Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76243C1EFB9711EE84FF5571017001B1.roa
File: 76243C1EFB9711EE84FF5571017001B1.roa (raw, json)
Hash identifier: /c6IlQ1BVqCUeV4yPQCghBpefFHP1yNFb2F/ppbmdiE=
Subject key identifier: 67:80:A2:E7:F5:86:92:2F:6C:A5:BD:E5:AC:61:69:71:1E:1A:7B:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AD07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76243C1EFB9711EE84FF5571017001B1.roa
Signing time: Tue 16 Apr 2024 02:17:24 +0000
ROA not before: Tue 16 Apr 2024 02:17:20 +0000
ROA not after: Tue 21 May 2024 02:17:20 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44295 (0xad07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 02:17:20 2024 GMT
Not After : May 21 02:17:20 2024 GMT
Subject: CN=661ddfb3-7803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:cd:1f:e4:21:1f:46:8a:9f:77:ed:70:a7:
65:31:8a:34:46:c8:28:9e:32:74:4e:7c:6f:87:d3:
4d:2b:1b:32:b4:47:7d:b9:06:96:91:e2:56:c2:d3:
17:19:11:42:f5:c1:8a:3e:c7:8e:0a:45:9a:ff:77:
10:8e:63:e0:c5:61:16:37:4c:fc:b4:06:c0:b7:53:
7d:1d:f9:c6:d8:cd:96:69:80:87:47:ab:b7:5a:03:
f6:68:59:13:36:65:fd:8c:26:70:28:55:90:2d:2e:
2b:55:43:ce:7d:12:79:18:9a:ae:98:d9:06:6c:b9:
2e:67:08:10:c7:10:7d:c3:50:9e:6b:5d:7a:8c:08:
2c:25:f8:e7:ba:ca:4a:26:1d:07:0c:d6:f4:2c:8a:
4c:7d:eb:74:ee:7a:c6:3d:ab:52:a6:69:fc:a9:c4:
25:43:ec:f6:f5:3b:51:25:22:81:17:b7:62:8e:7f:
61:18:e6:e5:75:ad:b6:2d:5a:5f:e4:ff:7c:e2:89:
af:2a:bf:15:01:1e:ad:17:a8:39:cf:33:8d:3e:26:
53:b6:1d:c5:54:c1:5a:0e:64:43:6a:cf:ee:58:c4:
58:b7:6c:39:ce:53:2f:f4:17:09:b9:e4:5b:a4:44:
72:43:ff:07:e3:e0:33:22:58:1c:a2:aa:e2:08:e8:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:A2:E7:F5:86:92:2F:6C:A5:BD:E5:AC:61:69:71:1E:1A:7B:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76243C1EFB9711EE84FF5571017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9b:2f:a6:c7:3c:14:b3:7c:2f:99:57:e0:98:c7:96:f3:8f:
2d:2b:88:90:73:cd:0f:5d:3b:25:5b:01:1c:1c:87:63:fc:16:
0c:48:dd:f4:ed:d7:e0:28:9b:eb:90:85:24:52:da:02:58:cc:
8e:b5:cd:3d:59:7b:09:08:f1:ff:3e:50:a0:56:e2:60:13:bf:
fb:64:aa:6f:21:38:a8:44:48:35:fc:0c:af:7b:28:62:cc:56:
76:3e:fa:da:07:29:89:1d:1f:e8:89:4f:26:4d:ab:c9:38:8e:
cb:af:35:f4:19:b8:d5:33:06:b2:3d:a9:51:f9:51:48:48:a0:
f9:e7:c0:ea:96:b6:75:f8:9f:f3:d0:e5:c0:d1:36:15:2a:de:
b5:5a:fc:9d:44:e5:31:ac:66:1f:7d:c8:3d:c9:dc:be:96:27:
ad:62:52:a0:8e:ce:82:49:b0:85:ab:a4:83:9f:69:49:2b:65:
ef:c8:4b:72:03:c8:ff:40:9d:78:71:a8:7b:df:d6:b6:89:23:
ea:92:93:09:eb:a3:70:3d:04:fd:19:5f:28:4b:99:b9:90:8d:
2f:70:72:89:25:1d:0e:dd:43:ac:d5:67:3c:df:f0:7a:ad:5f:
cf:e3:13:f0:9d:8a:d3:c9:ec:2d:37:49:74:e6:94:29:80:98:
c2:f6:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:05 2024 by rpki-client on console-ams.rpki-client.org