Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E3A88F47F11EE87934EC0775412E6.roa
File: B83E3A88F47F11EE87934EC0775412E6.roa (raw, json)
Hash identifier: EzStPxgOULrIvYNc8fn6a57WuIZdP25Qcca119018UI=
Subject key identifier: 17:29:92:76:95:EF:71:16:85:BC:6E:AA:45:F7:95:4D:69:75:F8:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E3A88F47F11EE87934EC0775412E6.roa
Signing time: Sun 07 Apr 2024 01:39:48 +0000
ROA not before: Sun 07 Apr 2024 01:39:45 +0000
ROA not after: Mon 13 May 2024 01:39:45 +0000
asID: 138915
IP address blocks: 154.206.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43430 (0xa9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:39:45 2024 GMT
Not After : May 13 01:39:45 2024 GMT
Subject: CN=6611f964-a7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:61:f0:34:f1:ae:f7:4a:19:42:b2:d8:90:
7f:cb:57:27:1c:0a:7f:2e:6c:bb:5f:9e:26:04:55:
0e:83:c4:51:46:d9:4a:97:7f:58:9d:18:9c:96:b5:
8a:98:dd:84:dd:7a:90:10:92:7c:59:a4:a5:5f:77:
90:7f:2a:ac:e3:1e:f8:17:ec:ea:3b:f7:99:c3:7d:
46:8b:23:85:1c:d8:27:0d:d5:7e:65:8d:47:01:34:
f7:c0:b9:50:86:2d:98:39:22:be:69:96:46:c8:0a:
30:3b:b3:4b:84:c4:d7:75:ae:c3:98:9a:49:aa:ec:
2e:0d:66:ac:be:fc:5a:27:cb:5f:1c:1a:2a:16:17:
1c:77:76:fb:61:20:7e:db:d2:3a:f3:26:6d:14:d7:
d3:55:0b:93:de:f9:8a:58:aa:81:14:88:1e:8b:0a:
c1:c0:40:2a:69:34:40:fe:0d:be:2b:e4:5f:70:24:
71:d5:d4:0f:1d:78:80:28:78:54:d7:58:78:c4:d2:
4b:f3:ad:2a:2f:13:b0:e8:27:ee:1f:4a:6a:a7:6d:
f7:1b:cd:de:95:65:a7:c5:c7:5e:de:e2:9f:22:ed:
cb:93:1e:ee:bf:9d:ca:ca:2c:47:e2:96:ac:ce:99:
e7:bf:39:5b:de:34:c9:ae:12:30:65:0b:3c:76:e7:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:92:76:95:EF:71:16:85:BC:6E:AA:45:F7:95:4D:69:75:F8:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E3A88F47F11EE87934EC0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
94:88:d9:23:85:15:4a:25:b4:d7:d9:b1:7a:b8:0e:ad:23:92:
f9:2e:6c:40:79:2c:fb:66:ce:47:37:7f:e1:b4:ec:8a:fc:ce:
52:8b:72:61:91:37:3a:10:30:8d:4f:ec:7b:b2:f4:39:5f:89:
34:d6:bf:08:3e:53:e9:46:64:47:1b:8f:1c:cf:81:dd:f5:dd:
a8:a5:89:62:9c:16:19:09:91:52:c3:47:c9:f0:dd:1b:f5:43:
f0:e4:02:1f:f9:14:20:02:57:b7:cc:81:aa:cd:e8:95:c2:20:
cc:fd:fe:44:80:85:2f:b9:c7:97:1d:45:6f:43:76:38:93:d1:
de:44:5f:b9:e3:1b:67:32:82:bc:4d:62:d2:49:cd:bb:a0:d3:
c7:20:3b:45:bb:3b:7d:bf:5d:b5:aa:03:f0:6c:0f:97:0f:3a:
a1:a4:1b:fa:6a:ec:59:94:83:bb:68:84:40:c8:aa:4f:d3:5c:
da:d5:84:79:02:7d:67:a7:a7:f6:87:8e:a9:bc:ee:52:1a:6f:
b6:17:e3:02:ba:04:fe:5d:4b:68:b3:1d:ee:1c:f0:25:67:75:
54:52:1c:34:8e:fd:ec:3d:4f:6c:89:ee:bd:51:ad:8f:d1:82:
f2:e9:74:df:f5:0e:06:b2:c4:4b:69:8d:d8:16:88:41:70:5f:
99:14:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org