Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8BAC22EDBB11EE89580B50775412E6.roa
File: CF8BAC22EDBB11EE89580B50775412E6.roa (raw, json)
Hash identifier: n+nMM6Ao3Ptb5OuZOVs5fG1o9ktxDVwJ7cP+NZ98EyQ=
Subject key identifier: 00:EF:F2:9C:B6:CB:D2:88:03:B9:9D:22:03:C8:E8:EC:69:66:52:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A753
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8BAC22EDBB11EE89580B50775412E6.roa
Signing time: Fri 29 Mar 2024 11:02:19 +0000
ROA not before: Fri 29 Mar 2024 11:02:16 +0000
ROA not after: Sat 04 May 2024 11:02:16 +0000
asID: 142062
IP address blocks: 154.86.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42835 (0xa753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 11:02:16 2024 GMT
Not After : May 4 11:02:16 2024 GMT
Subject: CN=66069fbb-d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:34:6d:e5:6f:b5:35:a3:55:1c:21:d2:fa:79:
3e:b2:b7:85:6d:ad:05:1c:9a:68:1b:d3:4f:2e:7e:
36:a4:90:d4:3e:8b:ef:7e:45:a0:66:e4:b7:a2:b7:
dc:70:4a:22:e4:82:e2:9e:47:fc:ef:ec:5e:f0:80:
dc:21:11:17:5a:a9:a0:6e:76:45:1b:65:0e:39:61:
10:03:0a:d2:31:a0:2b:16:1f:21:91:07:bf:7d:f8:
8c:f3:c0:a2:e8:38:76:72:8f:24:18:2c:7c:5e:e6:
19:9f:da:cd:06:52:21:8f:d7:7e:bc:27:a1:91:4a:
69:79:ef:f7:79:38:ad:a4:78:66:a2:37:02:45:3c:
a0:6f:e2:cc:36:55:1a:49:9f:27:f8:3f:b4:e0:e2:
40:1a:3a:db:b1:97:34:a2:22:79:77:60:d8:bc:94:
47:f7:8c:c3:d8:11:3a:91:3c:d4:fd:fa:12:d1:54:
2a:4a:d4:37:c2:ef:7e:11:84:c4:f9:dc:40:b4:a7:
f9:76:c7:c3:56:08:ac:8e:5f:b3:d0:8a:0e:9e:26:
05:89:29:9f:aa:18:28:7b:a9:1d:f3:9a:f6:9f:62:
90:a4:26:6c:37:a9:5c:07:74:5e:75:2a:d4:58:a6:
ad:d9:af:f5:4b:50:ae:ef:a8:d0:ed:45:10:a8:27:
1d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EF:F2:9C:B6:CB:D2:88:03:B9:9D:22:03:C8:E8:EC:69:66:52:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8BAC22EDBB11EE89580B50775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.91.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f9:c7:92:15:5e:9f:ae:13:45:da:e7:ee:7f:4d:19:96:0e:
e5:b5:7f:9b:b3:0b:4f:8b:84:49:fa:90:65:38:b3:40:0a:0a:
8e:28:78:54:c6:65:ed:e6:32:c5:a2:dd:fa:eb:fd:c5:08:93:
76:ea:8b:2b:c6:0d:0e:b7:d0:7f:12:3d:2e:04:56:47:19:22:
4d:b6:8f:16:e2:95:83:a0:0c:3f:43:b2:a8:fb:9d:b0:12:78:
7c:ad:cb:5d:27:4f:61:6e:b5:40:26:69:17:0f:2c:b8:52:1d:
e9:77:a0:c6:95:5d:f9:e0:41:d6:04:5c:de:b3:bc:5b:59:0e:
8f:55:5b:0a:fa:3c:ba:e4:05:de:13:1b:53:ff:a7:6f:52:fd:
9c:7f:64:fb:99:2f:0c:e2:14:ae:f1:94:b8:4c:33:9c:a9:c4:
51:36:1d:4e:5f:e3:1d:be:b5:85:f9:73:b8:21:07:ac:00:67:
9b:c6:3c:15:b5:f3:a4:9b:5f:58:ff:76:c7:90:2c:52:8b:8d:
cc:6d:e0:13:00:81:54:4d:8b:29:b4:db:75:d0:74:67:a3:52:
0f:69:1d:8f:35:51:02:57:20:fc:1e:cf:3a:cd:1d:90:bc:63:
05:c6:36:4a:60:6b:bd:a7:4c:2c:75:86:34:f8:49:b4:06:19:
7e:48:66:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org