Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CE3D82F00F11EEB7FBEE86775412E6.roa
File: D6CE3D82F00F11EEB7FBEE86775412E6.roa (raw, json)
Hash identifier: qaBs+ReTNkxtRVj2BcDNdIynyQk9LPVtTIKUZksD+yI=
Subject key identifier: D8:6E:25:F4:4D:0C:20:79:68:50:2B:BB:E7:E4:1D:7D:26:D9:01:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A87A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CE3D82F00F11EEB7FBEE86775412E6.roa
Signing time: Mon 01 Apr 2024 10:08:51 +0000
ROA not before: Mon 01 Apr 2024 10:08:48 +0000
ROA not after: Sat 11 May 2024 10:08:48 +0000
asID: 63139
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43130 (0xa87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:08:48 2024 GMT
Not After : May 11 10:08:48 2024 GMT
Subject: CN=660a87b3-01bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:04:8b:ef:e8:38:2e:59:4f:b7:b4:2d:ce:
93:75:62:9b:0d:ea:07:dc:e1:b6:b2:c3:7e:02:a7:
54:b0:d2:34:67:14:0a:d5:ff:11:08:aa:c8:70:1e:
e4:55:bf:13:7f:35:20:a9:67:2b:1f:2d:fd:dd:f0:
70:63:7a:e9:2c:4b:fd:f8:56:2d:0f:2c:7e:70:c8:
39:87:5d:7b:25:2d:5e:32:90:89:e7:9d:d1:12:52:
b4:2b:66:0b:2b:c2:55:be:3a:59:28:ab:a6:ae:68:
63:82:40:0b:f8:0a:96:b6:bd:9b:ca:75:d6:43:28:
58:0c:27:b3:cb:32:44:2a:2c:8a:5d:85:2a:4a:04:
3b:e9:b1:81:51:f9:13:8d:ae:ae:69:dc:97:5a:2b:
87:d5:8c:35:c4:6e:06:a9:95:c0:ba:8a:46:49:48:
9e:15:9c:8d:20:bc:86:29:fe:4e:52:50:53:d5:98:
d3:5b:e1:62:27:f8:f1:89:94:72:a9:7d:1e:83:e2:
a3:46:77:ba:02:7a:a9:57:a4:8b:2c:6e:50:25:c2:
dc:ba:b9:97:48:88:4d:0d:2a:40:d9:db:70:98:6a:
d0:f3:7b:21:9d:6f:65:ad:94:56:76:d7:58:44:09:
a2:82:41:84:f8:95:90:66:be:76:37:45:f0:0a:d7:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:25:F4:4D:0C:20:79:68:50:2B:BB:E7:E4:1D:7D:26:D9:01:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CE3D82F00F11EEB7FBEE86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7c:7f:2e:c9:3d:7d:f6:c9:7b:6c:34:c8:3f:d7:8e:50:a5:
6d:1a:99:59:bc:e9:c1:14:1b:72:02:5c:b5:41:0c:68:7f:a2:
27:0d:16:11:d2:94:20:84:4c:c4:7b:f7:6a:ad:66:86:b7:6b:
f9:a4:c9:bc:a6:58:0d:48:ed:96:88:14:67:cc:d7:ab:7b:7b:
bb:00:1c:e4:70:38:df:af:ea:0e:53:1c:99:2b:69:81:21:99:
fb:63:fa:34:98:2f:34:0c:ec:17:5a:08:26:9c:8e:e4:21:c5:
28:63:74:69:22:52:10:f9:f4:8b:38:5f:8f:14:ce:96:84:57:
37:10:c9:1b:4e:bf:f1:c0:e9:c7:e6:5f:64:2d:07:e4:4a:30:
48:88:54:bf:b0:2f:f4:10:ba:2e:29:c8:64:96:a9:0a:a2:22:
66:b2:0d:96:bd:54:0c:f3:40:28:2c:44:b9:58:d8:84:6c:4a:
ca:b0:79:a1:9d:15:a1:61:5a:09:71:7b:d4:65:79:ee:75:1a:
cb:c5:61:59:1e:6e:45:4e:2a:71:fa:bf:c3:77:ec:dd:61:0d:
e9:9c:8d:f6:29:e6:c5:6c:87:d0:f6:93:c8:fe:ab:ab:54:79:
e4:aa:5c:48:e8:bd:22:2d:0e:9b:53:10:c7:2b:f3:cb:aa:ac:
9b:9a:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org