Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7DEC0FEF86D11EEA7012427017001B1.roa
File: E7DEC0FEF86D11EEA7012427017001B1.roa (raw, json)
Hash identifier: nM0mdsXsYlkXBMMtbv3kw8+nxlwRvfT8QbV/c/Vy7EU=
Subject key identifier: 5D:D6:B0:AA:98:EA:F3:5F:96:87:E6:3B:14:85:35:19:23:FD:74:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7DEC0FEF86D11EEA7012427017001B1.roa
Signing time: Fri 12 Apr 2024 01:42:22 +0000
ROA not before: Fri 12 Apr 2024 01:42:18 +0000
ROA not after: Sun 19 May 2024 01:42:18 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43928 (0xab98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:42:18 2024 GMT
Not After : May 19 01:42:18 2024 GMT
Subject: CN=6618917e-795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:13:c3:c4:07:45:40:19:b7:80:9a:b5:6a:
59:af:f2:08:08:d4:b0:8a:33:7f:19:c3:80:9a:db:
68:43:c4:d4:0c:44:09:c9:3f:52:58:55:76:68:56:
a9:66:d0:16:1d:6b:80:73:c3:7b:27:41:b4:ba:49:
d7:53:ad:5e:7f:8a:d9:3f:ea:8f:b6:86:ea:1d:a4:
6a:0e:65:56:98:c9:33:8b:8f:9d:ea:7b:89:d0:1b:
f3:d4:de:f1:f0:ae:52:bc:d0:db:6e:d5:e9:83:78:
84:b8:dd:42:90:7f:74:67:04:82:da:17:56:37:3d:
dd:15:17:f2:78:fb:54:75:79:4c:42:9c:89:54:20:
af:6c:13:02:29:60:f0:11:48:be:c4:ec:88:aa:c7:
2f:86:1a:e8:5d:1b:c3:56:e6:31:94:f0:10:f9:64:
52:69:01:62:48:86:52:ea:31:b6:9a:c5:7e:ff:32:
f8:7a:f0:95:98:cd:60:aa:8b:7d:46:18:13:ff:b2:
4d:6f:5a:42:9a:5c:14:a7:41:69:11:e7:8c:23:03:
f1:c2:1a:c4:7e:ce:3f:b6:53:2c:19:d3:22:87:25:
fc:8c:db:19:a5:fe:85:6c:a4:7c:03:4b:50:b5:b5:
d7:c8:0a:2e:96:27:bc:56:af:c0:5c:88:ce:92:70:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:B0:AA:98:EA:F3:5F:96:87:E6:3B:14:85:35:19:23:FD:74:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7DEC0FEF86D11EEA7012427017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0/23
Signature Algorithm: sha256WithRSAEncryption
02:c1:d6:d8:be:b7:9c:ee:7a:b4:2a:4c:7c:59:d2:a9:e4:87:
ef:58:9a:10:76:39:e7:13:f2:f6:cf:b5:b9:c8:8a:be:7f:89:
b8:08:5b:49:80:c6:be:43:c4:bf:01:38:d4:7d:ea:e9:2e:e2:
85:ab:c0:50:ea:a2:65:73:84:df:c7:2b:94:3e:df:9a:5d:4b:
88:04:10:63:51:f5:09:7e:77:f9:a2:3b:e4:2d:0a:c6:48:ae:
7a:60:e3:79:f9:73:63:09:06:49:35:65:76:97:50:c6:3a:a5:
81:f8:86:65:e4:88:e9:ad:e2:59:2d:db:bf:69:c2:0f:e2:66:
1c:ad:25:74:b0:fb:2f:55:55:6b:66:13:a7:b3:66:f4:05:60:
7e:19:0b:cc:ab:4a:51:04:e9:d4:6d:0e:c0:62:56:a7:51:33:
3c:1c:11:27:f4:bc:91:b6:47:e4:95:8f:05:d0:13:9c:f3:d7:
60:65:b7:76:be:30:af:e7:42:5f:c3:fb:42:ac:b8:08:a0:68:
ea:42:d4:3a:39:1c:ff:b3:33:4f:f3:d3:ba:f3:be:94:63:54:
10:8b:b5:8c:cc:23:fa:76:03:80:ee:d0:99:8b:8d:d6:80:93:
30:ce:b3:37:5b:b0:55:04:4c:b3:10:e2:64:fa:8f:2c:b2:92:
84:f4:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org