Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF7F2D58F86E11EE8DA50832017001B1.roa
File: DF7F2D58F86E11EE8DA50832017001B1.roa (raw, json)
Hash identifier: uCdiAm4poLvClTsGsdCzFSo84CUmw0Qez9dSdzB/yVM=
Subject key identifier: F0:BB:2A:60:9A:CE:97:99:76:B7:E7:41:B1:3F:D5:93:72:23:D9:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF7F2D58F86E11EE8DA50832017001B1.roa
Signing time: Fri 12 Apr 2024 01:49:17 +0000
ROA not before: Fri 12 Apr 2024 01:49:14 +0000
ROA not after: Sun 19 May 2024 01:49:14 +0000
asID: 138915
IP address blocks: 154.93.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43938 (0xaba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:49:14 2024 GMT
Not After : May 19 01:49:14 2024 GMT
Subject: CN=6618931d-8a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:7d:6d:38:13:9e:0f:cf:f0:71:2d:4d:8e:
9d:5f:9b:91:dd:17:ce:3e:2f:b5:c1:7e:76:dc:21:
71:d2:58:1f:a5:c8:e6:b2:6e:ce:43:a0:4e:5e:7f:
56:da:52:3a:e3:fa:db:b7:75:8d:fe:39:e0:96:f6:
23:15:a6:0d:d0:08:c4:8f:84:e3:88:7f:1e:91:8c:
32:a9:ec:07:42:7b:5c:6b:9b:fa:c0:38:5c:49:83:
cd:b8:6d:04:18:63:d5:bf:2e:3b:da:a7:93:f3:16:
b9:ef:fa:c6:e8:b6:b7:82:e1:c7:8f:83:cd:1d:27:
25:e3:30:5f:08:f3:71:de:f3:0d:ee:d9:b9:5b:c3:
a3:80:bd:fe:34:2c:26:10:f9:d4:70:4d:d1:99:d9:
34:64:31:84:78:17:ef:71:39:10:eb:e4:ec:27:f4:
8e:e8:0b:c6:67:91:d9:4a:48:45:95:e4:51:ee:5c:
c8:aa:71:1f:52:2f:77:c6:ba:ac:f0:da:9c:a2:5a:
98:61:c6:65:84:fa:bd:b7:6d:cc:67:12:8d:62:67:
02:ae:3b:b8:70:44:59:45:9f:6e:3a:1c:98:63:63:
54:64:49:39:27:cc:17:78:59:3d:07:21:32:56:69:
d4:9c:b1:89:b5:64:39:51:5e:6c:59:99:87:8e:a9:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:2A:60:9A:CE:97:99:76:B7:E7:41:B1:3F:D5:93:72:23:D9:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF7F2D58F86E11EE8DA50832017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.50.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cd:55:c6:a7:ed:45:22:0f:e9:af:2e:8f:4b:ff:38:d4:cd:
fe:94:52:bc:a6:d0:64:b2:9e:0a:7c:dd:f8:7a:e2:04:e6:49:
51:83:cb:47:7e:30:11:57:2b:b0:be:d6:85:ab:26:36:9f:01:
48:68:94:00:3a:cf:d9:07:e4:57:4f:72:f3:4a:3d:25:74:51:
e6:2c:fe:a1:42:03:c4:8d:63:8b:83:91:d7:bc:aa:94:66:cb:
e5:91:df:00:f7:16:26:35:c6:f0:27:00:48:2c:5f:ae:74:18:
7b:35:4d:10:17:ed:70:29:fd:68:df:15:3f:5b:38:82:3b:c0:
fd:71:70:db:51:eb:87:5b:6b:28:96:4e:18:18:1a:d0:35:d7:
60:31:22:d6:99:80:75:b0:ce:44:5a:93:b7:d2:1f:37:c0:5b:
9d:50:0c:f9:62:12:cf:8e:41:29:83:bd:bd:0b:1f:23:55:f6:
ac:36:ea:d2:e9:6f:6f:4f:94:72:14:cf:f0:28:c0:65:a2:90:
0e:da:b6:25:ac:b6:8e:a2:a8:7e:96:dd:07:d3:51:88:53:d4:
dc:e3:b3:3b:db:8a:38:a4:d0:d2:8a:c7:85:7d:d4:12:87:f7:
4e:02:4e:ed:30:7d:ad:ef:4b:ff:dd:eb:29:c8:e2:42:22:24:
13:bc:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org