Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB030AF6FDC911ED80B0315B4AD9E6FC.roa
File: DB030AF6FDC911ED80B0315B4AD9E6FC.roa (raw, json)
Hash identifier: irEyvwoZQundM7eqCy8cnV8Q/g6FtZmvWbO1CyvFFc0=
Subject key identifier: 2D:AF:A5:43:4A:39:B3:49:F0:17:DD:8F:66:C9:57:94:E6:13:AF:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2824
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB030AF6FDC911ED80B0315B4AD9E6FC.roa
Signing time: Mon 29 May 2023 02:38:12 +0000
ROA not before: Mon 29 May 2023 02:38:08 +0000
ROA not after: Wed 15 May 2024 02:38:08 +0000
asID: 63888
IP address blocks: 154.207.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10276 (0x2824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 02:38:08 2023 GMT
Not After : May 15 02:38:08 2024 GMT
Subject: CN=64741014-ce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:58:71:3f:35:14:e0:92:53:ee:0f:6f:5e:
bb:f2:f9:4a:8e:c2:e3:5f:e8:b0:b2:54:0d:27:84:
00:9c:91:d1:37:c3:8e:c2:19:b6:2f:2a:2c:de:c1:
6e:5e:cc:f2:bc:d0:78:72:11:e2:f2:22:20:61:7d:
bd:c8:81:2f:9c:5a:e1:8d:38:18:83:cf:ea:fa:8c:
47:c5:24:11:7f:30:7e:2a:f6:6f:02:c7:82:2f:a6:
6b:c9:fe:89:0d:d1:bd:da:b8:80:12:c8:db:04:06:
fb:97:07:df:12:98:8e:03:91:17:37:50:5f:77:d2:
37:26:3d:91:dc:ee:9b:65:d1:d4:ac:68:e0:7f:da:
f6:05:67:be:b7:21:fe:3d:76:fa:8b:53:7f:fb:66:
f0:22:7d:ef:a7:5c:e5:7d:cf:36:b0:0e:ca:8d:4c:
dc:02:23:31:f6:cc:9c:05:10:f0:b9:d0:8b:75:2d:
ef:ec:f7:7c:cb:fa:a8:70:8b:ca:50:94:97:71:b2:
09:f5:86:78:82:15:95:b1:17:76:e8:44:1b:98:aa:
78:cc:bf:77:7d:82:e2:58:d4:8c:f4:1d:e5:06:1f:
f9:a9:50:ad:1b:6a:02:c0:37:bf:a6:c6:28:21:74:
f3:2d:e0:0c:ba:44:b1:33:12:f9:1e:a3:5f:fd:fc:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:A5:43:4A:39:B3:49:F0:17:DD:8F:66:C9:57:94:E6:13:AF:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB030AF6FDC911ED80B0315B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:31:e8:df:81:44:9a:7a:e5:ed:b3:cb:a0:2f:02:36:b9:29:
16:86:7b:03:6b:fc:43:16:12:27:5b:46:f9:cc:91:63:f4:13:
ac:da:ee:51:b2:d2:9a:30:4a:b4:2b:02:3c:9a:dc:26:39:82:
50:02:cf:08:f7:8d:45:5f:b9:ce:a8:7f:c2:ad:72:a0:d1:6a:
0a:dc:96:49:81:cd:fc:6e:31:69:4b:b0:99:f4:e3:c7:f0:ce:
49:e0:f9:d9:bc:4c:9f:95:d9:38:2c:a7:8c:67:ce:39:60:79:
83:2a:81:83:7a:71:74:66:bd:ea:61:6d:0a:87:e0:a8:e6:be:
ae:1a:51:1f:61:12:b9:20:f2:32:87:7c:87:1f:20:af:4e:90:
15:cb:40:b1:bd:22:8d:40:ea:5a:8d:cf:f0:a0:a0:a9:2d:87:
8d:30:78:06:20:13:98:30:d0:cf:fc:60:1c:8f:8a:5d:83:c6:
69:b8:b2:12:76:1b:b8:26:9e:6a:8f:8a:3e:17:d6:8c:c9:e8:
93:db:99:7e:39:90:e4:83:83:aa:33:8a:11:73:c0:7d:74:a4:
97:74:44:dd:d9:c1:89:34:40:1d:e7:6a:5b:a0:5b:9d:53:22:
43:59:d1:9e:88:0d:71:84:3b:67:b7:12:ea:34:7e:b2:07:bc:
1d:2f:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org