Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B298CCB0FAF111EE8E61FC2C017001B1.roa
File: B298CCB0FAF111EE8E61FC2C017001B1.roa (raw, json)
Hash identifier: gmDFwvk6wGU7lm5JGnlU6e6PGYKLHAqYXofG0WtBYaA=
Subject key identifier: 81:67:13:3C:42:4D:C5:AD:C4:85:32:47:EA:D5:D3:A5:7A:94:EE:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B298CCB0FAF111EE8E61FC2C017001B1.roa
Signing time: Mon 15 Apr 2024 06:30:49 +0000
ROA not before: Mon 15 Apr 2024 06:30:45 +0000
ROA not after: Thu 30 May 2024 06:30:45 +0000
asID: 63139
IP address blocks: 154.94.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44244 (0xacd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:30:45 2024 GMT
Not After : May 30 06:30:45 2024 GMT
Subject: CN=661cc998-91b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:a5:33:ca:8e:66:1f:e4:4c:bd:da:d9:d9:
a1:c8:7b:9b:0c:a9:07:4b:b4:a4:6e:69:27:f0:88:
1f:8e:fb:10:b0:b6:5e:5c:05:b5:b5:14:10:94:78:
8b:5c:10:0c:22:7b:66:88:a7:8e:b8:af:dc:a9:80:
fb:3c:fd:fb:86:c8:7c:c5:3a:49:06:70:7b:68:5f:
0d:3b:8e:84:27:54:05:55:96:7b:cc:e2:86:03:96:
68:ef:15:a1:51:a9:e6:f6:41:bf:11:05:2f:59:fb:
58:ff:a8:ab:ec:b1:23:cc:b3:32:97:79:bc:a1:f4:
f0:6d:84:27:90:95:ed:ca:01:a1:b8:9a:6d:b8:c6:
8d:8e:55:73:68:fb:88:6b:e0:ee:b1:70:6c:fa:3f:
16:d6:49:4e:95:bb:ee:6c:3b:a6:f3:cd:ba:87:9b:
32:cc:d0:12:3f:62:45:03:27:67:50:40:d8:55:72:
ae:ce:ad:4e:58:14:37:d1:0a:f7:ad:7a:bc:31:d3:
f4:08:c4:57:e0:1c:62:50:7a:17:60:84:ff:e1:6b:
84:a5:6d:dd:98:08:33:51:5a:51:43:6a:c0:ec:93:
a9:84:a6:d3:f5:6f:95:d4:4c:a2:df:cb:87:ab:15:
94:d9:79:67:b9:5b:08:14:de:8a:00:cf:82:da:ab:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:13:3C:42:4D:C5:AD:C4:85:32:47:EA:D5:D3:A5:7A:94:EE:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B298CCB0FAF111EE8E61FC2C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:81:9e:f0:26:99:81:5f:b0:40:ff:e7:ec:98:40:15:0f:e3:
f3:81:e6:a5:43:40:57:a9:1c:92:45:eb:e3:52:8e:38:a8:d7:
cd:1f:8e:a9:7c:1f:6b:16:80:6d:e2:9f:1d:bf:55:39:a5:ea:
07:f9:2e:5c:4b:5a:d1:c8:36:46:e8:3b:30:f2:18:de:b4:b3:
54:6d:3e:9b:45:6b:a9:7b:80:15:a9:b6:3d:22:06:fa:36:62:
c0:e1:e0:80:87:48:7d:e8:ef:fe:1e:06:35:f1:bc:a7:0b:d2:
e9:79:be:f0:19:ac:06:4d:d7:b1:e2:34:96:0b:3a:02:e6:79:
66:81:79:fc:b8:da:90:7b:4d:cb:1a:5d:34:68:a7:e1:b1:e1:
fc:8e:83:8b:5d:25:df:7d:e8:ac:10:94:4d:e4:38:9c:0d:97:
a9:73:29:9c:a7:d5:5e:d0:c4:3e:b9:ae:4d:7a:85:fa:f6:c1:
3b:23:6e:47:ed:32:e0:d6:71:a3:6a:7b:f9:51:9f:ca:2c:12:
c4:9c:e1:ad:ca:00:fe:ea:eb:83:22:eb:c4:45:c4:49:7e:9a:
f1:7f:c0:0d:ec:f9:ef:55:e3:f6:8d:18:55:55:f8:dd:27:02:
4a:71:4e:5a:c8:15:7b:13:b1:36:fa:59:69:af:1f:07:c7:a2:
74:c8:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org