6:
42:cd:e2:1b:ba:17:48:f0:de:57:0a:67:b5:dc:4d:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0C:05:EF:65:71:D6:8D:51:A1:AA:EC:5B:25:5A:9D:F0:B4:62:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC80030EF7C011EEAF44992A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.46.0/24
Signature Algorithm: sha256WithRSAEncryption
16:93:42:27:01:d4:c1:d2:a8:d2:ff:08:99:4e:8a:66:8f:4b:
1e:3f:f2:a8:28:14:64:22:03:8f:55:a3:ed:5c:68:8c:4c:a4:
5c:22:b6:55:f7:2d:b2:b4:39:f0:bb:f7:4b:f6:70:1d:f3:1d:
6a:23:ee:45:33:f7:b3:61:49:24:ee:9c:75:d2:6a:e3:23:1d:
a3:94:dd:06:f4:a8:8d:94:f2:48:ae:43:bd:af:99:a8:69:c4:
ea:d6:df:a8:82:dc:5c:78:77:d6:b3:f8:e5:27:fa:8d:2b:d7:
42:bc:9c:e2:dd:ab:ca:99:bc:5c:c7:79:ef:db:e0:65:77:4e:
0f:28:3d:5f:ec:2a:42:95:64:10:49:7a:73:e0:54:62:9f:be:
30:a5:7f:e1:9d:24:a3:94:06:bd:b8:d0:45:77:cb:40:ef:78:
8c:7a:d0:b0:cb:40:97:d3:4d:05:da:0c:fd:ad:e5:dc:92:05:
37:8d:1c:94:a9:8c:83:6f:23:06:c4:d8:18:4e:42:62:e6:c1:
c7:a8:92:a8:7a:b3:31:18:36:cb:a7:7f:b4:ff:81:c8:95:bd:
22:f0:db:13:61:c4:01:67:0d:fc:ec:d6:5d:c3:78:1d:c6:d4:
a6:15:ce:59:81:e8:bc:18:85:f9:78:db:1b:eb:4b:f3:db:61:
8b:fc:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org