Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA4FFB9CEDB711EE88A6B9B1775412E6.roa
File: FA4FFB9CEDB711EE88A6B9B1775412E6.roa (raw, json)
Hash identifier: 09R46wv0DifWedPYmoR5TEhp0wKFH3t9f1qze1lI2uA=
Subject key identifier: C6:C4:38:9E:67:3D:44:0E:F4:52:BD:C9:BC:CC:A1:C2:E7:87:55:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A731
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA4FFB9CEDB711EE88A6B9B1775412E6.roa
Signing time: Fri 29 Mar 2024 10:34:53 +0000
ROA not before: Fri 29 Mar 2024 10:34:50 +0000
ROA not after: Sat 04 May 2024 10:34:50 +0000
asID: 142062
IP address blocks: 154.86.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42801 (0xa731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:34:50 2024 GMT
Not After : May 4 10:34:50 2024 GMT
Subject: CN=6606994d-6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:fa:d5:ea:45:01:93:13:a9:4a:3b:de:2e:
91:59:54:d7:4a:6e:e1:18:ac:b8:da:80:47:82:0d:
56:9d:8b:b7:a6:dc:5e:5f:34:1f:90:a8:f1:a5:5e:
b2:74:92:c5:1a:9d:5a:f6:e0:e5:3f:03:bb:58:71:
d1:51:cc:92:d1:1d:46:26:91:7c:ea:f3:04:26:d3:
59:bc:b8:04:1c:4e:70:db:b2:0a:a3:2d:eb:09:53:
7f:6d:26:8c:03:1e:20:4b:fd:ad:ed:2a:a6:88:a2:
3c:8b:93:27:13:ee:3d:f9:6d:80:5d:59:da:5c:7a:
c7:4a:c8:ab:f9:11:b4:4d:aa:f8:1c:7c:31:07:c5:
98:35:b4:b0:2c:49:f2:95:4a:92:4c:e0:12:57:74:
12:1b:ad:16:2a:5d:93:a5:79:0a:8a:ae:03:c3:36:
96:2a:98:d6:b9:99:f1:88:fa:ff:a3:02:57:05:8b:
21:7f:a0:80:5c:9b:3f:bd:a9:37:da:3b:91:de:31:
10:5f:c3:87:10:5a:94:36:f7:62:35:87:58:90:2e:
44:9f:52:07:ea:aa:69:b8:2a:43:a2:b6:c5:33:d8:
38:6b:99:b8:37:21:c2:ea:4e:57:b0:0c:44:e8:88:
4a:55:36:d8:4b:1c:e5:0b:c6:b7:47:6c:7d:ce:9c:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:38:9E:67:3D:44:0E:F4:52:BD:C9:BC:CC:A1:C2:E7:87:55:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA4FFB9CEDB711EE88A6B9B1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:de:ce:7b:bd:0b:d9:aa:4a:2b:ff:7d:1f:ed:82:e6:74:10:
98:12:ad:0b:4c:75:1d:d5:66:88:6a:cc:5b:48:0a:97:96:c1:
6c:44:45:bb:0b:cf:dc:94:99:97:bd:00:18:74:ec:ae:0f:c1:
02:4c:0a:b3:41:2c:93:2e:6c:35:26:29:92:c6:6d:d0:2e:0b:
f4:78:22:2d:2d:da:d5:f1:f4:a7:b4:cb:aa:74:97:ee:23:c8:
f4:e0:0d:37:5b:43:a9:f5:07:bd:2e:4a:e5:ba:5f:37:00:9e:
74:c6:4d:be:9f:76:ee:f7:9a:d3:e3:4a:8c:c7:17:c9:eb:67:
79:5d:9d:fb:50:5e:8d:ac:f8:fe:0d:5f:3e:32:36:fe:43:53:
3f:11:53:05:fc:e9:42:d3:bd:91:6f:bf:91:bd:43:f5:cd:bc:
4d:38:5e:51:4a:bf:d9:76:32:62:34:43:d8:80:7d:cb:9e:90:
4d:3e:54:ce:e6:11:18:24:ec:e7:bd:dd:ea:1e:4f:77:ab:72:
f1:d1:37:99:4b:b8:70:3b:49:25:2d:6d:43:80:b7:c8:76:f5:
65:87:27:ff:59:ad:9d:96:bd:0e:d0:57:37:46:f3:5a:89:2b:
0f:09:c9:50:d7:39:10:7f:b7:ab:a8:66:4b:8e:66:05:48:5e:
85:63:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:24 2024 by rpki-client on console-ams.rpki-client.org