Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAEA2F48EFF111EEADD0C89C775412E6.roa
File: DAEA2F48EFF111EEADD0C89C775412E6.roa (raw, json)
Hash identifier: VfbgjXpfMWAjxK0FsLvEvrIKRxxuJrHtg+7InN4k4SQ=
Subject key identifier: CF:BF:DE:F9:A7:71:47:51:B7:38:82:E9:31:BD:A5:ED:CE:F3:66:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAEA2F48EFF111EEADD0C89C775412E6.roa
Signing time: Mon 01 Apr 2024 06:34:13 +0000
ROA not before: Mon 01 Apr 2024 06:34:10 +0000
ROA not after: Tue 07 May 2024 06:34:10 +0000
asID: 138915
IP address blocks: 154.223.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42948 (0xa7c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:34:10 2024 GMT
Not After : May 7 06:34:10 2024 GMT
Subject: CN=660a5565-e0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:b1:d4:5e:fb:d3:b9:e2:44:54:78:be:e7:
60:fc:94:ee:c0:55:e3:41:c8:c0:b1:ca:3c:e8:87:
3c:c9:94:2d:14:69:40:3f:29:4f:8d:c2:0c:84:7c:
fa:c8:f3:5c:98:95:60:9b:ef:e9:d3:69:2f:05:d1:
e3:6f:40:ae:50:80:d2:45:1a:b8:75:fe:74:58:76:
40:98:e3:31:9b:b8:b3:4f:dc:da:a4:9c:11:95:80:
aa:8e:f7:a0:c8:e7:4d:02:1b:3d:25:ec:6a:4e:93:
57:7b:37:66:26:f2:89:eb:e2:c3:5d:76:67:62:4d:
09:19:ae:fb:03:88:2b:75:30:a5:f8:45:30:29:88:
e9:f1:0d:b9:37:14:bf:12:65:e3:cc:8d:23:10:a2:
68:53:11:ee:a2:21:88:81:18:d1:e7:6b:01:77:60:
ec:2c:1e:57:70:57:13:be:2c:75:2e:43:e2:2b:a4:
cb:41:b5:32:6d:fa:13:2d:78:c5:7d:a8:dc:c6:8f:
9e:04:7f:ab:76:af:6b:88:a2:a5:6d:8e:ad:20:82:
50:86:d1:42:2f:89:50:c7:63:d5:32:c5:7e:8a:09:
3d:f3:90:32:8f:4b:88:e9:98:fc:3b:12:c7:51:a1:
01:f1:2b:1e:96:14:e5:74:6d:89:e6:d3:29:e7:0c:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:DE:F9:A7:71:47:51:B7:38:82:E9:31:BD:A5:ED:CE:F3:66:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAEA2F48EFF111EEADD0C89C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:cb:15:19:ba:43:fe:13:f7:9c:1a:5f:1d:99:b7:71:32:94:
51:ea:2f:ef:53:95:7f:75:26:95:5e:12:51:be:89:64:0b:74:
2d:85:7b:8e:0a:01:b4:1e:ac:13:d1:d6:08:80:b3:cf:b9:ee:
38:78:da:cc:08:6b:f4:d3:f7:05:20:24:8f:78:4e:89:15:1e:
41:63:50:f3:82:0c:81:41:d1:43:d4:40:32:51:34:81:7d:68:
91:b4:bb:fd:00:97:31:f1:66:13:ce:a7:f7:87:07:38:4c:c1:
7c:db:03:fc:b9:25:96:10:51:2c:98:e6:31:1a:78:95:ce:9c:
23:cf:56:29:b8:a2:07:5c:f5:49:9c:17:ee:30:86:60:7a:5e:
4d:e5:fc:7a:2c:fd:41:bf:12:c4:27:4f:41:d7:93:8d:a6:51:
9d:a2:a8:f4:06:2d:75:ca:3c:ce:02:32:07:76:4a:c2:50:a9:
22:88:b0:92:57:f8:f8:25:f3:04:a8:51:bb:bc:ff:af:5d:14:
b9:3f:f8:f5:c7:88:f5:d6:67:d2:84:a7:1f:29:81:07:4f:d6:
4c:a5:0c:d9:5d:11:3a:e3:55:88:82:a8:8a:9c:13:e1:2f:e7:
03:85:05:16:2f:b0:8d:cf:ba:69:e5:49:3a:83:97:09:b0:2e:
87:5b:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org