Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F7E160FAF111EE84295C2D017001B1.roa
File: D9F7E160FAF111EE84295C2D017001B1.roa (raw, json)
Hash identifier: Vd3rxITI6Wtj2Z0E3PJfg5c0kcUEyWJkBPLwMx+YNBM=
Subject key identifier: 2F:5F:FB:9A:9E:7A:62:01:41:83:98:70:76:CE:29:F1:5F:91:5C:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F7E160FAF111EE84295C2D017001B1.roa
Signing time: Mon 15 Apr 2024 06:31:55 +0000
ROA not before: Mon 15 Apr 2024 06:31:51 +0000
ROA not after: Thu 30 May 2024 06:31:51 +0000
asID: 63139
IP address blocks: 154.94.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44246 (0xacd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:31:51 2024 GMT
Not After : May 30 06:31:51 2024 GMT
Subject: CN=661cc9da-58d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:85:7c:64:76:d0:c0:08:4f:13:f8:e4:4e:
d1:b5:57:c0:87:22:a1:55:b1:82:95:ca:f7:fd:a6:
0d:70:42:91:bb:95:46:4f:b2:85:45:e2:7b:88:8c:
33:9a:40:fb:0b:6e:51:79:07:1f:6e:42:46:e0:a7:
01:fa:13:03:a4:f8:80:98:d7:34:57:9a:a5:80:db:
a7:33:d9:12:d7:e6:b4:67:65:bc:0a:3e:ad:6c:d3:
e4:39:90:00:a7:32:6b:77:34:23:47:f6:50:83:c6:
cf:d0:59:83:5f:dd:31:d8:42:b3:ec:12:94:c7:33:
8e:a5:a8:9d:0b:ca:22:54:f3:8e:11:8c:23:d8:12:
59:80:f3:6b:b5:8f:e2:d4:3a:6c:11:87:81:24:06:
75:91:c2:28:04:a0:fb:5c:f8:a7:1a:1e:e8:08:ae:
0a:46:eb:ac:46:55:3a:de:7a:bd:35:ba:21:b3:6d:
d2:48:53:bc:e7:4e:74:31:fa:5c:a9:7b:41:84:fd:
cc:1c:51:22:46:be:46:7c:49:a6:55:1a:e0:4e:f2:
5f:31:ec:08:4a:2b:32:25:3d:52:c2:39:c9:66:03:
dd:77:2c:c3:ce:3c:44:b3:61:f2:1c:c4:5a:48:ac:
05:e5:14:5c:ec:94:0c:44:f8:e7:71:46:4b:f3:59:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:FB:9A:9E:7A:62:01:41:83:98:70:76:CE:29:F1:5F:91:5C:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9F7E160FAF111EE84295C2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1e:3f:89:fd:b8:db:fa:01:4d:ae:15:75:8a:f5:49:20:ba:
5d:11:9d:3c:8b:aa:f8:e9:02:32:21:aa:ae:f5:72:20:8b:da:
98:ff:37:09:57:23:a3:0a:32:ab:56:34:58:9b:b3:42:5f:f2:
a0:da:51:3d:80:c6:d6:dd:75:65:c0:ad:6f:b1:c5:19:6d:c9:
20:17:93:4d:81:3b:b7:5c:21:0f:8f:50:2e:77:db:7a:60:3e:
c6:3b:f6:a3:ce:bf:ab:54:7b:da:22:3b:4c:74:63:54:fc:91:
44:13:f4:26:82:2f:93:56:1c:65:99:97:d0:dc:cb:2e:e3:45:
be:1b:f0:1c:ea:c9:3c:42:23:07:25:4e:81:c9:46:e5:de:28:
a1:8f:f8:e9:56:b1:a4:4d:43:a3:86:55:f4:b1:52:f8:c2:4c:
f7:4b:30:c1:c3:04:ec:3f:0e:da:ee:43:93:cf:96:c1:23:a2:
f6:00:82:34:32:7e:cf:e7:f1:c1:ab:3b:32:d7:09:52:c1:b0:
a2:23:f2:d1:1f:03:cd:80:79:b7:8d:92:01:5e:d1:2e:a0:a9:
fe:b0:ea:e3:9d:ed:22:1d:0b:b9:74:e2:76:79:e5:91:d2:45:
89:b1:eb:de:f7:11:a5:6c:c2:57:11:e1:fc:88:00:37:28:3c:
ff:27:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org