Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD4C4128F7BD11EEB5FDFB12017001B1.roa
File: BD4C4128F7BD11EEB5FDFB12017001B1.roa (raw, json)
Hash identifier: AANRMO43Dx6XGuYHi3upDGPe3j+z1AapwSxiq2pUoj0=
Subject key identifier: 0B:4E:27:3F:5B:C8:35:C6:99:5D:BC:3C:87:52:A5:2C:C1:6E:06:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD4C4128F7BD11EEB5FDFB12017001B1.roa
Signing time: Thu 11 Apr 2024 04:41:19 +0000
ROA not before: Thu 11 Apr 2024 04:41:16 +0000
ROA not after: Sun 19 May 2024 04:41:16 +0000
asID: 138915
IP address blocks: 154.90.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43787 (0xab0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:41:16 2024 GMT
Not After : May 19 04:41:16 2024 GMT
Subject: CN=661769ef-9dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:08:63:63:1b:01:21:f5:08:28:e8:64:35:
77:90:5e:73:b2:e9:6b:03:a1:01:51:f9:b1:2a:19:
fe:7f:6e:d7:33:70:f3:80:20:4b:e7:6c:38:a1:d6:
7a:72:57:e8:86:c7:44:2b:1d:63:71:6c:86:5f:7c:
d7:c9:25:e7:d9:4b:43:a1:64:82:19:cc:84:de:5c:
f2:4d:8a:17:53:ae:5a:1e:fc:09:68:3d:0f:1a:c8:
01:e8:a8:01:1a:fa:fd:0e:c9:9e:8d:2b:70:c3:3c:
69:09:5d:90:19:dd:61:69:05:63:75:b0:dc:7d:69:
fe:fd:83:55:ca:66:a8:05:43:28:3e:0a:05:94:fb:
40:37:92:69:b1:6c:c7:7c:36:d0:a7:19:02:22:64:
3f:7f:b2:82:b6:8d:3e:8a:81:70:60:a2:2b:d8:35:
9c:d2:19:a6:9c:fc:c5:75:0e:4a:d2:10:0f:b5:eb:
ac:8b:d7:6a:4e:b3:3d:3b:79:0a:ab:df:e0:0f:72:
52:a9:f8:ec:ba:56:83:1c:05:e3:4a:47:20:6b:ed:
0c:04:ff:3e:72:51:7e:43:c2:54:a9:f0:db:61:d7:
c4:22:07:eb:c5:30:a4:85:3e:e1:73:80:fb:6e:c6:
fa:5d:26:17:02:07:b6:ca:67:cd:e1:34:e9:e0:de:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:27:3F:5B:C8:35:C6:99:5D:BC:3C:87:52:A5:2C:C1:6E:06:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD4C4128F7BD11EEB5FDFB12017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.50.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:cb:df:ba:78:c1:1c:b1:c0:53:10:ec:9c:f4:4a:ac:5e:f7:
c3:9f:73:a5:bf:1d:90:68:fe:b3:a4:92:0b:42:dc:f2:61:d9:
be:cc:23:b8:e4:6e:9e:da:ee:41:19:55:6a:8f:7d:f1:0b:f5:
7c:26:84:45:62:1e:6c:83:2b:6e:c0:29:5e:d2:d1:11:e8:34:
83:e8:33:05:a6:00:1c:26:db:14:ef:6f:81:f6:5e:7b:ec:50:
12:05:72:dc:66:57:8c:bb:3f:39:7f:0f:db:ee:c3:f7:8d:56:
11:09:c0:46:5c:40:8b:84:88:4e:a4:49:bc:a6:3e:0b:a4:8b:
e2:4c:0d:75:ee:9e:77:26:29:4f:ca:55:23:3a:90:ab:ac:56:
17:41:ad:3c:2c:61:b3:f6:9e:11:d9:ca:2f:8a:0c:ac:da:bc:
aa:62:bd:0e:e6:9f:c8:2f:2d:29:f5:ac:12:09:ba:ff:75:33:
3c:33:96:c0:1f:9a:f8:03:53:db:7a:8f:83:43:9b:cb:90:8a:
36:1d:bb:87:f0:e2:3a:11:8a:e9:3d:7e:4e:41:33:ba:02:b8:
e3:87:fd:23:88:a4:ed:28:f3:f4:4d:59:ad:c0:40:0c:f8:0e:
6a:76:38:51:f3:17:55:ef:c5:ff:c7:f0:ce:78:37:ce:43:65:
f7:ac:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org