Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C7CD9AFAEF11EE9F76C41C017001B1.roa
File: C7C7CD9AFAEF11EE9F76C41C017001B1.roa (raw, json)
Hash identifier: ILGIYDBB0okpsbSmW2kUd+0XCUkYVfImbu8xEVOKp50=
Subject key identifier: F7:C3:4B:A3:9B:FF:59:3F:5C:04:6B:45:5C:5F:1E:B1:1F:99:2C:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C7CD9AFAEF11EE9F76C41C017001B1.roa
Signing time: Mon 15 Apr 2024 06:17:05 +0000
ROA not before: Mon 15 Apr 2024 06:17:02 +0000
ROA not after: Thu 30 May 2024 06:17:02 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44220 (0xacbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:17:02 2024 GMT
Not After : May 30 06:17:02 2024 GMT
Subject: CN=661cc661-8023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:fe:0f:d7:fa:a3:d5:c1:66:7c:91:d0:2f:
46:7f:7a:82:19:6e:1c:95:82:15:44:d3:62:3a:4a:
a9:83:54:4a:d4:c6:77:66:61:4b:17:64:15:d1:2a:
51:6e:50:b6:f7:f5:9b:c1:f5:03:e1:04:4f:77:45:
d6:a5:a0:69:3d:fb:56:f8:f5:c5:10:e8:8c:14:5a:
9f:c0:f8:e8:d2:70:0f:96:47:5a:44:d1:28:df:3a:
47:aa:66:b4:e3:ea:cd:3a:d0:42:4d:fa:b8:f5:0f:
51:87:10:87:56:4f:cb:02:15:fc:3e:e9:81:70:75:
69:c6:49:69:d8:36:7b:93:39:90:1f:20:03:10:57:
25:10:51:ba:db:98:a3:48:9f:e9:d6:17:6f:9b:a4:
a7:20:61:92:d6:99:58:e8:bf:99:c3:1f:86:e1:df:
67:96:21:69:ff:7d:df:74:31:90:e7:85:18:08:3c:
2e:02:73:c5:23:61:3b:5f:a1:b6:44:07:1d:01:3a:
4e:6e:f0:e5:c3:bf:e0:46:e9:e9:81:c7:80:ef:cc:
43:f0:45:e3:c2:54:71:96:5e:24:fc:33:4b:1e:b4:
fe:96:64:12:51:d2:81:cd:b5:55:f5:4b:fb:a7:96:
19:71:19:da:f6:e7:19:ae:ac:e6:25:97:12:e4:dc:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C3:4B:A3:9B:FF:59:3F:5C:04:6B:45:5C:5F:1E:B1:1F:99:2C:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C7CD9AFAEF11EE9F76C41C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2d:ca:05:50:0e:7f:07:18:c1:4f:b8:b8:dd:85:35:06:1d:
0b:cf:d9:9f:d4:88:1b:32:41:b2:f8:9e:d7:87:5a:52:f0:90:
62:61:07:08:57:c2:17:4f:b4:fb:80:19:58:e7:33:68:59:b7:
e9:a6:85:f9:6c:bf:11:e4:46:67:3a:46:3f:cd:4f:98:bc:d6:
24:14:6d:1d:b4:8d:c9:8f:7f:f2:70:44:0b:cb:73:ac:e3:d4:
20:92:ae:7b:6a:d3:a0:b6:5c:63:aa:f6:c2:c9:28:56:b6:7d:
58:05:01:92:1f:94:36:26:89:89:fc:2d:3d:2a:28:bb:51:b8:
8e:61:35:3c:64:4b:33:3d:25:c0:55:f0:2a:54:5b:aa:98:f1:
50:81:fe:f3:8f:a8:16:08:eb:2c:76:03:8a:93:60:72:a1:90:
e7:2c:35:a6:34:2e:e6:01:4e:0e:bf:e7:5f:fa:4f:cb:60:ea:
7d:93:2c:0d:4b:6a:95:3c:bb:06:ba:54:7f:45:2a:d4:35:a5:
61:f6:99:ba:57:82:8f:44:81:5c:af:e9:86:ce:58:6e:c1:5b:
73:6a:08:41:00:47:ec:4c:60:0c:98:13:2f:92:c5:2e:73:14:
32:8e:34:c7:5a:45:ea:88:db:84:0f:a6:53:d2:ae:d7:bc:f8:
07:ad:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org