Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1D8C50EDB611EEB28EC7A7775412E6.roa
File: DA1D8C50EDB611EEB28EC7A7775412E6.roa (raw, json)
Hash identifier: Nlmye4XB7XXeoOzP2HBqviWcAjMCt4Uz018DdvZ9EsE=
Subject key identifier: E4:CA:32:12:65:B7:48:05:92:4F:4D:28:C6:74:F2:B7:D9:0C:78:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A729
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1D8C50EDB611EEB28EC7A7775412E6.roa
Signing time: Fri 29 Mar 2024 10:26:49 +0000
ROA not before: Fri 29 Mar 2024 10:26:46 +0000
ROA not after: Sat 04 May 2024 10:26:46 +0000
asID: 54467
IP address blocks: 154.195.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42793 (0xa729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:26:46 2024 GMT
Not After : May 4 10:26:46 2024 GMT
Subject: CN=66069769-3135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:7f:14:58:fa:fa:83:cb:5f:6c:8f:a0:53:
0f:60:5c:4a:fd:f7:df:ba:e5:7c:17:5e:60:bb:00:
c3:7e:33:87:2b:e6:52:58:4b:8b:e3:bd:b7:69:f9:
8c:4c:46:e9:d1:b9:f3:5f:b0:ed:fc:17:60:00:e3:
d3:84:68:ab:2a:ef:01:ed:ea:1a:7b:3e:9e:3d:63:
57:ab:e8:c2:a2:f6:2c:68:ea:9d:a7:02:47:1a:00:
26:5a:ca:c3:59:fe:3a:70:91:f5:a8:6f:c2:8a:28:
52:8e:ff:b3:68:62:62:a2:c8:28:27:9d:dc:53:61:
20:14:15:49:b9:d1:af:fd:e1:87:ac:87:27:d4:db:
7f:94:52:c1:78:e9:39:84:ba:d2:17:f3:1d:19:5a:
a3:ad:02:c6:cc:5c:8b:b9:7f:d5:67:6c:39:5c:bc:
88:1d:ea:66:2f:c4:6c:17:cd:2b:23:9a:fb:5e:3e:
75:6e:8a:e2:c2:67:5b:c5:12:3c:06:5f:6b:7e:e6:
8b:6f:30:25:1c:97:ba:0c:d7:d8:91:a5:93:36:11:
97:37:c9:d8:53:bd:ab:c4:b4:80:2b:bc:09:ca:4e:
d7:66:cf:0d:5b:da:33:3d:00:94:35:9c:77:bc:dc:
fc:ad:71:e5:e6:cb:18:41:e2:7a:7c:2d:5b:f6:b5:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:32:12:65:B7:48:05:92:4F:4D:28:C6:74:F2:B7:D9:0C:78:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA1D8C50EDB611EEB28EC7A7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:b1:bf:9d:b2:27:af:28:55:fa:8c:ee:bc:0b:b0:f1:95:cf:
a4:cf:9b:5b:73:d3:7e:60:f8:27:09:cf:58:57:79:0d:1f:a7:
57:1e:35:cc:46:41:1e:3f:c6:31:ed:e6:d1:15:1c:e7:37:34:
10:9e:3e:21:7c:69:91:ec:5e:1f:6c:da:df:12:0e:fc:32:2b:
31:8f:e4:8a:0b:d6:9a:7d:7a:57:c4:66:23:94:0e:89:18:0f:
23:51:34:6e:3b:b9:73:7a:f7:18:c0:7f:8e:72:4e:b3:18:64:
a5:57:b1:9f:c2:39:3c:05:c0:01:34:34:8d:44:d7:a1:cf:4e:
6d:5f:8a:41:e1:8b:52:09:73:82:d0:7a:7d:30:32:45:b4:22:
0b:b4:4a:08:05:b3:a6:33:0c:75:e6:8c:0e:8e:fe:4d:48:5a:
23:57:fb:a1:9e:26:a8:89:1e:4b:ce:dc:87:ef:81:bc:99:3f:
cd:bd:85:68:73:fb:91:7c:e8:bd:20:a1:c8:ce:05:0f:73:79:
b3:ab:9d:aa:0c:47:5a:66:36:70:cd:3b:5c:49:90:0c:09:5f:
b9:19:47:f9:03:71:e9:49:cd:0e:7c:29:cf:64:f3:f5:82:d4:
c8:a6:bf:61:20:0c:5d:05:ec:bd:55:55:1e:3f:cc:27:c7:c6:
cc:72:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org