Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBB986AFE1711EE8AD38958017001B1.roa
File: FEBB986AFE1711EE8AD38958017001B1.roa (raw, json)
Hash identifier: vjPitU643f0JBLVQsCZQCiOu1WvrW6s+A/Ns2S+ZcPY=
Subject key identifier: 88:7C:B1:72:D0:1B:FD:52:E1:CC:69:8E:01:97:5F:C2:FE:59:20:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBB986AFE1711EE8AD38958017001B1.roa
Signing time: Fri 19 Apr 2024 06:42:31 +0000
ROA not before: Fri 19 Apr 2024 06:42:27 +0000
ROA not after: Sat 04 Jan 2025 06:42:27 +0000
asID: 209242
IP address blocks: 154.83.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44608 (0xae40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 06:42:27 2024 GMT
Not After : Jan 4 06:42:27 2025 GMT
Subject: CN=66221257-43c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:bc:37:98:fb:79:a9:3f:39:ff:1b:08:81:
b1:5a:aa:a1:97:fc:09:27:b6:2e:ca:3a:ea:9b:89:
60:8a:6c:07:ac:86:c5:dc:32:96:ce:33:d6:a0:8d:
8f:90:0f:90:34:31:23:dd:96:cf:15:a9:2a:68:e2:
e6:a0:3b:1b:6c:42:e6:c7:f5:4c:7a:c5:02:3b:05:
6b:69:22:66:bf:16:b9:ef:ae:8d:80:ad:15:ff:63:
7b:d1:53:d7:f4:e4:be:61:70:bd:87:9c:7b:bf:b6:
38:d0:fd:94:e4:d8:c0:e0:1c:86:40:9f:54:48:40:
88:1c:ee:a5:e3:87:14:e7:85:0c:84:e3:b5:f7:ac:
27:c5:95:70:5f:52:53:55:8f:10:42:02:59:60:5e:
5a:9c:5a:7e:ef:1a:41:ff:bd:f3:ab:21:ce:f9:eb:
9c:36:b8:89:e7:2d:28:d9:cb:70:b3:a0:31:aa:63:
5a:52:bf:85:bb:73:c6:d5:09:96:30:e9:26:55:31:
b2:c5:4b:1a:88:43:dd:65:7b:4f:23:4c:e5:5e:96:
cd:28:5c:76:cb:c2:a9:af:a9:9c:80:70:df:d7:c1:
48:d8:2e:0a:41:62:6e:db:91:4e:23:b9:2e:f1:d7:
ab:01:4b:b6:d4:fa:3a:85:6c:15:cb:7b:52:e9:34:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7C:B1:72:D0:1B:FD:52:E1:CC:69:8E:01:97:5F:C2:FE:59:20:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEBB986AFE1711EE8AD38958017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.30.0/23
Signature Algorithm: sha256WithRSAEncryption
33:62:ac:00:46:4c:c6:1b:80:e4:06:8b:0b:46:e9:e5:ec:75:
52:f9:d7:c7:eb:2c:34:de:67:b3:fb:ba:bc:60:55:f6:d0:af:
bd:d7:fa:46:01:54:a0:1c:e3:72:9f:89:33:65:cc:5d:bc:52:
fc:af:7a:b9:3b:7b:78:ef:92:89:26:4a:90:3a:af:4d:88:da:
50:48:99:f1:da:89:c4:f6:b3:2c:7d:e8:a3:e1:0e:3d:c7:05:
12:e3:1f:ac:a8:1b:e8:d5:91:e2:8f:3f:a7:9c:47:35:04:fe:
b4:af:54:35:b5:63:04:df:3c:43:a0:47:1c:ed:dc:bf:11:c6:
bf:02:6a:07:12:d8:de:79:77:a3:b4:71:2f:07:06:98:f6:71:
31:04:43:bc:9a:6f:f4:f4:1a:46:27:12:e3:c0:c0:e1:e6:4e:
10:92:a2:78:4a:44:07:2c:3d:ae:e9:df:c4:cb:eb:d6:c7:42:
32:7e:7f:b1:75:a1:7a:cb:6d:bc:ee:36:ef:2a:7d:44:7f:24:
77:ad:98:e0:ab:cf:2a:3e:24:12:81:94:db:aa:0f:71:06:55:
5b:8c:ab:46:7d:6f:06:d7:c1:a3:f2:43:da:46:ac:34:1e:54:
a6:bd:05:49:8e:7d:2a:f7:38:c3:4c:ea:f3:25:5e:24:8e:56:
e6:45:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:44 2024 by rpki-client on console-fra.rpki-client.org