Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD242430EFF311EE8DFB2EAC775412E6.roa
File: BD242430EFF311EE8DFB2EAC775412E6.roa (raw, json)
Hash identifier: uor/xr/IHO+Qjv0PvoA+3s/st7jtoJVirI3bfc2pOBo=
Subject key identifier: 28:8A:9B:E2:65:2B:98:68:8E:E9:10:06:8E:F2:42:BB:8F:76:D3:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD242430EFF311EE8DFB2EAC775412E6.roa
Signing time: Mon 01 Apr 2024 06:47:42 +0000
ROA not before: Mon 01 Apr 2024 06:47:39 +0000
ROA not after: Tue 07 May 2024 06:47:39 +0000
asID: 63139
IP address blocks: 154.223.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42974 (0xa7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:47:39 2024 GMT
Not After : May 7 06:47:39 2024 GMT
Subject: CN=660a588e-e0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:10:07:d2:3a:60:e1:8e:61:ca:54:a0:93:
8f:a7:49:18:e1:9e:93:f5:3e:b9:8b:30:26:08:b1:
4d:15:ee:9a:85:3e:9d:b7:f1:19:97:54:d2:60:1b:
c7:9f:a2:08:3b:3b:3f:3e:08:48:fb:ac:81:ef:04:
52:a1:54:52:44:59:1c:40:d1:df:0a:e1:6e:5c:69:
3d:d9:6d:a2:c1:70:33:0c:23:93:ba:ad:d0:29:df:
cd:7e:a7:94:5f:0e:de:25:93:e4:93:b5:21:ef:44:
9c:c7:42:9a:64:c3:09:45:50:09:2d:ad:ed:84:f4:
4e:19:51:bb:b9:46:e7:52:bf:5d:5d:92:d3:e6:dd:
1b:97:21:c7:e3:e1:fc:0d:1f:19:f6:38:f8:d7:12:
68:65:2f:31:b6:a0:a3:6e:3c:07:d5:b2:b8:bd:04:
da:b6:cc:60:40:bb:86:60:aa:8a:d3:c3:50:d3:2e:
ed:7e:e9:af:65:06:a6:8f:e3:25:d9:3e:a4:dd:90:
8d:66:78:c3:15:82:02:66:dc:d1:dc:bd:e8:8c:ca:
ad:90:fa:97:87:dd:34:e3:0c:c4:ee:1c:cd:7e:27:
6e:d5:15:d1:15:68:3d:95:8d:cf:c4:71:c2:71:0c:
99:a1:64:db:f4:b1:f4:8a:c1:77:77:8a:56:9c:c0:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:9B:E2:65:2B:98:68:8E:E9:10:06:8E:F2:42:BB:8F:76:D3:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD242430EFF311EE8DFB2EAC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:02:72:89:fb:47:f9:28:1f:0e:c2:9a:b1:37:aa:e7:fe:e0:
39:80:ee:aa:27:be:be:d4:f3:87:9f:4e:c4:6a:31:20:1f:61:
ba:5e:0e:78:74:88:71:a1:c8:0b:26:cb:70:33:64:72:a3:db:
0d:43:d9:59:c7:f0:c3:46:1b:73:1d:ae:94:44:43:4b:45:c2:
fa:97:eb:f9:2e:8b:14:16:69:39:d9:39:03:e5:85:75:a4:27:
d7:83:8b:f0:e5:fb:a2:ad:29:53:b2:9f:73:53:41:c1:c7:0e:
00:b2:c9:4d:ae:6a:48:8d:e8:ac:60:e9:af:ec:93:57:ef:5d:
0f:21:ef:e5:8b:4f:16:24:b5:35:e8:2d:df:7c:0e:91:35:92:
4a:94:2e:ad:7d:39:92:e2:a5:45:7c:c6:e5:9d:85:4f:53:d3:
5b:94:6e:a2:e0:b0:b5:e8:da:d6:75:f9:52:bf:cf:7a:4d:3b:
21:94:12:d2:35:fd:b3:2c:85:60:a3:a0:0a:aa:5a:13:8c:89:
8c:a4:d3:1b:91:25:17:1e:eb:b4:f3:5a:4c:d6:33:ba:f6:a4:
4a:be:3b:8e:ad:17:7a:8a:ee:ff:13:27:94:06:83:60:46:c4:
02:92:79:50:f3:5f:5e:4d:f8:04:5a:d0:a3:ca:03:fe:60:9c:
4d:f8:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org