Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F367D6E6F7BD11EEAAB5E916017001B1.roa
File: F367D6E6F7BD11EEAAB5E916017001B1.roa (raw, json)
Hash identifier: VdsbeSG5QU40apA1HxotS15LA0Fa570q43IhQbHHFi0=
Subject key identifier: C2:C5:64:80:F5:4B:E6:3C:D5:FC:FA:3B:69:FE:0C:47:CB:59:99:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F367D6E6F7BD11EEAAB5E916017001B1.roa
Signing time: Thu 11 Apr 2024 04:42:50 +0000
ROA not before: Thu 11 Apr 2024 04:42:47 +0000
ROA not after: Sun 19 May 2024 04:42:47 +0000
asID: 138915
IP address blocks: 154.90.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43789 (0xab0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:42:47 2024 GMT
Not After : May 19 04:42:47 2024 GMT
Subject: CN=66176a4a-b2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:54:85:d1:01:3f:89:30:74:0e:9f:ba:ed:
18:a1:2c:55:bf:ed:ba:20:eb:5d:4b:fb:f5:4b:ff:
6b:82:fa:28:93:ea:69:99:a6:f5:f0:a7:b9:97:5f:
21:8e:ba:c8:ac:9f:43:c9:5d:84:a9:81:47:0a:1e:
60:87:d2:55:14:57:48:d6:31:3f:63:0b:ff:eb:6a:
53:7f:ad:33:ce:bb:30:5b:75:84:eb:e3:94:06:2f:
4b:91:1c:73:fa:cb:8e:b4:92:02:4b:ef:97:0e:eb:
21:82:c9:3d:0c:37:29:71:ca:53:dd:87:75:88:1f:
75:db:e7:a1:a7:45:09:02:3e:d4:28:bc:97:14:63:
6f:f4:ce:2b:b6:b4:80:55:96:f0:29:4d:0e:8f:85:
e4:82:a7:66:42:2f:d2:5a:a6:ab:74:f7:8b:b8:ad:
4c:92:b9:27:92:75:61:23:db:d2:2e:d9:cb:16:a9:
99:0f:3a:43:16:c7:41:85:d8:13:5c:5b:81:cc:13:
7f:d8:58:f7:1d:8d:fb:b1:6e:5a:f5:ad:fc:80:6b:
be:85:ea:9b:ca:73:64:d3:41:89:8c:f4:f0:25:70:
6f:bf:4e:7f:ba:16:66:79:44:71:fa:fb:ad:8f:8d:
54:d6:cd:06:df:00:c8:7e:e3:23:d3:5f:bf:2b:eb:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:64:80:F5:4B:E6:3C:D5:FC:FA:3B:69:FE:0C:47:CB:59:99:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F367D6E6F7BD11EEAAB5E916017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.52.0/23
Signature Algorithm: sha256WithRSAEncryption
af:02:89:33:3a:b5:c5:19:69:53:06:48:eb:cc:85:8d:78:29:
24:f2:fc:67:69:48:9a:3f:21:04:a3:bc:75:17:49:96:f5:41:
6d:32:d8:a8:06:1e:85:5b:fc:cf:d5:df:ff:30:02:96:79:f2:
82:0c:35:3e:cf:0b:4c:a0:54:09:84:47:68:40:7e:30:93:69:
e7:b2:7e:8a:7f:8f:7c:b0:85:34:ec:c5:d2:ad:e6:0b:9a:d3:
f9:88:20:58:17:fb:d0:0e:6a:31:76:55:4b:43:68:f0:6b:f3:
31:a0:71:fb:bc:f1:0b:f2:f8:b3:52:8a:79:f3:24:cb:68:9c:
8f:8a:93:0f:6b:15:3c:4a:4c:22:36:1e:d7:9d:45:8e:ce:bf:
97:f5:3a:26:98:78:14:83:9b:7c:8d:46:21:6f:43:ad:3c:43:
b1:a4:40:e2:83:dd:9e:36:cb:83:98:57:84:18:3a:13:58:e0:
fe:37:59:0d:3f:28:c5:91:e8:97:c5:87:91:4f:46:8a:6f:a3:
a7:18:9a:d9:c0:8c:a8:23:a5:95:e3:1d:a2:6d:40:87:2d:77:
3a:b6:77:cb:33:ba:0c:b4:d3:81:26:73:02:ba:a0:00:80:a5:
08:65:15:cd:b5:e2:49:47:3e:f5:65:59:5f:d6:49:2a:49:55:
42:43:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org