Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74D191C585011EEA10AF3584AD9E6FC.roa
File: B74D191C585011EEA10AF3584AD9E6FC.roa (raw, json)
Hash identifier: EcnXb1HKStI2voyYW8A72+m9DAEmngsmQjVkzOD8kts=
Subject key identifier: CF:A3:42:B0:86:94:7D:14:58:56:44:55:C2:72:C8:91:1A:9B:2B:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3FEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74D191C585011EEA10AF3584AD9E6FC.roa
Signing time: Thu 21 Sep 2023 07:30:19 +0000
ROA not before: Thu 21 Sep 2023 07:30:16 +0000
ROA not after: Fri 20 Sep 2024 07:30:16 +0000
asID: 16437
IP address blocks: 154.81.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16362 (0x3fea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 21 07:30:16 2023 GMT
Not After : Sep 20 07:30:16 2024 GMT
Subject: CN=650bf10b-8e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:35:4e:06:f2:38:a5:5f:f0:d4:24:f5:a2:
74:52:46:e7:0a:4f:2a:74:11:88:44:f8:0b:c7:ac:
3d:04:79:29:3b:2a:e5:7d:7a:b5:0c:fe:26:9a:ad:
28:9f:d9:8c:d4:a7:6f:7f:de:32:08:f0:52:74:c8:
f0:12:6c:2b:25:c3:1e:3c:04:e3:2d:28:b6:bd:76:
ba:fd:f6:3e:07:c2:14:d1:3a:ac:48:c7:42:8c:09:
c9:5c:71:89:1a:64:79:51:bc:19:68:77:13:0d:bf:
b2:fe:f5:f3:49:0f:6e:4c:1c:b9:d2:65:b7:be:51:
49:2c:23:26:4f:56:38:2d:b4:e6:c2:42:90:1a:96:
98:4c:3c:1d:8a:b6:df:63:92:bf:fa:d0:82:ac:97:
ab:ae:37:41:7b:c9:96:14:ed:0b:a7:e4:e4:5b:37:
04:77:0e:79:7c:ac:21:b3:90:a2:71:91:8a:b6:c4:
22:46:86:e6:72:1d:8c:eb:13:e7:4b:8b:f2:76:ea:
23:44:d8:ee:81:f7:12:e3:b9:58:b6:31:e2:eb:b5:
94:d7:0d:d6:54:47:f5:04:7d:4d:81:df:68:4c:bc:
07:05:4c:12:cb:3a:24:78:27:49:a2:42:50:4c:5d:
0a:f8:8f:95:79:35:8b:36:39:0d:11:33:fe:e5:83:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:42:B0:86:94:7D:14:58:56:44:55:C2:72:C8:91:1A:9B:2B:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B74D191C585011EEA10AF3584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.208.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:26:e4:eb:83:1f:b8:12:b0:88:b3:54:41:f8:4d:14:12:47:
2c:f0:ec:4c:04:bc:f5:47:4b:dc:e8:b6:e1:d8:a5:67:14:fc:
30:de:d8:c8:13:22:6c:c2:04:6d:c2:67:09:7f:ff:7c:06:9c:
b8:59:61:f5:77:0d:75:9e:73:05:ac:e1:43:87:77:7d:8a:5d:
ff:0e:fb:3c:55:0b:34:03:64:b4:a7:89:6b:b1:3b:a6:c7:97:
ab:24:60:36:26:2e:b8:ae:a0:17:b6:78:1a:32:e7:4c:54:00:
50:1f:70:9f:00:0b:ff:dc:11:f8:99:c8:de:45:aa:5a:23:7e:
8e:8a:d3:1b:a5:c1:13:6c:d5:5e:18:b9:59:f4:76:79:48:c7:
71:76:4a:33:a1:d4:be:9b:5a:1c:67:4a:17:a8:f6:99:65:e9:
be:8b:5c:0e:7f:dd:80:f8:6e:a6:bd:6b:41:f1:04:df:e8:7e:
77:45:26:9a:7e:f9:1c:a0:32:14:f0:66:31:da:b0:d5:f1:82:
82:35:a5:68:a5:71:18:8b:e4:88:8f:f3:97:42:d0:85:e5:48:
ef:eb:04:41:1d:1f:69:58:7e:43:67:3a:eb:c7:09:22:e8:1f:
2e:3a:6c:7c:e1:14:6a:e0:4b:bb:ac:01:6f:88:e8:42:f1:8f:
15:98:8c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org