Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9946C1CECCC311EEAA96F58D775412E6.roa
File: 9946C1CECCC311EEAA96F58D775412E6.roa (raw, json)
Hash identifier: DEmsBFqq0mny/ZABszsiEueStdGNuS7gLoUzsAdCm/M=
Subject key identifier: A2:B8:01:3D:F2:70:B7:AD:CF:79:62:39:1A:FB:14:88:36:76:8D:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9946C1CECCC311EEAA96F58D775412E6.roa
Signing time: Fri 16 Feb 2024 12:04:56 +0000
ROA not before: Fri 16 Feb 2024 12:04:52 +0000
ROA not after: Fri 26 Apr 2024 12:04:52 +0000
asID: 9009
IP address blocks: 154.218.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35619 (0x8b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 12:04:52 2024 GMT
Not After : Apr 26 12:04:52 2024 GMT
Subject: CN=65cf4f68-b9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:c6:90:26:ba:a0:17:17:00:5a:d4:36:78:
fc:b8:f5:31:c3:a7:b7:30:38:b6:b1:a9:c7:30:03:
cb:15:7f:00:dd:f0:91:a6:da:5b:23:0b:cd:ea:27:
38:2f:7c:79:f4:fb:32:b7:89:ff:00:44:77:b8:25:
77:39:81:72:76:c3:31:a4:7f:34:00:ad:dc:13:73:
d0:a5:15:47:9c:46:24:b6:33:c5:1a:ce:09:13:e3:
26:69:78:9a:5b:b5:49:d9:72:8b:ab:61:f6:c0:fb:
d2:9f:e1:a4:29:3b:2e:9b:62:83:db:31:5c:b7:42:
58:78:65:d9:55:85:ec:ea:ab:e8:8b:a1:51:4f:fe:
2f:4a:a0:f1:a3:b4:6c:09:2e:0d:f1:00:21:cb:da:
f6:b0:f8:03:c2:60:07:4e:9f:5e:b4:37:c5:11:6c:
d6:a3:cb:f7:a0:59:5c:4a:99:5d:b6:5c:32:14:6a:
0a:48:4f:6a:c2:f1:8f:e9:52:e3:24:68:6f:3a:d6:
47:a9:fc:fa:8a:09:32:d3:24:1d:92:89:4a:78:17:
b3:63:ef:fd:1c:81:c8:eb:56:b6:f1:90:61:43:2f:
13:0f:12:37:3a:7f:0d:44:cf:02:1e:65:c0:1e:4e:
86:ee:42:fa:37:55:44:d5:d0:0d:10:19:e8:90:b6:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:01:3D:F2:70:B7:AD:CF:79:62:39:1A:FB:14:88:36:76:8D:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9946C1CECCC311EEAA96F58D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b2:4c:c8:45:8b:3e:26:1d:a5:36:19:8d:1d:5a:d5:20:14:
a1:a0:5e:70:1a:12:6f:24:e8:c7:af:a6:23:b5:a2:79:cf:8c:
6e:8d:63:ac:78:76:e5:0d:73:df:0c:07:85:7a:b8:4c:a3:47:
62:96:9e:27:d8:94:d9:8d:fb:e3:e8:50:ad:60:64:9b:04:b8:
3c:23:d6:49:b7:4b:55:5e:a0:0e:07:7f:95:f5:52:e2:33:11:
bd:60:35:fa:ab:cd:9a:4b:b5:39:51:d5:66:03:d3:85:7e:bb:
22:09:db:35:16:ac:34:86:ce:42:ab:12:fc:07:38:78:c0:5b:
28:fe:26:cd:5f:7d:d2:fa:03:da:3d:59:29:a4:4b:43:2f:6a:
3e:51:f6:57:f9:3a:e8:b1:e2:d8:67:59:c5:10:73:fc:4d:9c:
bc:86:7f:ef:8d:50:f2:a9:1e:f3:01:2c:b1:c3:26:f2:80:60:
4d:d7:f7:e6:66:20:fc:c7:12:65:9b:81:b4:e1:9a:70:21:1f:
52:af:7d:ca:d8:52:b6:c1:39:36:e3:03:38:02:96:67:92:e3:
d9:93:18:a5:6b:30:96:13:fc:3b:4b:07:f2:7e:dd:6b:07:d1:
53:f1:2a:c4:63:e4:d0:52:aa:cf:6a:06:4c:fe:28:44:ea:fc:
d8:3d:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:44 2024 by rpki-client on console-ams.rpki-client.org