Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD276E54F00C11EE97040571775412E6.roa
File: DD276E54F00C11EE97040571775412E6.roa (raw, json)
Hash identifier: yQrtenzQIPEGCcaaubc/zFU9NdyJiiBiHmb+kenGo04=
Subject key identifier: 36:5E:F1:A6:C8:8D:52:DF:CF:21:A3:07:BE:C6:90:22:1F:B2:BA:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD276E54F00C11EE97040571775412E6.roa
Signing time: Mon 01 Apr 2024 09:47:34 +0000
ROA not before: Mon 01 Apr 2024 09:47:30 +0000
ROA not after: Sat 11 May 2024 09:47:30 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43096 (0xa858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:47:30 2024 GMT
Not After : May 11 09:47:30 2024 GMT
Subject: CN=660a82b5-2af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:82:1d:49:ff:3f:f8:ff:d0:8d:bb:09:1a:
e3:7c:d8:e6:8b:7a:34:54:ba:86:39:82:29:19:eb:
c6:0c:5b:d2:8f:4f:4a:98:95:89:a1:af:b1:c8:9e:
41:b1:39:35:c2:05:4f:a7:86:2d:8e:85:13:0f:10:
a9:d6:31:4e:47:6a:85:22:cb:6f:97:0e:8d:d7:9c:
37:a5:0d:bc:d0:cc:4f:2a:59:c9:bc:40:cb:9c:2d:
0b:03:60:f7:8c:a8:73:a1:0e:bf:9f:ce:a1:7b:47:
1f:ed:e5:58:b0:47:87:31:d7:46:ff:6c:a8:68:64:
e0:62:3f:de:62:2b:7d:9b:d7:1e:a9:af:b9:6d:c2:
6d:c3:4c:03:66:33:62:3b:b3:0e:19:02:03:9e:eb:
eb:ac:52:68:da:33:15:c1:50:79:30:01:5d:51:81:
1b:f5:59:6e:43:0e:c9:8c:cf:86:19:83:62:e9:08:
d0:9f:15:27:3c:8b:a2:f0:a5:13:11:bb:21:87:8e:
be:19:80:c9:6c:c0:65:88:6d:13:c7:4a:5a:54:52:
27:30:71:b0:ba:f1:16:76:9e:60:41:5c:4b:85:71:
e8:a8:78:26:11:66:35:8a:a9:fd:f8:bf:37:af:54:
df:3e:5b:3d:9f:0a:a9:7c:5b:d3:f6:c0:c4:54:02:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:F1:A6:C8:8D:52:DF:CF:21:A3:07:BE:C6:90:22:1F:B2:BA:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD276E54F00C11EE97040571775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ab:20:9e:5d:87:94:81:86:b8:62:5e:e8:bd:2c:87:5b:75:
cd:3a:4f:2a:63:d4:0e:f2:e6:61:4a:9c:0d:4b:bd:e0:43:b6:
f6:05:09:4f:3e:8c:36:d3:59:5a:24:75:08:9c:8b:8b:0e:2c:
83:79:8b:22:dd:aa:82:21:b2:87:50:f1:df:55:08:29:fd:97:
81:b2:62:8c:b2:cb:65:b3:d7:5f:d5:f2:d2:81:b4:3e:b2:62:
f3:37:74:21:ce:a3:0e:58:52:38:cf:ac:88:53:46:6b:74:16:
ac:cc:39:0a:09:45:3a:a1:88:92:e9:16:5c:09:39:64:00:9b:
fa:45:af:43:91:9a:ea:7e:5b:7d:01:e0:4b:3b:9b:bf:14:a2:
55:2e:41:78:53:c6:02:15:1d:d9:ab:40:ee:fd:48:8e:92:30:
8d:61:91:b6:36:76:04:aa:f2:3c:56:dd:dd:92:f0:96:58:b4:
56:1d:4f:67:e2:56:5d:6b:2a:d6:4a:eb:62:72:a9:d8:34:96:
cb:64:e7:38:53:da:2d:14:26:48:aa:89:cc:aa:42:1d:44:70:
0a:57:8c:d8:ce:ac:51:65:0f:3d:9d:b3:fe:26:0d:56:b9:9e:
a2:5d:cf:f2:89:9b:a9:50:c9:4e:a4:01:ae:b1:cb:6a:6d:38:
91:d5:cb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org