Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA00CA52014D11EF9005DE04017001B1.roa
File: DA00CA52014D11EF9005DE04017001B1.roa (raw, json)
Hash identifier: 9XMDLmnh0K5dDFD03WHj8BXEUum8QZTocRYy+9vHrnE=
Subject key identifier: 23:1A:08:7B:FD:E1:32:A8:C3:9D:0E:A2:57:A3:BE:3A:48:7E:EC:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA00CA52014D11EF9005DE04017001B1.roa
Signing time: Tue 23 Apr 2024 08:45:35 +0000
ROA not before: Tue 23 Apr 2024 08:45:32 +0000
ROA not after: Sat 11 May 2024 08:45:32 +0000
asID: 9009
IP address blocks: 154.92.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44852 (0xaf34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:45:32 2024 GMT
Not After : May 11 08:45:32 2024 GMT
Subject: CN=6627752f-aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:bc:4c:52:9f:e8:f4:a4:26:a6:38:b5:34:
c7:82:d3:45:68:e4:09:90:ec:5b:1d:98:da:09:05:
73:23:c8:21:74:7d:fb:f3:84:76:9d:bd:97:ee:13:
ee:80:e7:ad:ef:73:ee:4c:d3:61:16:4b:80:06:50:
f8:6f:60:9a:85:47:98:7a:a8:f5:a1:9c:cc:fe:38:
48:d5:d9:24:ed:d2:ec:3a:45:25:d9:d8:a7:13:8a:
2b:7b:98:97:b0:de:0e:ca:85:09:90:a5:63:79:92:
56:2c:67:96:61:35:dc:73:e4:bd:96:0b:c9:7a:ee:
cf:59:ba:c5:6c:96:c4:5a:11:2e:10:61:3a:f6:e0:
9b:2c:f2:6e:36:22:ee:a5:2d:bb:c7:b7:eb:c4:a7:
c8:5a:15:da:9e:7a:ed:f8:a5:96:06:a6:23:52:2c:
09:2b:18:d6:4a:dd:59:f3:4d:6a:9f:4e:60:5a:4b:
37:eb:b1:8c:27:12:eb:b6:cc:53:19:f0:06:fd:1c:
b0:65:a1:95:ce:fd:3a:67:74:22:0b:d3:a0:fd:78:
19:67:26:f0:bf:78:39:65:b1:1a:09:75:aa:01:c0:
eb:f3:71:3e:28:97:e2:d8:a1:ea:56:90:31:55:41:
8b:9d:dc:f9:d2:59:32:f7:ea:ac:32:47:87:2b:30:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:08:7B:FD:E1:32:A8:C3:9D:0E:A2:57:A3:BE:3A:48:7E:EC:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA00CA52014D11EF9005DE04017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:85:ea:d5:f7:d1:a6:8e:85:07:50:8e:17:29:7f:d8:59:ba:
62:17:52:28:b6:79:ec:ed:16:0b:68:2d:01:70:74:f2:56:25:
e5:b0:0f:e9:68:d1:de:45:53:f2:af:65:1e:17:3f:de:77:19:
f0:2e:b0:1b:02:02:01:31:5e:14:03:86:76:7e:98:82:c3:a0:
7b:a3:4d:28:3b:9f:aa:57:72:97:3a:1d:58:fc:74:b5:a0:6f:
f8:2e:fe:45:57:66:55:47:c6:03:b2:fe:9d:19:3a:1a:cf:d0:
f1:6e:b2:29:50:b2:e1:ac:e0:b8:da:45:90:fc:d3:48:9b:00:
38:64:3c:a1:c0:a3:18:83:da:f5:55:0f:62:a8:2b:70:bf:11:
71:1f:b4:95:e4:43:b8:4d:6c:72:4a:0f:56:70:68:58:7c:e9:
14:7d:2b:42:e9:45:c6:11:0b:c9:fc:8f:57:39:9f:76:84:93:
94:52:ea:da:ae:22:ae:12:85:67:d0:f3:6e:00:9d:ca:f0:0d:
a8:d0:65:0c:c5:d7:f9:39:31:43:f0:0c:d3:b5:c2:90:69:b0:
76:b4:74:6f:53:9b:b6:37:a1:56:4a:a3:55:78:6a:03:23:b8:
74:18:b7:4a:0b:e2:2d:a5:44:a7:e1:3e:06:d5:0c:42:95:f7:
99:cf:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:07:59 2024 by rpki-client on console-fra.rpki-client.org