Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B76AA7D4EDB511EE9AC01EA1775412E6.roa
File: B76AA7D4EDB511EE9AC01EA1775412E6.roa (raw, json)
Hash identifier: Q7lt35ucmK6GUrtF0SmACXnXy4MyiY+SP2utwvUP2/Y=
Subject key identifier: 58:5E:25:95:37:B2:D1:9B:87:CB:D4:56:D5:EB:A5:4F:54:E9:DA:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A721
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B76AA7D4EDB511EE9AC01EA1775412E6.roa
Signing time: Fri 29 Mar 2024 10:18:42 +0000
ROA not before: Fri 29 Mar 2024 10:18:38 +0000
ROA not after: Sat 04 May 2024 10:18:38 +0000
asID: 142062
IP address blocks: 154.86.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42785 (0xa721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:18:38 2024 GMT
Not After : May 4 10:18:38 2024 GMT
Subject: CN=66069582-5aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:cb:75:55:73:2a:fd:8b:48:10:d7:f5:5a:
a7:a4:98:9a:a3:15:e7:52:e8:f7:37:67:5b:ec:83:
fe:93:eb:d2:2f:ae:25:08:e0:af:89:3f:e0:08:b4:
8a:8d:81:5f:e3:81:c2:81:8d:7e:c8:d6:6f:a9:f5:
60:44:40:89:56:f9:d9:13:6b:f1:48:79:a7:64:a1:
f2:f5:d7:aa:23:fe:6e:8c:b1:65:fb:c1:0f:dc:26:
8d:3a:5a:10:8b:d4:30:d3:25:8a:7b:ce:c6:42:d2:
45:7b:32:10:1c:c0:e2:8c:42:1c:07:46:8d:b4:34:
f6:0f:79:73:b4:3b:45:45:ab:95:7e:45:4b:bb:6b:
7b:15:d5:69:13:75:77:6a:9d:02:98:fe:94:c9:0a:
a6:65:64:0b:ce:da:de:fa:83:ae:cf:cb:d8:ca:4e:
ef:64:31:04:98:d6:50:ed:61:2b:4c:73:07:d4:0a:
b3:79:50:9b:d2:e7:d9:38:49:4f:ca:a9:65:21:24:
17:03:c7:35:b2:21:1b:39:66:57:9b:3d:4d:5a:cc:
aa:2d:5d:ac:2d:aa:9d:65:c1:3b:be:c2:98:57:24:
0a:7f:4f:3b:f9:8d:71:0f:1e:c2:22:7b:65:54:f5:
19:89:9a:64:f5:f4:53:0f:ce:88:86:0d:16:5e:82:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:25:95:37:B2:D1:9B:87:CB:D4:56:D5:EB:A5:4F:54:E9:DA:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B76AA7D4EDB511EE9AC01EA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
13:89:1e:c4:75:3e:17:c7:80:1d:6f:69:81:7d:c2:8b:93:43:
b2:f2:51:b5:26:b3:2e:72:15:b7:49:8a:4c:9a:21:05:04:c2:
9f:0b:19:9b:38:b4:cd:1e:86:b5:01:78:1a:0e:07:9f:3d:5e:
eb:1f:75:17:b9:31:d5:77:89:e9:eb:6b:b9:e6:78:c8:35:2f:
55:bc:e6:31:04:1b:53:47:a5:89:e0:5d:ac:b8:f0:8e:80:96:
e7:c9:3b:78:13:4b:b6:85:f6:17:08:1d:5b:43:d4:3d:8c:fb:
3e:0c:b7:ae:37:7f:9a:3a:83:18:0c:d7:38:07:c5:33:3f:8b:
37:05:11:08:36:a8:f1:2a:c0:a7:63:d7:e7:f5:96:45:42:28:
af:51:fc:51:ac:92:93:08:d4:cb:ea:e8:cd:17:df:52:3f:e3:
cd:9d:a1:a7:ff:bd:d7:c5:f1:8c:3d:55:e9:25:db:c9:60:56:
17:b4:e9:fe:f1:0e:45:ae:24:e5:48:7f:18:31:a0:52:95:d4:
b3:9e:c5:f6:ce:0d:4c:26:1d:cd:b4:ae:04:97:ee:b4:31:50:
8b:53:a1:a5:6a:db:80:e7:87:db:ae:86:a6:8d:af:c0:9a:b0:
65:f1:c9:d0:82:7d:a1:f7:db:c6:16:75:38:b3:da:49:7a:62:
99:3e:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org