Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69B00FD5111EE9298F40D017001B1.roa
File: B8C69B00FD5111EE9298F40D017001B1.roa (raw, json)
Hash identifier: 2rKePXY6dP6c67nESxHK87aEe5eJE+4N7TzqQgp0/rk=
Subject key identifier: DA:D2:48:76:E7:BD:27:84:3A:84:BD:78:F4:9E:B8:C2:96:95:E2:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69B00FD5111EE9298F40D017001B1.roa
Signing time: Thu 18 Apr 2024 07:03:13 +0000
ROA not before: Thu 18 Apr 2024 07:03:09 +0000
ROA not after: Fri 26 Apr 2024 07:03:09 +0000
asID: 39600
IP address blocks: 154.202.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 07:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44595 (0xae33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 07:03:09 2024 GMT
Not After : Apr 26 07:03:09 2024 GMT
Subject: CN=6620c5b1-c286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7f:26:f3:25:d3:66:77:30:46:3d:96:3a:07:
a4:20:85:da:43:0d:02:30:e7:40:36:e7:71:a5:cc:
dc:de:f9:0c:60:75:7d:db:38:2c:0a:53:1b:ec:e2:
7a:fe:9c:c8:c2:bd:ed:4c:0c:b8:e7:b9:ca:2b:e6:
61:7c:dd:d0:b4:aa:0c:da:b3:42:ea:5b:a7:25:9d:
42:db:c1:8c:e5:9a:79:a1:90:e3:aa:9c:a4:79:8b:
95:f9:ff:0f:70:da:bd:3e:67:98:db:37:c7:32:b5:
31:2c:4a:ae:41:5b:e1:dc:02:bf:7f:8d:b7:81:d8:
89:52:13:f2:4c:0b:ad:b7:b3:91:95:b4:0f:cf:da:
02:21:9f:3f:06:37:bf:3d:11:90:c7:cd:4a:03:a6:
6e:c8:db:26:a8:a8:26:d3:7c:f4:0f:20:1b:c0:8d:
a1:17:2a:34:fe:63:64:54:11:f1:84:d5:8a:e1:e8:
4b:84:d1:95:36:1c:8c:05:80:f5:76:95:b8:4e:c6:
01:df:c7:23:3b:99:8a:ef:a3:df:61:8f:da:88:b2:
35:f6:24:f6:aa:26:ec:f6:71:ad:5b:47:b0:95:27:
2f:fe:5d:02:7b:73:66:43:28:b3:4c:66:bc:92:32:
f9:15:df:03:fc:7f:bf:ea:fb:b3:97:9f:14:25:a0:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:48:76:E7:BD:27:84:3A:84:BD:78:F4:9E:B8:C2:96:95:E2:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C69B00FD5111EE9298F40D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.16.0/21
Signature Algorithm: sha256WithRSAEncryption
92:3d:0c:59:a1:ac:b3:00:b4:5f:5c:29:5c:bc:b6:8e:d3:f5:
e1:e3:67:09:6a:43:50:40:5e:dd:17:cf:8a:17:46:d1:37:6d:
09:2e:bf:5c:26:4a:dc:0a:4f:99:9c:1c:b5:55:34:45:a7:17:
c2:29:24:cd:bd:90:c1:c1:6c:ea:a9:74:c9:2c:9d:7a:ba:a0:
44:e7:10:bc:8f:db:30:01:85:b8:b2:2c:22:77:99:a6:e3:45:
c3:f1:3f:a6:cf:fd:aa:5b:71:55:1c:3a:1a:92:fa:40:98:d6:
fa:99:55:b4:dc:63:7e:11:a5:56:6d:bc:32:2a:11:ce:59:1c:
5c:04:e3:65:a5:12:eb:75:66:f8:bb:fe:28:a9:b4:cd:04:a0:
a3:fe:ad:8e:62:53:50:d8:05:5d:8f:23:a7:cd:48:d4:5f:c7:
27:cb:ca:c5:a4:99:11:c5:38:2a:61:68:99:a8:65:ce:2f:a8:
1a:c0:53:4c:93:c6:67:46:16:f5:85:9a:f6:31:2e:3d:e3:da:
fe:f0:28:68:b4:54:ae:e2:6b:84:ee:0b:9e:69:44:7e:57:10:
e3:18:48:98:f8:62:42:b1:f0:3b:c1:63:6b:8d:38:c4:66:b0:
96:5f:cf:dc:31:03:0a:ee:61:dc:11:fd:e0:cd:42:ee:9a:a3:
d3:70:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:38 2024 by rpki-client on console-fra.rpki-client.org