Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA8C3E8CEFF011EEAECEE996775412E6.roa
File: FA8C3E8CEFF011EEAECEE996775412E6.roa (raw, json)
Hash identifier: RDRZl18Xb6VYEeHXi0cFy/dKE/Jk5dvYYJNk1NkclPw=
Subject key identifier: 78:C2:A8:8D:D2:C4:55:7A:E9:ED:0B:32:02:C0:16:F7:D5:74:7E:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA8C3E8CEFF011EEAECEE996775412E6.roa
Signing time: Mon 01 Apr 2024 06:27:57 +0000
ROA not before: Mon 01 Apr 2024 06:27:52 +0000
ROA not after: Tue 07 May 2024 06:27:52 +0000
asID: 138915
IP address blocks: 154.223.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42938 (0xa7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:27:52 2024 GMT
Not After : May 7 06:27:52 2024 GMT
Subject: CN=660a53ed-84df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:cb:7b:ec:4a:0c:81:a8:fd:2b:dd:67:0a:
12:50:3b:46:a9:bd:1b:43:65:ca:63:56:b5:28:94:
ec:eb:ef:e3:ea:f3:fd:bc:dc:75:94:0e:8b:6a:c0:
1d:07:b2:f9:47:63:3e:66:82:d8:be:25:66:2e:f1:
2c:4a:2a:21:73:4c:ab:a7:36:9b:43:7d:89:be:fe:
2b:c1:36:1f:1f:6a:69:d4:1f:59:eb:0b:4e:be:fa:
61:1d:17:93:ac:6b:7c:d8:bd:42:21:de:18:a2:be:
84:d0:ba:09:37:62:f8:f5:19:16:d3:65:30:52:ea:
36:4c:3d:59:bc:5d:29:ef:49:55:9b:39:35:cc:2d:
24:9b:7a:33:9d:2c:7a:f5:a8:1a:f1:c5:c4:f1:45:
64:c0:8d:dc:f1:1e:02:f2:11:a6:df:e7:56:48:c6:
56:4f:73:fb:19:0e:a9:7f:e9:43:67:d7:e5:1d:84:
c8:97:f2:d5:f5:ea:7f:ef:e7:0b:e6:69:c4:52:12:
f4:a3:a1:65:28:f3:bb:90:bf:c2:90:83:71:32:b4:
43:0f:8d:da:5d:a3:4a:2e:11:c6:48:b1:b9:13:46:
4d:f2:de:5a:c0:b7:96:64:2a:df:09:9a:35:5f:77:
cb:52:a8:24:2e:8e:78:77:ea:9c:25:a3:88:2f:5e:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:A8:8D:D2:C4:55:7A:E9:ED:0B:32:02:C0:16:F7:D5:74:7E:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA8C3E8CEFF011EEAECEE996775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.32.0/24
Signature Algorithm: sha256WithRSAEncryption
98:89:bb:3f:5a:02:46:46:f1:39:6f:24:fa:0d:63:b7:38:33:
b3:33:ff:f1:40:7a:56:3b:1d:81:37:37:f8:cd:d6:f9:ac:d8:
e8:8e:c2:f5:d5:30:f1:ea:f7:24:e8:38:76:ef:53:65:4a:02:
5b:73:bc:6f:d5:31:b1:55:3d:77:3f:91:e8:f4:6c:89:1c:0e:
2d:27:53:81:41:71:0d:28:33:15:7a:b4:46:b5:1f:4e:4e:fd:
66:10:7c:f8:e7:6b:21:13:0e:8e:d0:b4:92:80:ec:be:29:55:
77:4f:fc:ca:b9:d0:5d:5a:92:7d:b1:06:49:22:46:75:9f:92:
1d:a4:f8:0f:69:3a:55:88:87:9d:b3:c4:b4:c8:8a:74:41:40:
e2:1a:0a:35:c1:92:c9:08:a3:96:72:8d:53:ab:df:38:56:80:
94:73:52:07:67:73:9f:00:41:eb:e0:07:86:aa:34:65:b0:b0:
30:bd:bf:90:4e:38:92:d2:6d:3f:62:0a:43:97:66:9c:24:2a:
b5:4c:78:02:11:e8:54:ff:fc:93:88:89:1a:d9:e1:17:65:6e:
12:52:9b:5e:22:87:ec:b3:f6:46:79:31:a6:f4:c7:b6:a2:b3:
17:a4:da:e4:21:e8:c7:9d:74:a0:eb:15:1a:4f:4c:8c:f6:47:
11:b2:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org