Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4AEA72EF0811EEA2FE737F775412E6.roa
File: DE4AEA72EF0811EEA2FE737F775412E6.roa (raw, json)
Hash identifier: BEvMwb4nXxoTpknOmnRIfP7FQEhFB/H+Y7vcNWDB1Mw=
Subject key identifier: 61:E0:91:BE:4F:60:E6:A9:87:4F:A6:AA:E1:54:F4:83:67:36:98:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A771
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4AEA72EF0811EEA2FE737F775412E6.roa
Signing time: Sun 31 Mar 2024 02:46:26 +0000
ROA not before: Sun 31 Mar 2024 02:46:21 +0000
ROA not after: Mon 31 Mar 2025 02:46:21 +0000
asID: 132839
IP address blocks: 154.203.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42865 (0xa771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 31 02:46:21 2024 GMT
Not After : Mar 31 02:46:21 2025 GMT
Subject: CN=6608ce82-d479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:46:57:0c:56:dc:6d:f5:db:c8:3b:ca:7c:
b8:4a:7b:a7:ef:bb:a8:1b:4f:38:10:56:39:86:f9:
ab:35:77:6d:13:38:e0:09:9e:81:55:fe:68:c2:5c:
2b:00:65:35:6d:3c:21:48:70:25:27:68:58:ce:88:
1b:7c:d1:dd:35:83:8a:91:ab:62:bb:fc:39:54:bc:
95:35:34:6e:a6:5f:20:3e:5c:9a:a8:fe:14:0f:e6:
00:f5:3f:1c:60:b1:50:80:77:94:db:f1:80:b5:ae:
65:bb:bf:bc:c6:24:e0:33:3d:6e:f1:b2:0a:27:da:
d7:c8:69:5c:f4:41:1d:68:4d:6b:e0:8d:e5:58:0e:
7b:02:ef:f8:97:14:6f:a2:a2:d1:ba:1b:20:80:b3:
d6:10:7c:c8:f8:f8:28:b2:01:b7:bc:1f:ba:2c:b5:
c0:18:c1:2c:61:8e:6e:a8:b1:90:a9:1f:7d:9b:fa:
34:c1:b6:bf:6d:8d:82:df:a3:72:47:70:25:cc:91:
c0:78:3c:63:2f:af:11:53:c2:27:1e:18:4e:a8:19:
a8:22:92:04:ee:4a:f2:68:cf:45:c7:8b:88:d4:a0:
87:01:f0:23:2c:6e:ad:a5:85:2a:e1:f0:26:76:82:
3a:84:9d:21:d6:04:9f:38:bc:c6:ad:7a:e2:8a:28:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:91:BE:4F:60:E6:A9:87:4F:A6:AA:E1:54:F4:83:67:36:98:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE4AEA72EF0811EEA2FE737F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e2:35:af:55:9e:2b:44:df:2d:70:a2:b0:23:47:3d:6e:7d:
12:0c:97:77:99:3f:37:3a:41:bc:0e:81:1a:b9:bf:28:83:a7:
ca:a1:95:e6:b0:7c:43:4f:41:e3:34:b0:0f:c4:e5:59:41:a8:
21:88:1c:24:49:62:b9:7d:2c:53:35:32:18:43:2a:9c:14:ca:
84:f5:ea:3a:dc:ad:13:1a:13:a1:ef:48:cc:b0:58:1b:23:9c:
f6:9a:99:4b:be:eb:c5:28:4d:dd:59:11:8a:18:b9:11:2d:69:
0a:5f:4f:05:1a:f0:ee:99:64:c1:53:ba:eb:9c:43:d8:c6:7c:
31:5e:a8:d9:2b:f7:bb:d5:52:6f:5a:7c:6b:97:1b:82:d6:cf:
f3:01:27:9b:1b:b2:50:fa:8d:9a:32:4b:68:5c:eb:e7:62:d2:
9d:13:5e:4b:27:90:06:08:c7:ea:7a:68:a8:e0:ec:89:c6:59:
24:66:e0:63:45:66:fa:5e:d7:49:cc:b3:eb:9e:d6:9f:d9:d3:
79:dc:cc:94:13:a3:67:42:fc:41:1e:22:4b:41:c5:f5:99:af:
12:31:a8:41:d2:a3:67:b9:7c:ca:95:74:fa:dc:0a:5b:b1:51:
7a:3f:32:26:46:95:ed:51:cf:49:4d:63:7c:db:85:b8:31:19:
69:ad:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:12 2024 by rpki-client on console-fra.rpki-client.org