Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4887CB6F47D11EEAC2D58AD775412E6.roa
File: B4887CB6F47D11EEAC2D58AD775412E6.roa (raw, json)
Hash identifier: UEl002IsICGPkxLBOhZBD9cRKY/kYGBe3/7X18Xok7g=
Subject key identifier: 96:E6:AB:20:DE:6D:0F:E8:40:9F:46:5F:76:E6:2A:B9:C4:7D:5F:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A990
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4887CB6F47D11EEAC2D58AD775412E6.roa
Signing time: Sun 07 Apr 2024 01:25:23 +0000
ROA not before: Sun 07 Apr 2024 01:25:20 +0000
ROA not after: Mon 13 May 2024 01:25:20 +0000
asID: 138915
IP address blocks: 154.206.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43408 (0xa990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:25:20 2024 GMT
Not After : May 13 01:25:20 2024 GMT
Subject: CN=6611f603-f31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:9a:de:fc:c3:38:e5:cd:0c:b0:8b:e3:fc:
cf:f2:db:e1:b8:2f:51:7c:12:53:cf:65:d0:42:fb:
90:34:ea:25:8c:2f:a2:21:ea:c0:7a:42:6e:97:0d:
9c:f3:8d:c3:3f:92:70:49:cd:ae:98:da:c4:07:dc:
ab:14:ac:72:7b:cb:dd:ba:a4:b6:9d:7c:78:c5:0e:
ab:b1:40:f8:fd:1c:5a:f6:6e:a3:1d:5d:f9:22:c2:
ce:eb:3b:82:7c:1c:f7:05:1b:55:b2:45:e6:74:71:
5f:a8:cb:86:65:c1:1e:30:b6:19:4d:0e:6c:d1:c9:
21:00:ca:ad:14:48:a6:91:c1:52:9a:fc:87:42:ba:
bb:39:dc:68:db:93:98:e9:70:3c:c5:e2:06:84:9d:
5f:0a:1c:0b:02:9e:7d:20:24:23:66:c5:04:b9:f5:
07:48:1e:fb:7b:e7:30:35:fd:c6:ca:f8:cb:1c:7a:
56:e0:ff:14:f5:2a:4c:ed:f4:cb:5a:ff:4d:ed:b0:
e7:f3:51:3b:c4:a6:8b:92:32:69:53:da:b5:b7:a5:
89:d2:0f:b8:79:fd:14:0b:fb:64:27:48:b9:e7:6a:
bb:39:40:67:56:7b:c0:16:f2:1d:b8:51:08:f7:61:
ed:29:56:33:eb:ea:8e:89:d6:39:a0:4b:a1:d7:d0:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:AB:20:DE:6D:0F:E8:40:9F:46:5F:76:E6:2A:B9:C4:7D:5F:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4887CB6F47D11EEAC2D58AD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:b0:8e:71:91:1e:6d:76:d4:47:5b:7a:a9:41:b0:bb:f7:77:
eb:90:5e:0d:05:34:63:64:91:0a:c1:28:4f:d7:05:cb:56:cb:
a9:88:11:73:27:78:ec:1a:a6:ee:c0:11:09:3a:dd:eb:b5:ca:
59:15:2e:84:3b:aa:0e:53:ea:8b:fe:92:9d:c7:7b:54:1b:0c:
19:85:df:df:1a:2d:12:14:0e:4a:d1:f8:b2:49:f8:95:96:8a:
e0:e4:39:cd:ab:45:bb:77:da:00:ee:c1:36:47:8c:c6:71:15:
2e:fb:fe:8a:73:d7:c6:30:2c:c1:a2:ba:31:d1:a7:bd:d2:d0:
5d:de:ce:bb:ea:77:d2:ba:8b:c4:72:2a:77:da:2c:73:3a:4b:
fe:df:38:86:76:ed:93:bb:a4:b0:0d:3b:32:d1:0a:c4:c6:13:
a3:16:77:ed:9f:64:87:08:ed:df:93:32:79:13:71:7c:5f:33:
7d:aa:51:64:1e:cb:c7:db:e6:f9:1b:4a:89:53:50:56:63:71:
a5:2f:ac:00:52:eb:29:b1:06:74:60:a0:93:90:f9:8a:c6:48:
c6:12:06:aa:99:d3:01:25:84:7d:77:d5:3d:2c:c6:2f:33:27:
e1:7b:e5:a1:a8:c4:a8:81:2b:a9:7a:f9:fd:5f:bb:81:4c:11:
c1:3c:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org