Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75102DEF7BF11EE99DE5624017001B1.roa
File: B75102DEF7BF11EE99DE5624017001B1.roa (raw, json)
Hash identifier: caVwVprf9Il2jIWtoWGlJSNYXSTQ1mdEaCAYSzPjXtU=
Subject key identifier: 70:44:38:8F:D1:BA:57:B2:FE:EC:D8:07:61:EB:A2:A5:83:2C:61:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75102DEF7BF11EE99DE5624017001B1.roa
Signing time: Thu 11 Apr 2024 04:55:28 +0000
ROA not before: Thu 11 Apr 2024 04:55:25 +0000
ROA not after: Sun 19 May 2024 04:55:25 +0000
asID: 138915
IP address blocks: 154.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43807 (0xab1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:55:25 2024 GMT
Not After : May 19 04:55:25 2024 GMT
Subject: CN=66176d40-003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:78:32:dc:a6:9a:93:8e:7a:81:9d:b8:2b:
34:74:95:f2:e0:e0:b3:11:f7:d6:e2:a9:15:c4:dc:
d4:56:e9:1f:58:05:69:99:fd:93:6c:f4:f8:ee:6b:
f8:9f:5a:9a:44:e5:b6:59:dc:c6:c7:8e:4e:13:d5:
be:cc:dd:27:6c:b4:0c:a5:77:63:20:01:ff:8d:37:
54:5b:a4:77:ea:cc:1f:b7:cf:fc:3e:37:ac:4e:a5:
49:7d:12:38:5c:24:69:8c:ca:7a:72:6f:0f:ca:21:
77:41:11:b1:a6:97:c0:a1:3a:bd:f5:7f:f4:34:04:
94:75:ac:44:ce:44:ff:42:2e:39:2e:2c:db:aa:4d:
51:d0:00:a9:04:7c:ec:4b:bf:ee:fc:6f:e1:92:b7:
c2:26:59:07:41:e0:dd:ac:a7:e2:28:02:f0:37:99:
8a:3b:08:9a:75:8e:f6:ff:dc:38:ff:ac:34:13:80:
18:ef:91:c3:4c:b5:1b:22:a9:e8:c6:94:00:39:7c:
5e:73:2d:5a:cc:19:7b:f5:2a:66:4e:3c:6a:97:7a:
fb:b5:01:a4:47:68:85:88:0d:d5:c6:e0:d5:4c:d7:
1a:36:0a:93:b0:16:df:65:0a:d6:77:84:92:3c:ac:
a0:e3:54:af:6b:8f:ce:53:26:91:38:ad:99:de:8f:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:38:8F:D1:BA:57:B2:FE:EC:D8:07:61:EB:A2:A5:83:2C:61:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B75102DEF7BF11EE99DE5624017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:07:80:5a:61:d8:87:fe:0e:66:9d:89:f6:93:11:ec:5d:ca:
03:ec:1f:fc:57:71:76:91:a5:9b:e7:c3:8c:57:30:d5:96:21:
ee:3d:2a:09:56:ca:b4:9d:32:65:34:20:88:11:a5:d3:bf:0b:
92:b2:36:0f:fe:5f:64:c5:82:ba:9f:6f:d9:f2:ce:4c:46:74:
01:a4:b5:12:5d:17:aa:c2:16:2d:07:40:c3:1d:3f:ca:f0:62:
e6:fc:c7:0d:5d:c2:77:f9:3f:12:ec:bf:95:8f:9f:25:b9:b8:
bc:7d:6c:fe:48:b8:03:6d:a9:a5:73:89:b2:8c:8c:cd:e4:89:
91:0c:09:3a:25:4e:f7:78:93:f6:86:ba:37:a5:6e:e9:d7:18:
6d:30:15:79:9a:5d:a6:a5:c4:f8:b6:0f:52:66:45:ff:92:fa:
d5:4a:96:23:78:e1:b0:fe:2b:52:6b:34:13:5c:95:05:08:ea:
81:7a:13:3f:34:0b:dd:40:fd:b7:b8:2a:cc:39:56:df:bc:ad:
19:c2:79:f9:93:71:28:af:40:09:58:5d:5d:00:6e:64:12:5b:
00:48:a3:d5:c0:8f:38:79:bd:a6:1f:d4:db:f3:c2:97:c0:be:
c1:5b:b7:ac:9f:d1:2b:e0:ac:36:78:67:a7:21:28:ad:3e:40:
63:97:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org