Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D20C6A44F17211EE9D29B567775412E6.roa
File: D20C6A44F17211EE9D29B567775412E6.roa (raw, json)
Hash identifier: wPGxov5M7Ed5DK06RTR/ZWx2La0IPPHpTLsflAWS6mw=
Subject key identifier: CA:07:ED:40:A1:CB:CB:EE:24:9A:0F:54:02:13:D3:39:1D:1A:E5:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A936
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D20C6A44F17211EE9D29B567775412E6.roa
Signing time: Wed 03 Apr 2024 04:29:55 +0000
ROA not before: Wed 03 Apr 2024 04:29:51 +0000
ROA not after: Sat 04 May 2024 04:29:51 +0000
asID: 140869
IP address blocks: 154.81.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 04:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43318 (0xa936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:29:51 2024 GMT
Not After : May 4 04:29:51 2024 GMT
Subject: CN=660cdb43-1d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:b3:78:70:24:57:2b:13:c8:a9:59:07:44:
50:57:1a:f8:74:5c:ce:66:5a:40:bc:28:73:5f:78:
21:19:f7:70:8d:22:d7:04:76:5c:83:2a:aa:3f:3b:
92:9f:24:9d:89:06:d2:8c:d6:b5:ef:86:4d:7c:cd:
0c:4c:c2:86:95:e9:5c:99:4d:f8:05:59:50:8f:a6:
d7:08:a1:73:38:c4:db:47:f3:60:2b:2b:97:f4:7b:
4f:9a:b3:bf:22:6a:22:bf:4f:98:9a:ed:f0:2e:22:
ea:8f:68:b4:12:d4:63:ee:db:18:bb:d9:1a:28:f1:
be:46:7c:fc:62:0b:ca:8e:4f:91:bc:c5:05:50:98:
ce:12:76:8c:cb:ce:ab:7f:8f:28:b4:6e:74:2f:46:
68:38:f5:76:bb:f0:43:93:c4:7f:6b:58:52:99:87:
3a:33:d4:8e:c8:f4:04:ca:78:2a:e4:ca:c4:60:a4:
c1:d7:d4:68:59:32:5f:b6:47:d1:bd:9c:32:da:51:
93:e5:f2:78:b4:c6:28:5d:42:c1:1d:a4:69:da:70:
a9:bd:68:3a:7b:44:1e:40:19:f8:2a:1d:67:ce:76:
91:19:6d:42:8b:c3:86:9a:f0:aa:5e:31:12:1e:d1:
51:dc:45:a8:bf:f3:b3:43:d5:de:17:e3:a5:d1:72:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:07:ED:40:A1:CB:CB:EE:24:9A:0F:54:02:13:D3:39:1D:1A:E5:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D20C6A44F17211EE9D29B567775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b6:1c:9d:bd:78:f1:75:1d:6d:85:69:a7:3b:17:4f:5e:f6:
d4:f3:32:5c:f3:0f:76:67:c2:42:33:d3:25:f0:62:8c:5e:1b:
f4:8c:19:a5:14:08:df:3b:95:c9:51:5b:f7:0f:74:b1:fd:94:
70:0c:b7:f0:b9:df:fd:1a:93:84:7e:92:49:7b:24:3f:ba:c4:
24:28:ad:0b:a8:35:d3:5d:0e:43:c0:8f:a2:4e:54:ff:4a:8b:
15:53:b6:1f:37:a3:72:49:3b:32:d9:6d:99:a0:e3:87:06:d1:
c1:34:46:dd:e9:93:20:dd:98:d0:f9:2b:60:56:38:31:8e:65:
eb:57:45:16:69:4d:cd:5b:e5:a1:df:fc:67:ea:d1:76:ec:21:
87:d9:6b:0d:65:cd:3d:b9:23:bd:21:bf:77:60:3b:d9:3d:ee:
7d:e1:08:54:53:d1:9a:4d:25:c4:c8:77:85:58:f6:da:b7:31:
64:23:34:95:6f:4f:76:da:c4:8a:32:c2:06:df:58:27:6e:04:
12:42:e2:01:e0:05:ee:05:e9:30:17:8f:ef:83:7e:4b:7f:09:
ea:53:cf:ec:b4:9a:a0:52:f8:3b:5d:ac:88:04:2f:01:57:d5:
51:0e:46:a9:d1:91:b6:34:6f:9e:a9:33:29:6d:46:72:55:c0:
70:91:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:39 2024 by rpki-client on console-fra.rpki-client.org