Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D836C296EDB411EE97D90C98775412E6.roa
File: D836C296EDB411EE97D90C98775412E6.roa (raw, json)
Hash identifier: jzhmY0fxtIiXgYFvQOj810U81wORCHlBUV/KbQYs/+c=
Subject key identifier: 30:54:78:43:4B:EC:95:EF:05:E9:F2:C2:D8:1B:73:2C:B1:83:61:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A719
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D836C296EDB411EE97D90C98775412E6.roa
Signing time: Fri 29 Mar 2024 10:12:27 +0000
ROA not before: Fri 29 Mar 2024 10:12:24 +0000
ROA not after: Sat 04 May 2024 10:12:24 +0000
asID: 142062
IP address blocks: 154.86.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42777 (0xa719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:12:24 2024 GMT
Not After : May 4 10:12:24 2024 GMT
Subject: CN=6606940b-df90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:b1:28:f4:1a:b9:34:11:58:d1:b1:a7:57:
07:4f:c3:48:c8:1d:d2:4f:aa:65:89:0f:04:9c:0b:
88:da:73:cf:a2:12:77:a9:d8:3f:f6:f7:62:55:50:
7a:20:98:15:db:15:7f:e9:04:e8:b5:97:5e:65:82:
98:ca:7c:3b:72:6f:fc:b6:16:f9:06:35:47:2a:ca:
a1:07:08:cb:72:78:0b:3f:cd:21:b7:b3:64:2f:7d:
e2:78:98:d7:e6:15:50:2f:df:bb:97:31:02:80:90:
fa:e3:ca:59:34:63:f6:0e:b7:75:1c:5d:c1:70:ee:
30:a8:13:f8:ea:72:80:fb:93:78:0d:f2:a1:e8:8f:
51:85:52:2f:7c:af:35:1b:f0:d0:ff:20:a7:4b:1c:
5f:40:23:59:db:09:fb:41:8c:7e:77:51:61:eb:40:
9a:97:76:5a:5a:56:e2:0d:cb:01:03:b3:e9:dd:4e:
f1:f2:12:1c:95:a4:15:93:8b:8c:d2:52:04:5c:06:
bf:af:b8:03:d5:0e:1e:d0:6f:63:31:eb:fb:23:cb:
90:cc:5a:63:bf:3d:da:10:8d:0a:33:78:80:9f:8d:
48:43:52:43:08:57:96:4d:51:4b:fd:45:51:aa:bc:
ad:9b:48:a0:05:e3:69:a6:2e:c2:8c:5c:63:4f:28:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:54:78:43:4B:EC:95:EF:05:E9:F2:C2:D8:1B:73:2C:B1:83:61:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D836C296EDB411EE97D90C98775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.72.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d7:8b:ae:ce:57:3e:c9:71:d8:89:2e:cc:50:98:1d:57:0c:
82:0e:b8:34:e2:10:14:76:50:96:02:9c:a8:81:1a:a1:cf:ae:
b2:63:b4:45:06:bd:d0:79:7d:68:da:0c:da:9c:7b:2e:e1:21:
75:8e:ed:77:27:f2:6e:41:52:0a:4b:c0:29:02:e8:df:7d:cd:
18:df:2a:0f:2c:19:b8:d3:63:71:c9:c9:3c:34:3b:7b:93:2d:
ae:75:76:6a:1b:70:69:8d:09:07:21:38:1b:b4:51:bb:ff:87:
c7:f4:b7:ba:8e:96:a9:56:be:35:65:7b:a1:c5:0f:d8:72:4d:
9d:0b:05:89:58:2d:07:63:6f:4b:4f:e9:fc:97:7d:92:18:35:
a4:5d:27:fb:59:18:70:30:fd:ed:eb:a3:84:00:45:01:72:3a:
b1:ff:2c:89:4a:25:e3:11:24:39:c1:03:93:64:42:17:66:df:
d2:a1:05:f2:cc:dc:16:d4:f6:d9:c9:0a:e3:76:7c:cf:26:8d:
3d:a8:48:3d:ef:68:87:af:5d:53:aa:e1:b5:40:61:a3:e9:c4:
85:4b:18:5e:d6:ba:9d:50:76:b6:5e:6c:6b:e3:2e:b3:3c:3e:
86:33:80:51:d6:46:0a:b6:9c:29:35:c4:35:11:1a:ab:4e:22:
08:35:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org