Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9ADDB64FAF511EE9BF47A4E017001B1.roa
File: F9ADDB64FAF511EE9BF47A4E017001B1.roa (raw, json)
Hash identifier: gbioU+QWYWU98M+a+Mr+TWE1Z9iIEaboP4vT7wjR9BI=
Subject key identifier: 82:C7:AA:97:74:49:41:BF:05:37:B4:CF:03:EF:71:A1:31:14:6D:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9ADDB64FAF511EE9BF47A4E017001B1.roa
Signing time: Mon 15 Apr 2024 07:01:26 +0000
ROA not before: Mon 15 Apr 2024 07:01:23 +0000
ROA not after: Thu 30 May 2024 07:01:23 +0000
asID: 63139
IP address blocks: 154.94.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44268 (0xacec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 07:01:23 2024 GMT
Not After : May 30 07:01:23 2024 GMT
Subject: CN=661cd0c6-db99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:e1:d2:14:8e:7e:b8:cd:27:60:8b:5d:ae:
95:d6:56:89:49:7b:86:a2:38:39:cb:72:fa:23:1e:
e2:26:db:82:5f:9f:0e:7e:b2:3b:c3:45:e1:aa:b3:
0a:ae:52:a7:94:11:e2:cd:f7:88:a0:72:0d:08:13:
f7:25:12:c1:48:31:df:19:cb:43:f1:e1:0f:09:4f:
a7:5b:ed:c5:a9:99:fd:48:c1:43:d0:00:96:e2:5a:
76:4b:d6:cd:5e:37:cf:0b:36:f3:6f:10:cd:50:2f:
65:0a:0f:be:c5:38:a2:bc:18:61:d4:fc:2c:de:b1:
5f:0a:9a:c0:f2:7a:83:76:c4:31:a3:ce:6b:b2:99:
69:73:c2:b9:3c:aa:77:c7:55:66:74:fa:2c:0a:df:
a7:fe:90:29:a1:76:7b:91:26:64:1d:7a:4b:89:67:
dc:99:fd:78:6b:93:58:3b:ba:18:cc:77:83:3a:e5:
0e:d1:19:19:b5:db:e7:da:6e:de:86:59:b4:47:83:
99:12:86:32:c4:e6:86:1a:a2:56:1d:b1:da:ec:c4:
0b:d7:51:fd:bf:3a:05:b4:f9:a7:ed:f3:b0:ce:69:
0a:fa:e7:ff:ba:92:fe:c5:58:3f:79:e0:b0:72:fe:
1a:10:70:84:4f:9c:a6:74:39:fa:4d:17:a5:1a:37:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C7:AA:97:74:49:41:BF:05:37:B4:CF:03:EF:71:A1:31:14:6D:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9ADDB64FAF511EE9BF47A4E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.82.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8b:7b:25:75:4e:de:97:32:dc:ee:11:b1:f0:cb:9a:2b:35:
10:ff:57:47:0f:26:42:62:c7:ea:a3:66:7b:d7:93:b6:21:92:
fc:cb:be:ef:2e:14:9c:e8:b2:20:d6:d2:05:3b:d1:62:6f:b4:
92:24:52:bd:29:ec:59:4b:ff:c2:74:59:cd:80:5a:48:6e:19:
d7:13:c7:c1:54:2a:bc:9e:55:0c:3e:d8:c8:b0:38:ad:66:6b:
b8:2a:3c:5d:68:9f:14:ff:da:45:6d:6e:c8:92:cf:8b:20:68:
0f:10:86:be:8b:19:d9:45:bb:d3:47:08:ff:65:f6:71:40:e3:
79:a8:c0:92:1a:52:f5:33:d3:f9:32:af:3b:3b:de:37:fc:7c:
41:47:57:61:a7:86:3b:6e:e2:de:77:d9:a6:57:50:15:2a:52:
57:f3:a3:69:d5:fe:64:a8:3e:ac:e8:76:83:68:fc:4d:64:4c:
74:56:00:d8:54:1b:59:b3:ce:58:f5:c2:ee:79:e9:19:27:c3:
9f:c2:4f:d0:7e:a8:22:07:01:14:fe:aa:ac:80:1d:b0:8c:df:
93:7c:5a:63:cc:66:fd:ef:16:70:13:e1:4c:2f:1c:58:8c:0d:
5b:4c:82:9a:45:2b:36:52:53:45:07:d0:14:0a:9a:d9:c1:d1:
16:51:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org