Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76D11B27EB811EEB8A6705A4AD9E6FC.roa
File: F76D11B27EB811EEB8A6705A4AD9E6FC.roa (raw, json)
Hash identifier: qGo5CUOh5ha1MHTDnDlP8EyCuyDcLChx6o8N5uZubH8=
Subject key identifier: 31:E6:D6:55:A0:03:0E:76:E3:0D:2E:B7:79:68:5D:1F:C2:97:E0:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76D11B27EB811EEB8A6705A4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:32:19 +0000
ROA not before: Thu 09 Nov 2023 04:32:15 +0000
ROA not after: Thu 08 Aug 2024 04:32:15 +0000
asID: 133861
IP address blocks: 154.204.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19897 (0x4db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:32:15 2023 GMT
Not After : Aug 8 04:32:15 2024 GMT
Subject: CN=654c60d2-0321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:59:3f:2b:ec:8c:57:c3:6f:a8:a6:45:98:
b1:b6:18:80:c7:66:a1:f4:a4:79:79:84:05:8c:72:
eb:8a:c4:19:f5:0c:d7:39:7f:29:28:5f:40:26:cc:
45:84:1d:82:24:1e:b9:9b:c2:10:52:63:00:01:fe:
24:0a:3c:0e:50:83:1a:45:fb:35:af:be:bd:91:4a:
a6:a0:73:8d:10:b6:c8:5a:b3:5b:bb:85:9a:fe:5a:
cb:de:3c:af:62:9a:32:de:a5:80:fd:82:01:42:59:
1d:31:19:13:d7:8d:f5:e9:3b:3c:50:1c:5e:8b:a1:
5e:91:7a:b9:2e:c8:77:e7:97:d0:e3:fa:bd:fe:13:
67:d7:59:fc:b0:83:2c:f6:7a:a5:b2:b2:a8:e1:9d:
21:89:b6:54:d4:98:c5:2e:36:07:31:78:ec:39:97:
40:04:52:4d:cc:61:05:ac:f6:62:dc:0d:fd:d6:3f:
2f:e6:00:95:f7:b4:db:34:e6:c1:a8:6a:d6:b0:28:
25:32:78:70:cb:d5:a4:a1:8a:83:be:00:91:f7:11:
16:96:9f:cb:9c:9f:95:54:0e:cd:33:35:f1:9f:40:
34:49:b6:66:03:c4:bb:e1:bd:91:4a:31:d6:43:2b:
92:b2:cc:a8:e9:72:2d:25:8d:22:3e:05:3e:49:60:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:D6:55:A0:03:0E:76:E3:0D:2E:B7:79:68:5D:1F:C2:97:E0:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F76D11B27EB811EEB8A6705A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:3a:0e:33:5e:99:90:fd:10:e3:d9:22:a8:c5:9e:4a:1e:0a:
a2:57:17:b7:ea:c2:89:27:7b:d8:87:1a:7d:0b:d7:bf:59:d9:
19:ee:aa:11:c2:01:8c:78:6e:cb:89:17:9a:03:24:20:c5:b3:
29:5f:0c:bc:a3:63:a8:c7:19:b3:9a:e4:04:ea:96:f0:e4:eb:
13:0b:a3:f2:e7:75:dc:4e:b0:99:fc:0d:b8:81:47:45:e6:b0:
d1:57:63:e7:cb:b4:f3:29:5b:98:18:e6:7c:51:11:8e:d6:af:
a6:d9:69:dc:f9:29:55:94:e6:80:52:63:b7:56:42:44:54:3e:
8a:86:7a:f7:1d:67:2a:16:34:3f:2a:12:82:e0:26:ef:d3:77:
23:83:bf:71:cd:0a:e1:94:76:a7:f4:3e:61:2c:fd:36:7d:b5:
e8:b4:8c:87:15:b5:f6:74:32:fd:d8:f3:5f:cb:c5:bd:54:ef:
92:8d:c6:ac:de:48:c2:d5:b7:01:b4:73:be:83:9b:a1:91:1b:
87:43:fd:1f:3f:06:27:11:b6:53:cd:dd:12:15:28:93:4c:f9:
eb:ea:5c:e9:f4:2d:98:70:3e:99:71:8d:7b:74:de:ec:aa:f8:
31:a4:0f:cc:0c:56:21:fa:75:2f:49:a4:3b:e1:e8:34:10:70:
cd:d2:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org