Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA66F2E8FD3811EE87831142017001B1.roa
File: BA66F2E8FD3811EE87831142017001B1.roa (raw, json)
Hash identifier: u7pt2a0JdJ3rvggx5B6ELfewoCwE+0SHdNZelq47ezs=
Subject key identifier: A9:22:BC:E5:8E:A2:07:3F:A4:36:F2:66:74:66:D8:C2:D5:A6:51:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA66F2E8FD3811EE87831142017001B1.roa
Signing time: Thu 18 Apr 2024 04:04:18 +0000
ROA not before: Thu 18 Apr 2024 04:04:14 +0000
ROA not after: Sat 27 Apr 2024 04:04:14 +0000
asID: 133180
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 04:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44557 (0xae0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:04:14 2024 GMT
Not After : Apr 27 04:04:14 2024 GMT
Subject: CN=66209bc2-af49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:f1:d8:e1:59:13:fa:1a:de:bd:ae:f7:bb:
e2:43:f0:58:9e:5b:c6:6c:f5:12:15:f2:fc:91:ab:
66:01:40:79:06:db:80:82:ac:d9:dd:df:a8:f8:26:
58:c1:c5:8f:e9:bc:b7:ae:50:4d:0a:0f:b5:84:a6:
4f:6b:72:89:6c:c6:25:00:35:d1:77:49:20:45:8b:
2b:37:02:ea:56:df:3b:97:24:5f:66:da:66:2c:61:
d5:fb:c8:0d:12:fc:0c:b0:a6:cf:56:5f:44:7e:1c:
c9:b1:af:35:96:51:19:10:7e:fe:cf:ae:b1:0d:7e:
14:a5:a2:70:b2:fb:35:53:bf:e9:82:8c:d9:2a:ab:
6f:65:ff:7b:31:0b:db:d6:68:b3:95:1c:18:4b:a2:
46:6f:c8:9c:78:a1:6f:54:85:f7:2a:b0:0e:ef:1f:
13:46:bf:b5:f6:af:36:ea:24:0f:0a:15:1d:f0:a2:
26:87:95:30:02:32:13:d8:f3:57:bc:10:91:35:6b:
ac:ed:27:e2:11:c7:2a:d4:41:a6:9b:b0:35:42:33:
97:0b:06:6b:ee:9b:79:13:bb:b6:f5:61:91:2e:8f:
49:2a:67:08:e0:4b:c0:74:d1:6c:40:62:c9:31:9b:
13:94:48:5f:59:b7:9f:e1:1f:39:5e:29:06:4f:6b:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:BC:E5:8E:A2:07:3F:A4:36:F2:66:74:66:D8:C2:D5:A6:51:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA66F2E8FD3811EE87831142017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:56:4b:21:c0:e1:f8:f7:f0:be:19:b1:70:4c:17:6a:02:db:
fd:c8:3c:ed:89:ab:fb:16:01:0d:83:2d:b3:c8:53:17:0c:66:
01:d8:9d:d5:b0:13:82:b1:c0:66:07:c3:e4:9d:68:8b:1f:a0:
cd:f4:8d:7c:c8:b9:2b:aa:d7:81:bd:b1:63:4c:8f:3e:29:0c:
2a:d1:b7:79:a9:c2:b5:e9:26:e5:7a:6f:e2:16:ff:7d:bb:b7:
5b:79:c9:d7:19:a9:42:1d:e4:65:33:0a:54:25:35:57:c9:dd:
de:dc:0d:ce:8b:0b:78:e3:32:f9:5c:48:68:23:74:45:18:7c:
e2:7a:59:2f:3e:41:b9:2e:a3:76:ae:95:ef:15:44:17:b2:6d:
9c:04:af:d4:99:11:ac:d4:dd:c0:b8:33:6a:33:e5:92:c3:df:
de:65:70:4b:70:92:97:68:98:b9:00:71:a2:4b:fc:34:fe:e5:
63:f5:68:79:d6:13:b6:b7:82:46:0f:a9:8e:b6:60:5c:c4:de:
a9:95:a3:e4:c1:86:e0:34:35:d0:78:9e:e2:ed:f6:ba:86:1c:
bb:1c:00:0b:0e:57:23:f1:07:13:ca:c1:5a:16:57:37:e0:e4:
53:e9:b8:36:cd:e0:58:cc:5e:68:1d:9b:ab:d1:fc:c6:28:02:
f8:dc:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:38 2024 by rpki-client on console-fra.rpki-client.org