Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0948F24F00B11EEA9637C67775412E6.roa
File: D0948F24F00B11EEA9637C67775412E6.roa (raw, json)
Hash identifier: LlEGcUWlqJVIt+QAt6q3ZCpyQGxJ5jN5WFJKRyOmCZ4=
Subject key identifier: D2:F0:A6:2A:25:3A:76:FE:0E:6E:B5:5F:B7:5B:5A:D4:F6:72:AA:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A84C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0948F24F00B11EEA9637C67775412E6.roa
Signing time: Mon 01 Apr 2024 09:40:03 +0000
ROA not before: Mon 01 Apr 2024 09:39:59 +0000
ROA not after: Sat 11 May 2024 09:39:59 +0000
asID: 138915
IP address blocks: 154.205.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43084 (0xa84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:39:59 2024 GMT
Not After : May 11 09:39:59 2024 GMT
Subject: CN=660a80f3-ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:96:ce:fd:8b:c9:e1:76:a1:5e:8a:10:67:
0f:49:16:ac:26:7f:a7:8c:ab:db:36:6f:2e:7c:36:
af:40:5a:0c:76:80:c8:e7:29:40:37:72:75:a0:ae:
21:d2:23:11:aa:2b:b0:eb:65:8d:07:06:f3:3b:ef:
9c:98:9d:8a:a9:68:1d:71:56:c3:4c:1f:1d:53:97:
97:c1:16:15:2b:d0:19:25:da:e9:3e:db:35:08:5e:
31:ae:7c:15:10:37:82:c9:cf:2f:44:77:95:66:1a:
69:74:94:e4:02:64:4c:d7:92:b7:e2:d6:3b:9d:0f:
5c:7d:30:c5:f8:9b:6d:06:db:24:e5:c2:3c:bb:24:
56:e6:4f:70:78:6e:09:06:76:42:12:5d:76:d5:a9:
5d:00:7a:70:af:63:e7:7c:97:f7:bf:c3:6b:1c:1b:
98:99:92:6c:53:55:52:09:79:7b:03:48:bd:f8:b2:
e2:51:a5:1c:95:70:82:ed:46:0a:6e:bf:8f:4f:8d:
3c:ad:a2:03:c5:5a:42:1c:d4:fb:fb:51:7b:fd:53:
d9:87:99:3b:13:3c:74:58:12:e0:86:53:74:8f:30:
cc:f5:92:bf:6a:ef:36:0a:ca:41:a6:1c:ed:8b:46:
a6:65:6d:f1:0f:a0:5c:e2:7d:b3:b6:88:c0:f9:bc:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:A6:2A:25:3A:76:FE:0E:6E:B5:5F:B7:5B:5A:D4:F6:72:AA:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0948F24F00B11EEA9637C67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:17:4d:8e:93:9d:7a:e2:1b:cf:0e:85:13:fb:b2:33:15:a2:
11:ce:0e:4e:e0:a1:0f:92:5f:76:77:2d:83:dd:7d:ca:87:03:
a4:a5:d3:1c:e5:86:8f:fb:28:24:3c:b9:ba:58:e9:09:67:f2:
0f:3a:dc:c4:7b:f4:e2:fd:9e:10:40:66:6c:c1:49:3e:f4:dc:
a8:96:94:b9:f1:cd:8c:0c:78:ee:1d:4f:ee:1f:2c:79:b6:35:
56:d5:b9:92:2f:3a:c8:16:d3:ee:21:ce:52:98:24:3f:18:45:
67:6c:04:ce:bb:d6:c1:6c:3f:65:a1:f8:ca:20:0a:0c:8d:16:
6c:23:30:a8:e9:4f:a4:e4:61:8e:5f:ea:05:a1:e9:37:87:83:
c7:bf:cc:b8:30:16:68:55:f0:e1:cd:36:c1:ef:02:ea:42:42:
c9:f9:04:eb:35:76:49:53:31:36:ee:77:2e:af:33:b1:11:ad:
cb:fc:5b:df:e0:84:a7:49:00:5d:f7:d9:36:e3:33:e4:51:f7:
ad:40:a0:40:f0:38:fa:9e:b6:a0:49:c2:47:6a:fe:e4:a4:01:
bd:fd:1c:cf:bb:21:f1:96:d5:64:76:e6:91:fe:ba:69:63:d8:
c0:52:d4:6e:a0:7a:da:41:df:39:8d:eb:81:59:1c:c6:29:25:
0b:a0:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:39 2024 by rpki-client on console-fra.rpki-client.org