Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7BFDF40EFF311EEB7FE9EAC775412E6.roa
File: E7BFDF40EFF311EEB7FE9EAC775412E6.roa (raw, json)
Hash identifier: IdNBefch8HCiEHkvK+ZjQSeW7srIdQJOKczK1pzuEZw=
Subject key identifier: F5:F9:E4:97:CD:24:4C:E2:8A:21:30:A0:BA:C9:7A:9E:4F:09:89:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7BFDF40EFF311EEB7FE9EAC775412E6.roa
Signing time: Mon 01 Apr 2024 06:48:54 +0000
ROA not before: Mon 01 Apr 2024 06:48:51 +0000
ROA not after: Tue 07 May 2024 06:48:51 +0000
asID: 138915
IP address blocks: 154.223.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42976 (0xa7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:48:51 2024 GMT
Not After : May 7 06:48:51 2024 GMT
Subject: CN=660a58d6-c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:12:03:8e:86:e1:0b:03:ed:69:94:a8:59:
b8:8e:54:4b:75:f9:35:38:d2:1f:2f:37:ff:95:12:
77:e0:83:78:c9:be:cc:0a:00:d9:6e:e4:6a:8c:72:
3b:6e:5f:8e:8b:2a:f7:26:0f:11:dd:53:6f:3b:12:
ad:da:5b:79:ff:8c:98:fe:cb:fb:a7:66:ad:c1:67:
57:91:29:33:35:3e:07:df:38:30:f8:e6:de:72:2b:
88:3f:b7:4d:75:ad:67:9d:2a:b2:20:10:70:fd:66:
a2:2f:fd:a8:3d:59:0a:33:ab:d3:93:d6:1b:d7:be:
8c:eb:bd:07:1f:84:3e:04:a6:f6:2d:6b:18:d7:ea:
c4:18:bf:8c:87:1e:3f:08:54:df:72:bc:b2:17:7f:
ee:e8:99:13:40:05:b5:12:9e:82:d2:6e:6d:32:d3:
05:5f:55:c1:62:38:7a:12:ae:f8:b1:15:9d:2a:40:
d6:59:37:24:09:7f:42:2a:0e:26:ff:f0:5f:e1:45:
98:c0:2e:46:4f:d5:d9:1b:5b:c3:e1:4b:cc:2a:fc:
79:81:65:60:2c:3a:7b:76:12:18:1a:c7:33:be:e9:
57:77:10:0e:3c:3c:10:fe:cf:85:96:e5:3c:a1:64:
8a:d0:d1:2e:21:a7:25:f3:6a:aa:6c:8d:1f:4a:9c:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:E4:97:CD:24:4C:E2:8A:21:30:A0:BA:C9:7A:9E:4F:09:89:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7BFDF40EFF311EEB7FE9EAC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:5a:bd:1b:c1:86:ae:88:6f:00:6f:a8:1a:24:93:5f:39:e2:
58:1a:6c:3f:6d:df:7b:1b:61:a6:ea:15:28:09:67:e0:85:e9:
ae:39:ee:f0:29:f0:f9:c3:5e:a5:5e:df:06:fc:d5:8c:08:a4:
d5:c9:d3:f0:bd:3b:47:9a:7b:5d:ae:96:aa:f8:de:9a:60:99:
64:87:2d:a9:4d:fd:93:ae:a0:e0:af:58:5f:45:e4:91:65:17:
e9:6d:37:c3:29:c2:3e:c9:ba:9b:a9:00:b5:65:c1:5f:30:3e:
ee:d0:1b:6d:bf:ef:4e:c5:1b:82:b1:c3:e0:35:fb:06:32:54:
c3:7b:05:2f:d1:84:3b:af:91:ba:78:66:b8:ee:fc:77:55:59:
da:ff:b3:60:a1:23:d5:76:b7:dc:5c:49:52:eb:2d:be:17:3f:
9a:4d:c4:1a:df:fc:78:dc:c2:0a:52:41:2d:55:2a:47:a0:35:
02:7d:04:e0:5f:3c:bf:50:78:76:cc:aa:55:26:cd:45:0d:e4:
ca:22:4f:ae:44:ad:bd:ab:02:2f:44:ff:0c:15:79:04:66:88:
ed:a2:a5:3f:50:65:3d:ab:70:7e:f5:eb:0b:e4:8b:0a:76:58:
fd:b3:f9:2c:79:ad:e0:c1:99:72:72:3e:cc:48:0b:8c:17:23:
50:f4:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org