Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEF403B8E20411EEBF6FCCC5775412E6.roa
File: BEF403B8E20411EEBF6FCCC5775412E6.roa (raw, json)
Hash identifier: 5I9RETuk/QJkyf30AtuWbru/v9xEiDM2duF0krBL3E0=
Subject key identifier: 9F:A5:1D:26:CB:78:93:D1:74:0C:6C:04:A1:FE:A1:A6:6F:95:B6:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A160
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEF403B8E20411EEBF6FCCC5775412E6.roa
Signing time: Thu 14 Mar 2024 13:14:11 +0000
ROA not before: Thu 14 Mar 2024 13:14:07 +0000
ROA not after: Fri 20 Sep 2024 13:14:07 +0000
asID: 2914
IP address blocks: 154.214.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41312 (0xa160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 13:14:07 2024 GMT
Not After : Sep 20 13:14:07 2024 GMT
Subject: CN=65f2f823-3b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:3d:99:74:86:ca:b8:5e:4a:62:4d:ea:c7:
fa:73:da:c8:a4:1a:c1:4c:48:29:43:eb:cc:4b:5f:
b2:4a:13:c1:1f:f0:fb:dd:2d:02:76:41:e6:09:13:
ed:e4:ce:ca:5a:ba:8e:0c:3f:6f:d5:94:54:54:99:
ed:bf:14:90:9b:0a:47:84:42:9e:f0:a8:c5:e1:4d:
d6:6d:7f:33:92:4a:8f:d5:b0:72:20:ff:ce:86:7b:
7d:f0:b5:68:02:1b:1f:f5:25:84:2c:dc:44:58:b7:
aa:09:80:38:1c:95:4f:bf:db:c2:57:eb:6a:01:e1:
d0:32:35:ae:bc:3f:57:fa:09:58:66:1e:32:39:23:
ef:03:3c:97:d9:29:61:06:9a:96:9c:93:aa:4a:59:
86:24:ab:90:83:1a:d1:42:f3:ce:c4:c8:6f:61:c1:
9d:a0:3c:75:58:32:63:c7:4e:69:f5:a4:7d:42:87:
db:c0:5a:e3:e5:44:87:0b:89:7a:d7:80:5f:72:58:
87:f0:fc:0b:af:99:17:76:6a:b3:6c:9a:50:25:cb:
a9:87:a7:1b:4d:a0:45:9f:1c:65:3f:0f:c1:57:9f:
f8:bd:e1:ff:14:c9:f0:d1:5d:d1:b0:ae:75:aa:2b:
b3:3a:c9:74:f5:59:25:bf:d4:38:11:70:5a:cd:f9:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:1D:26:CB:78:93:D1:74:0C:6C:04:A1:FE:A1:A6:6F:95:B6:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEF403B8E20411EEBF6FCCC5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.194.0/24
Signature Algorithm: sha256WithRSAEncryption
57:05:33:8f:e4:9b:3c:9d:6c:1e:24:04:47:5c:2f:3f:17:f8:
47:2a:77:b8:ad:ad:8d:e1:0a:19:82:c5:b9:a1:e1:32:19:25:
b7:a6:d5:e9:ad:31:80:07:ae:93:b1:4b:f9:4a:65:dd:a8:8b:
d8:a2:4c:bd:ba:71:06:22:e7:a1:44:fa:04:5e:21:3c:fe:83:
ef:58:8d:95:59:65:81:4d:53:72:33:d1:a1:d5:f1:dc:50:00:
89:98:11:d5:fd:57:14:c0:cb:20:47:eb:5f:00:b7:03:a2:32:
d4:f1:50:61:92:6e:e9:1b:a5:a4:52:7b:37:1e:fd:e0:61:44:
e1:d4:d2:0f:d0:72:eb:c9:6b:29:66:2a:1e:92:d6:a1:47:d4:
e3:ad:82:09:28:b1:f4:65:1a:07:94:56:c7:fa:b7:ff:ca:6a:
3c:36:be:72:b9:0f:8d:dc:26:fd:85:28:59:91:1b:b8:c6:52:
ff:ac:7f:fb:47:1f:13:90:52:9b:5d:01:6f:a4:55:2d:5f:eb:
d0:67:b0:4c:07:e9:44:b9:1b:ad:e1:9e:66:3e:f6:66:8b:87:
f2:aa:56:d9:17:1e:9b:53:3a:e9:13:a7:b3:a1:fe:fe:a9:07:
f1:92:62:ec:7c:48:16:1a:01:02:0a:80:01:49:5e:de:aa:6d:
20:10:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:15 2024 by rpki-client on console-ams.rpki-client.org