Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433BCCAF00811EE89514251775412E6.roa
File: D433BCCAF00811EE89514251775412E6.roa (raw, json)
Hash identifier: ShQp7DqfHbsTaDIxY0GwX3VPVlYSoI5yDsvCDmiRhew=
Subject key identifier: 84:B7:AE:76:C0:85:9A:FB:E3:B7:DB:D7:D9:06:37:54:CC:38:9A:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A828
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433BCCAF00811EE89514251775412E6.roa
Signing time: Mon 01 Apr 2024 09:18:41 +0000
ROA not before: Mon 01 Apr 2024 09:18:37 +0000
ROA not after: Sat 11 May 2024 09:18:37 +0000
asID: 138915
IP address blocks: 154.205.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43048 (0xa828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:18:37 2024 GMT
Not After : May 11 09:18:37 2024 GMT
Subject: CN=660a7bf0-e87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:68:1c:1c:09:fe:1d:42:14:9d:5d:39:9a:
d6:55:8e:69:0d:1e:1e:69:f4:71:bb:b6:e0:43:20:
de:ba:ad:f8:56:a3:0f:c9:18:5c:2d:a5:18:45:cf:
8c:52:9c:b0:25:30:9e:b0:55:3e:93:d6:1e:d5:61:
3d:fe:1f:88:c1:6e:ad:b5:bd:29:84:d4:1e:00:88:
63:88:1f:a3:8a:33:a5:01:b8:97:3e:d7:aa:0b:a8:
6b:35:e6:f3:76:be:ff:ed:98:99:9a:12:f2:ef:31:
5f:af:a9:51:cc:fa:af:95:d8:c3:c8:3a:91:dc:8b:
13:74:a3:5d:2f:ff:72:0d:e4:59:c3:8b:a1:5c:43:
02:40:e6:40:ac:ef:07:ab:3a:6c:41:96:12:b2:1a:
bf:9d:e9:0f:70:bf:b8:07:73:bc:5f:b3:28:b8:f1:
ec:b1:5f:4d:ab:9a:4c:e0:3f:9d:dc:f7:b9:3d:51:
10:de:26:4f:3d:6d:52:0a:5d:be:66:7f:5b:fa:67:
b7:39:b4:63:7b:df:c4:44:d1:a3:1c:cb:d6:96:f4:
9b:e6:8c:e3:e4:0f:b1:76:50:4d:7a:c7:29:9d:fe:
6e:49:e9:c8:c3:f0:4d:52:33:17:0b:87:9a:38:70:
de:45:c1:70:8f:c4:33:06:ef:bd:57:0b:e8:a3:3a:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:AE:76:C0:85:9A:FB:E3:B7:DB:D7:D9:06:37:54:CC:38:9A:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433BCCAF00811EE89514251775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.149.0/24
Signature Algorithm: sha256WithRSAEncryption
35:82:be:a2:b2:69:82:2e:08:bd:1d:15:99:48:8c:d0:88:d8:
c7:dd:9c:be:ca:76:f0:db:fd:18:55:4e:35:4b:d5:c6:48:c0:
d9:aa:4c:7e:cc:7c:0d:ce:64:0d:9e:fc:05:2e:33:af:d0:71:
a4:7f:39:20:43:37:ea:41:38:c5:9d:c3:0f:f9:33:01:d1:50:
dd:13:c7:d7:ab:1f:9d:08:8b:f0:1c:42:94:ef:4b:09:7e:c2:
a9:01:77:58:48:dc:25:d5:a6:7a:63:02:1f:27:9c:9f:10:99:
cb:bf:89:cd:58:24:88:a9:b6:f5:a3:f1:d3:7e:79:d1:6b:9c:
e2:ae:b0:ca:bd:7e:63:6a:ad:dc:31:20:25:ae:7a:57:69:2f:
ba:e4:5b:6d:3c:ee:96:8b:a0:f7:1f:fd:0e:de:f0:23:80:07:
ef:7d:e4:b6:4c:e4:70:3f:59:f1:d2:3a:7b:e6:e6:3c:0b:a2:
41:14:a7:ed:44:a6:87:84:3b:98:8f:f8:92:36:ee:76:25:a8:
15:6b:05:9c:db:aa:4f:44:4f:2e:80:e8:2b:f6:7e:46:94:de:
bb:77:b0:3f:31:95:00:ba:29:a9:79:c2:34:29:46:0e:69:12:
e4:cf:59:db:75:66:3b:50:b4:97:8d:a2:ff:fd:d1:88:7a:7c:
db:4b:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org