Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2DF04A6F1A311EE8C783462775412E6.roa
File: C2DF04A6F1A311EE8C783462775412E6.roa (raw, json)
Hash identifier: TbTePDl4z11er8Pi3SEmOrcLPOf6M49UW0nk7sJ4uU8=
Subject key identifier: BC:FB:50:D2:41:9D:F3:0A:A7:BB:3D:80:F4:72:86:E0:8B:45:35:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A950
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2DF04A6F1A311EE8C783462775412E6.roa
Signing time: Wed 03 Apr 2024 10:20:15 +0000
ROA not before: Wed 03 Apr 2024 10:20:11 +0000
ROA not after: Thu 09 May 2024 10:20:11 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43344 (0xa950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 10:20:11 2024 GMT
Not After : May 9 10:20:11 2024 GMT
Subject: CN=660d2d5f-daa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:dd:37:51:58:92:eb:2a:07:70:5b:68:ae:
52:b5:03:ed:90:a1:22:f5:a1:a3:cf:3a:85:a2:e1:
0c:df:23:f5:72:98:cf:f0:a6:88:e4:87:cb:76:53:
8b:7c:5f:dc:f9:50:70:13:2a:20:c7:f7:60:82:c1:
02:db:5b:73:26:b1:b3:8f:85:52:52:02:ea:51:9c:
8a:98:77:07:d7:ef:eb:3a:5b:48:20:72:2e:a1:71:
c6:85:0c:f0:b8:57:df:ee:4c:71:a7:00:47:c1:29:
f8:b0:16:60:d7:21:62:a5:4b:b2:3d:7a:d4:4a:fb:
54:95:51:89:80:21:1a:4e:7f:be:27:26:be:ff:4e:
77:30:20:da:95:b5:cf:42:99:eb:59:b7:09:d1:3c:
93:fa:2f:78:20:42:55:c3:6d:fd:cf:58:01:a6:99:
5b:2c:ea:24:66:ee:8b:f2:23:51:e1:e8:80:b1:23:
9a:03:aa:11:9f:5f:96:be:b9:93:99:b9:f6:d7:22:
4e:c0:48:96:29:11:e0:05:2c:9b:1a:7b:a5:7e:21:
79:69:99:40:7e:01:48:44:91:1f:dc:f9:52:8c:b4:
c5:5e:48:bc:2d:bd:3f:29:d0:4c:f9:8b:5e:d4:1c:
8f:c6:de:cc:7a:4d:8b:00:f7:c2:56:10:e7:53:ec:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:50:D2:41:9D:F3:0A:A7:BB:3D:80:F4:72:86:E0:8B:45:35:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2DF04A6F1A311EE8C783462775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6e:50:d8:c3:fb:d4:f9:5e:e9:bd:3d:9e:90:e9:5d:b4:5e:
d8:ac:85:af:4a:fc:bb:99:0e:f6:17:37:7b:ee:87:37:5c:1b:
46:3b:5b:cd:a2:b0:df:34:0e:b7:bd:fd:d5:67:aa:5d:b0:41:
45:85:50:63:48:f4:8b:20:0f:97:31:90:3a:71:ce:cb:5e:e3:
84:f9:be:d3:02:ae:48:97:9d:3e:9e:be:b5:42:fe:5d:46:d5:
c4:9a:5d:a1:fa:31:8c:53:20:4c:87:1f:ac:f8:ca:3e:7a:d6:
c3:d2:cc:01:85:dd:9e:25:d2:cc:71:5c:1c:74:80:f5:07:40:
36:c1:6d:d0:c4:23:b3:d6:cc:d0:ec:bf:f1:a3:18:fc:5b:89:
5d:ed:f8:ac:7c:8e:2f:cf:ff:74:68:02:81:8a:b8:d0:04:b8:
b8:fa:fe:8b:e8:63:6e:f5:3d:da:0d:0c:d3:be:96:21:14:30:
be:83:3e:57:8f:57:ed:61:ac:cc:60:02:44:ed:a7:9c:c3:38:
aa:74:e6:03:93:0e:b7:43:9e:d1:c8:91:a2:12:f6:b7:0d:f6:
81:6a:af:30:c4:50:40:78:c8:18:e2:11:19:6a:13:1e:a1:c5:
2c:5f:be:0d:4d:59:97:af:50:6d:32:49:3c:0c:4b:b5:a1:7b:
15:e0:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org