Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BB13ECFBAC11EE979DDD27017001B1.roa
File: D8BB13ECFBAC11EE979DDD27017001B1.roa (raw, json)
Hash identifier: B/ACx3RsoqBfUsHPtTzvaG2UIEuwgLmUCF0uodW0F3E=
Subject key identifier: B6:9E:92:B7:C0:90:41:63:35:4D:91:E0:95:7F:15:25:C4:F3:E5:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BB13ECFBAC11EE979DDD27017001B1.roa
Signing time: Tue 16 Apr 2024 04:50:28 +0000
ROA not before: Tue 16 Apr 2024 04:50:25 +0000
ROA not after: Thu 30 May 2024 04:50:25 +0000
asID: 63139
IP address blocks: 154.94.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44483 (0xadc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:50:25 2024 GMT
Not After : May 30 04:50:25 2024 GMT
Subject: CN=661e0394-447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:10:1c:ed:89:fd:18:87:85:fb:ac:d7:87:
9f:1f:98:f5:79:df:21:05:61:45:77:cf:20:4a:61:
6f:f8:70:d3:c2:66:3e:e2:73:15:37:72:e8:0c:f0:
ac:4e:8e:bd:30:7b:42:c9:07:79:45:cf:9c:2a:0d:
cc:0c:53:f9:c3:78:b5:94:02:4b:77:08:d0:d2:1b:
f8:17:cb:13:67:17:87:81:e4:35:75:a9:12:e3:18:
bd:7e:4e:e3:a5:4c:75:21:e8:6d:46:97:32:62:0c:
f9:42:0c:50:70:e0:b1:9d:91:b2:9f:02:06:56:8f:
d5:b8:ad:1a:27:83:ba:f7:9e:c0:6c:f0:0f:41:28:
6e:2e:b9:69:77:a0:1d:40:5c:25:6a:81:20:f6:74:
75:0f:d6:f0:a3:c4:2d:3f:31:0b:b7:78:df:0f:a2:
5b:64:70:e5:62:82:05:cd:20:c7:c4:94:b9:18:b8:
97:7a:54:9b:a7:7d:63:bc:24:1b:71:84:af:6b:5b:
63:40:1c:fc:06:d7:1d:13:e6:c6:06:66:6c:f5:a2:
e1:c3:19:a0:6c:de:c3:05:07:a1:7e:ab:bc:4a:a6:
8b:ab:40:30:01:5a:43:b9:ba:f3:1e:e4:1a:21:b9:
35:11:cf:94:1f:61:b9:6a:dc:68:2e:c3:c9:5c:41:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9E:92:B7:C0:90:41:63:35:4D:91:E0:95:7F:15:25:C4:F3:E5:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8BB13ECFBAC11EE979DDD27017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:30:15:fe:74:7d:fc:8c:76:01:dc:c8:9f:87:f3:26:4c:b6:
4f:5f:73:00:2b:bd:4d:58:9d:3f:f7:5a:ff:d2:ad:e1:21:71:
92:cc:56:51:b6:0b:f5:bd:10:e5:ac:16:bd:e9:3b:6e:23:26:
de:39:e1:d0:5f:cb:a3:a1:b5:b4:b2:4d:a7:fd:74:b8:93:a2:
0c:57:84:94:fb:bf:d9:f3:3f:d6:63:48:bf:91:be:77:a5:4c:
04:1c:d7:5b:67:6c:77:59:54:b2:14:02:a7:4a:25:32:0c:c2:
f9:60:2e:6b:e3:49:28:40:dd:95:f7:ce:95:c0:a5:13:f8:d3:
df:b8:d9:de:f3:7f:ae:84:1a:47:c8:73:e9:59:b1:5b:a6:9e:
bd:db:70:d0:40:7c:51:5f:0a:1a:3e:a4:ea:85:88:a3:95:13:
49:25:3a:d7:c7:e1:07:a1:57:ec:9e:ee:7a:65:e8:a9:35:22:
0c:aa:f6:90:ea:b6:51:ac:85:67:04:f8:46:30:c7:80:3b:90:
1d:2e:e7:54:1c:26:13:7d:30:b0:a8:4a:80:aa:0e:46:92:a5:
4f:e4:87:0e:b2:bf:ff:89:82:de:6c:ab:c6:25:66:ba:c8:eb:
f9:c4:4d:36:f5:31:06:b1:12:8d:3a:e5:32:d1:4b:3d:97:77:
b6:67:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org