Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6C2760CCC311EEAAB3CB8E775412E6.roa
File: FE6C2760CCC311EEAAB3CB8E775412E6.roa (raw, json)
Hash identifier: WEPATI2lwAC2XJq6S+iwMYOqUQaQUS48eRXft41cpjA=
Subject key identifier: E5:A8:77:55:36:3F:8B:F4:A5:94:C6:6E:F9:FA:7D:E7:34:20:00:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6C2760CCC311EEAAB3CB8E775412E6.roa
Signing time: Fri 16 Feb 2024 12:07:45 +0000
ROA not before: Fri 16 Feb 2024 12:07:42 +0000
ROA not after: Fri 26 Apr 2024 12:07:42 +0000
asID: 9009
IP address blocks: 154.218.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 12:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35623 (0x8b27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 12:07:42 2024 GMT
Not After : Apr 26 12:07:42 2024 GMT
Subject: CN=65cf5011-ecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:aa:69:89:08:8a:a9:87:4d:b1:df:b0:89:
5f:8e:e5:4e:2c:7b:b1:7a:4e:e5:76:6b:98:35:55:
2c:f7:c3:a6:48:93:5f:65:84:d0:d3:b8:76:4b:00:
67:ca:8d:e9:5a:ec:35:51:4e:24:d6:8a:6c:07:7c:
f1:04:d4:f0:93:22:46:d9:78:1b:4c:a0:90:b2:f8:
10:39:0c:d8:3f:bf:7a:eb:e5:a8:41:00:d3:90:4f:
ec:58:6e:b7:ef:dc:eb:2f:91:0a:0c:c0:cd:7d:fa:
33:59:09:ae:44:35:79:a5:8e:83:cf:2c:56:f2:4b:
82:ca:42:72:ab:26:b5:dc:e8:a8:9d:6f:d4:4b:d8:
91:90:33:84:8d:81:17:63:57:cb:c5:51:31:1e:69:
24:46:6b:63:ef:ea:02:5c:ec:e4:25:cb:c2:de:c3:
64:2d:bb:ad:ea:3d:cc:a6:b3:0d:49:7c:6f:62:da:
20:7b:bc:49:a9:38:56:33:46:e5:3e:5c:bf:33:7c:
b9:7d:26:3f:ba:b2:c3:24:e1:c4:2b:59:87:42:3e:
c3:55:1e:4d:d4:4e:e5:fa:ab:bf:3d:18:82:ea:85:
e6:ee:73:55:22:e2:bb:59:11:23:6e:fc:f7:a7:dc:
f3:06:17:a8:07:07:36:96:48:81:7c:be:d3:5d:cb:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:77:55:36:3F:8B:F4:A5:94:C6:6E:F9:FA:7D:E7:34:20:00:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6C2760CCC311EEAAB3CB8E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.195.0/24
Signature Algorithm: sha256WithRSAEncryption
77:87:5a:1d:9b:b5:a0:50:52:3d:73:bd:72:25:b9:a7:53:35:
32:c8:47:02:88:63:67:e5:35:24:cf:97:49:94:96:0a:f0:98:
ee:8f:b9:9d:21:65:df:18:f5:42:32:1f:20:75:80:06:2b:59:
96:4c:ac:08:7a:fc:76:e2:b0:87:14:d4:8b:ff:93:b8:35:3f:
36:0a:ed:43:2f:0b:e3:7d:df:2f:e6:d0:fa:83:05:cb:e6:64:
0e:0a:aa:66:5d:fd:0a:42:5d:fd:c8:62:d8:44:33:33:90:39:
0e:d4:87:d2:07:df:89:6c:96:c1:88:51:ba:c6:cb:90:de:8c:
b3:0f:5c:6e:2c:05:0e:3c:7f:d8:18:71:c7:39:2b:14:95:59:
1d:08:c0:57:e2:19:c2:32:51:b7:e4:f6:f0:b3:5d:0b:c3:6a:
cf:f3:e7:ee:20:36:5d:88:0a:dc:99:8f:67:d7:70:5e:d9:f3:
f0:57:1d:a2:41:ff:38:61:0d:f1:b1:86:72:fa:cb:35:05:ab:
dc:48:44:e8:98:f8:41:4b:8d:c9:51:ad:ec:db:d1:6b:c9:e0:
b0:e0:6e:79:4c:5a:66:42:7e:9a:19:2c:5f:19:7b:40:2a:cc:
20:aa:24:98:16:0b:86:d6:1c:7b:5d:56:14:da:6a:1f:44:19:
58:c7:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:50 2024 by rpki-client on console-ams.rpki-client.org