Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C217FDE4DB4F11EEAE19D47D775412E6.roa
File: C217FDE4DB4F11EEAE19D47D775412E6.roa (raw, json)
Hash identifier: PuXblEpzE+zMENy/1Rn6zAm8zJXacxhCh4C1QXxD7sM=
Subject key identifier: 3D:51:5D:C3:39:83:21:4D:D0:F3:D2:23:90:84:63:5B:03:DE:4F:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 9D4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C217FDE4DB4F11EEAE19D47D775412E6.roa
Signing time: Wed 06 Mar 2024 00:23:30 +0000
ROA not before: Wed 06 Mar 2024 00:00:27 +0000
ROA not after: Thu 09 May 2024 00:00:27 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40266 (0x9d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 6 00:00:27 2024 GMT
Not After : May 9 00:00:27 2024 GMT
Subject: CN=65e7b782-8e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:4f:66:c3:9a:2c:46:ed:af:2b:c6:96:78:
8d:84:5a:c7:7c:24:f6:c0:6d:6d:59:a2:c7:0b:da:
b9:67:18:18:6f:07:e6:ae:5f:5d:e4:30:19:cc:87:
74:5b:a4:b9:cf:d0:24:a5:53:1f:9b:1c:62:1d:9d:
a1:23:0e:d2:e4:17:c0:58:45:ac:d4:34:8e:92:1d:
5c:04:b0:27:50:21:10:9d:5b:db:94:54:2f:9f:f6:
e8:e9:8b:b5:37:61:4e:49:f2:1e:a5:a5:8f:4a:85:
32:ba:24:af:14:05:0b:a5:dc:75:2b:0c:0e:6d:26:
38:01:a2:69:f5:ff:bb:e3:f5:16:9d:9b:16:b7:fd:
90:26:3a:7b:26:5b:e4:07:06:45:d9:47:14:bc:a6:
6d:ad:bb:92:35:7d:da:41:83:cd:4e:0a:0a:1f:ef:
3e:2e:b3:18:85:d0:0c:a5:b8:55:f6:fd:57:2b:20:
1c:b0:43:1a:5c:25:39:df:6e:51:4a:d0:07:bf:6e:
94:8e:c2:2e:b8:54:29:45:14:3f:9e:30:23:af:18:
33:03:65:6d:e7:96:7c:8f:a1:ee:45:ee:b8:e2:25:
09:07:f3:f8:46:8a:42:02:cc:0a:3e:57:93:13:c1:
8d:f9:38:6e:70:7e:28:4f:05:e2:9f:3c:ca:e6:f4:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:5D:C3:39:83:21:4D:D0:F3:D2:23:90:84:63:5B:03:DE:4F:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C217FDE4DB4F11EEAE19D47D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ea:1b:55:13:08:30:75:33:08:20:a2:b5:2a:b6:6d:d5:57:
bd:07:fe:6c:e9:44:94:b5:34:7c:f1:24:29:01:2f:dd:9c:a6:
70:6c:c3:65:9a:c1:41:6a:38:78:c9:43:dc:cb:88:a1:c3:ac:
8c:ac:e5:bb:95:25:7e:3c:36:c2:e9:e2:11:ec:08:a4:a2:7a:
d9:dc:bc:81:bb:90:36:2a:11:f0:8f:c5:8f:8f:14:7a:93:19:
b3:df:83:93:a6:0d:4c:27:70:6a:16:a4:04:5d:15:f5:8a:bc:
74:77:42:03:88:80:a3:54:21:fb:43:b3:be:ed:f5:38:b4:e9:
f9:8e:a5:63:3d:b9:59:7a:89:ad:2f:42:44:d4:02:c8:c7:0a:
56:5f:01:4b:f7:55:01:e4:7d:0f:d0:d0:a8:4f:03:2c:2d:d8:
d5:b4:48:70:7e:c1:ca:f8:0a:1b:61:f7:95:b2:13:02:b1:8a:
8d:36:9b:f8:e1:33:b8:8e:17:d4:3b:34:e7:90:64:96:6b:1c:
3b:37:f9:6a:b1:a8:74:26:38:13:b8:f6:af:3a:48:6a:2f:56:
20:f0:6b:4c:d9:ea:05:7d:f1:22:93:c3:e0:3f:86:7c:6a:d2:
95:72:8a:c4:58:4e:e0:1f:ca:b1:f8:4c:06:7d:78:4f:2f:e1:
d8:b0:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org