Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B1393AF00A11EE9F651D61775412E6.roa
File: D1B1393AF00A11EE9F651D61775412E6.roa (raw, json)
Hash identifier: cY1ycWlOlVa33j8Mz/44XAWPIkCY2bMdmwSaA1RUWFE=
Subject key identifier: 1F:31:D2:EA:FA:EB:18:A5:DF:6B:94:15:97:6D:9F:BD:99:CC:86:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A840
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B1393AF00A11EE9F651D61775412E6.roa
Signing time: Mon 01 Apr 2024 09:32:55 +0000
ROA not before: Mon 01 Apr 2024 09:32:52 +0000
ROA not after: Sat 11 May 2024 09:32:52 +0000
asID: 138915
IP address blocks: 154.205.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43072 (0xa840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:32:52 2024 GMT
Not After : May 11 09:32:52 2024 GMT
Subject: CN=660a7f47-fa17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:43:bd:2e:00:eb:cc:6c:81:c6:39:31:9d:
9d:ef:73:24:c7:4f:70:ee:9d:21:fc:57:2c:a6:19:
fa:e8:02:ca:64:47:6a:17:02:58:82:8b:c9:17:35:
9b:f9:a2:e1:7a:23:71:2b:bc:13:0c:5c:a6:d2:5d:
b2:62:ff:2d:39:15:46:87:de:32:ca:a5:7d:13:35:
c4:5d:fd:79:8e:d7:1e:80:5d:d6:ce:4c:34:94:78:
d0:47:b9:a3:65:28:7f:8a:16:81:7b:d3:13:5e:60:
57:ef:b0:d5:dc:9e:57:61:64:b7:88:07:bc:86:86:
7a:0b:bb:f9:a1:76:ed:5a:c2:8d:51:59:e0:da:93:
af:ee:41:2c:29:44:73:8a:21:ff:7a:aa:b5:1b:bd:
fd:dd:4d:bc:bf:ea:87:8c:0f:36:51:df:d3:d3:5a:
db:f1:e6:95:9a:77:21:ca:74:1b:d7:19:46:4b:f9:
5b:0b:0f:d1:08:64:cb:89:18:7d:ec:d0:8e:92:35:
5c:c1:16:f7:06:42:50:c6:a4:d2:95:ad:c2:34:65:
cd:af:dc:69:d9:87:9c:1b:d4:39:a3:2e:b7:27:a8:
7c:a2:03:29:64:1f:3e:4b:63:c8:9e:e2:b8:bb:33:
2f:ce:f4:46:2f:55:50:aa:25:06:1b:74:de:14:47:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:D2:EA:FA:EB:18:A5:DF:6B:94:15:97:6D:9F:BD:99:CC:86:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1B1393AF00A11EE9F651D61775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.134.0/24
Signature Algorithm: sha256WithRSAEncryption
69:48:70:03:97:63:34:3e:0e:ba:c7:df:c2:50:8f:e7:e1:8a:
05:5b:21:12:ec:3e:6a:b8:b7:5f:2e:65:1e:99:09:75:c3:e0:
65:12:74:fa:cb:bf:8f:11:7e:10:aa:a6:20:35:63:3c:55:eb:
94:fd:3e:50:8b:e2:6e:7d:e2:ba:90:63:fe:1a:a7:de:1f:f4:
21:29:3a:46:85:79:3c:28:a6:d1:a2:b4:8d:2c:f4:c7:34:51:
e3:db:7c:5c:ad:fd:a5:2a:fc:33:be:9c:8d:c7:92:c1:1c:cd:
f7:f4:7b:3a:31:bf:b7:5f:5e:58:78:3a:4e:4f:48:68:3e:aa:
e8:52:87:0a:ba:bd:cb:36:87:0c:10:10:a0:4f:6b:a2:0c:8c:
dd:0e:9b:22:ee:91:d5:48:9d:39:a6:9b:eb:b4:bb:0d:a8:c9:
67:9b:38:51:f9:67:05:39:d5:a3:dd:a9:4e:0c:7a:85:c5:86:
c7:d9:4c:d3:e9:a3:ba:22:50:57:ef:e0:01:63:61:8d:fe:9c:
72:0f:d3:30:b5:88:5d:0b:9d:e1:db:5c:e8:77:73:3c:48:d8:
3a:54:6b:96:e1:a0:83:16:37:a8:6b:64:f9:4e:f5:1f:f5:11:
ff:0a:a9:2a:ea:2e:bc:0e:a2:fd:9f:c5:5c:fc:74:03:54:d4:
3a:30:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:39 2024 by rpki-client on console-fra.rpki-client.org