Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4076700ECA411EE8CD74EC7775412E6.roa
File: C4076700ECA411EE8CD74EC7775412E6.roa (raw, json)
Hash identifier: LkuWrpXhatnSw/+t2gK3g3BcssyyzHaBxpN8IwMPrZs=
Subject key identifier: B5:D8:8B:F9:16:6C:66:7B:82:6F:C3:D8:2D:77:F7:4D:E2:41:46:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4076700ECA411EE8CD74EC7775412E6.roa
Signing time: Thu 28 Mar 2024 01:44:50 +0000
ROA not before: Thu 28 Mar 2024 01:44:47 +0000
ROA not after: Sat 11 May 2024 01:44:47 +0000
asID: 138915
IP address blocks: 154.203.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42690 (0xa6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 01:44:47 2024 GMT
Not After : May 11 01:44:47 2024 GMT
Subject: CN=6604cb92-705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:d7:99:92:e0:2a:e8:47:b3:3d:70:36:2b:
9e:59:93:ba:74:1f:c1:73:6a:ec:24:04:5e:69:b9:
6a:39:8d:71:4e:87:8e:96:1d:2c:36:65:fa:0a:be:
a3:aa:f5:32:3f:23:77:9b:c0:c5:9f:8a:33:52:ed:
c4:17:93:4f:90:a3:3c:ca:13:fd:74:70:18:b5:e8:
a6:e8:9c:8f:1a:9b:41:a5:22:4c:ca:24:4a:01:df:
47:c6:a4:24:73:33:af:4f:56:86:95:e3:38:e6:8e:
11:d9:83:91:3d:a1:b0:57:fe:3a:3a:8d:1d:ca:c6:
1a:56:f9:19:6e:84:b7:86:91:6e:3d:58:44:82:45:
1e:d0:cf:b3:59:01:48:3e:49:41:6d:82:4f:f3:a7:
f8:d6:f1:5a:79:c2:00:0b:f0:2b:93:41:19:7c:4f:
fa:d7:4d:d0:dd:1e:93:51:cb:43:67:f4:8a:1b:b6:
08:3d:ab:d1:b6:76:44:ee:9e:f0:a6:18:8e:ed:30:
a6:d5:78:0f:71:9a:a0:76:75:c6:88:62:c5:ca:4c:
2e:16:07:76:0b:d8:65:bb:80:3a:ee:83:f3:20:88:
a2:c9:23:ba:93:2a:70:3b:a6:e0:04:43:56:4b:bb:
47:22:63:26:b8:64:92:15:48:ff:63:75:c1:02:f6:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:8B:F9:16:6C:66:7B:82:6F:C3:D8:2D:77:F7:4D:E2:41:46:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4076700ECA411EE8CD74EC7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.148.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:2e:01:c4:2a:93:f3:f8:6f:67:8b:6d:d7:74:e4:cd:d6:42:
15:36:d0:42:ad:77:e1:d2:fb:e0:ce:82:e0:4f:0a:50:1e:cf:
a0:8a:e7:e6:f0:15:e7:c4:b2:c1:f8:28:20:e6:4d:0c:c8:4d:
44:3a:55:8a:3d:70:5c:d9:69:fa:5e:37:2c:62:ec:ac:be:5a:
e6:b1:c2:91:79:61:95:67:69:13:6f:a6:b0:20:fb:23:ab:ef:
66:bb:a4:52:dc:d4:99:8f:6a:10:74:26:4c:ce:f5:18:4d:66:
90:a0:aa:18:3d:72:e2:29:9f:a6:1d:a0:8e:0b:56:f0:22:83:
2e:52:5a:62:80:d9:2e:f5:95:af:af:44:8d:70:84:97:c3:0d:
f9:68:5b:80:4e:f7:e9:34:1c:10:dc:d7:df:9c:72:af:67:4f:
e9:72:a9:6f:d5:f1:33:f5:75:81:4d:c7:1b:eb:89:fe:ff:da:
bd:c2:42:0f:d6:9e:bc:e2:3e:dc:9d:06:c3:df:ea:17:5f:60:
bc:de:ff:a6:76:79:5b:51:ee:fb:12:8c:51:1e:c6:e0:a9:e0:
5a:81:3f:39:2a:e8:98:b3:07:07:a6:9c:59:9a:cb:8f:c3:0a:
bb:cf:2f:56:80:72:08:55:fb:80:ef:0b:a5:ed:f8:a0:f0:b5:
71:c3:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org