Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1953F2B22E11EE87842675775412E6.roa
File: 0C1953F2B22E11EE87842675775412E6.roa (raw, json)
Hash identifier: tpHvjZVuFQ9EDE4loZ5jUdnp9ZEi03YTfZ5SJcwD8iU=
Subject key identifier: C8:5E:DC:C8:5C:EA:24:CE:0D:09:37:91:7F:9E:39:D4:2B:15:CA:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1953F2B22E11EE87842675775412E6.roa
Signing time: Sat 13 Jan 2024 16:08:54 +0000
ROA not before: Sat 13 Jan 2024 16:08:50 +0000
ROA not after: Fri 13 Dec 2024 16:08:50 +0000
asID: 140227
IP address blocks: 154.205.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29954 (0x7502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 16:08:50 2024 GMT
Not After : Dec 13 16:08:50 2024 GMT
Subject: CN=65a2b596-0f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:b3:26:b9:fc:75:4b:45:d5:06:f5:f2:78:
5f:fd:cb:65:b0:d4:43:83:2c:60:39:73:0d:20:5d:
0f:ab:2e:f2:cf:fe:0b:08:05:14:19:fc:fa:79:13:
28:e1:30:df:2e:f4:0f:47:76:b8:ec:cb:88:79:50:
38:0f:74:3a:c4:7b:6a:48:66:75:9e:67:e0:3f:56:
8c:e2:16:ff:1d:40:a7:68:12:0c:78:74:8f:97:47:
dc:70:39:3c:38:a8:db:ca:b3:b9:1e:e7:9e:e8:e7:
d4:01:a1:7a:52:06:f8:d2:83:7e:c6:26:dd:7e:26:
f2:94:2d:bb:1c:40:14:ef:87:fe:55:26:b5:d2:c6:
20:81:10:01:0f:7b:d9:f5:62:68:82:81:7f:fb:3a:
02:12:ca:20:f3:4d:ec:53:b4:52:ad:e2:26:85:56:
01:2e:61:06:3c:92:6f:8e:29:2b:71:de:35:57:d8:
21:81:e8:b6:23:00:5b:9a:d9:ae:46:e4:df:36:aa:
81:f4:30:ab:f7:6c:80:b5:0b:a7:c6:6f:a6:4e:f4:
e4:75:ff:e1:ee:61:29:64:24:fb:7d:82:23:86:d0:
93:10:8f:24:ee:ed:15:1b:b3:83:35:b7:a1:19:ae:
d3:68:ab:7f:63:27:63:6e:b7:72:00:05:bd:bb:ca:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:DC:C8:5C:EA:24:CE:0D:09:37:91:7F:9E:39:D4:2B:15:CA:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C1953F2B22E11EE87842675775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.217.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:c3:77:86:1f:1a:99:7f:60:74:76:3a:e5:92:32:f1:dd:
fb:1f:8f:7d:9c:8d:8d:13:57:40:1b:54:be:38:7d:0a:db:31:
db:33:5a:15:ea:c5:12:a2:a1:6f:9f:f2:f5:30:f2:23:cb:ec:
4e:a3:f9:1f:e1:20:17:75:19:ed:d9:fb:e1:14:fd:85:11:2a:
b5:4f:d6:fa:56:7e:1e:d2:b5:54:68:4f:98:e9:7e:9b:fb:3a:
f3:e7:38:37:d9:6f:56:4a:41:20:da:2a:35:00:c6:83:fd:96:
21:d4:eb:11:48:fa:ae:af:b5:36:20:db:21:96:f8:d3:47:b1:
f9:4f:c8:6a:9b:67:13:ed:de:74:7f:0c:b1:d2:77:cf:3d:77:
03:6f:97:70:85:d1:14:7c:7c:64:6e:59:93:22:ce:60:6a:72:
03:d6:7a:ad:10:8a:e4:ec:6f:c6:7c:3c:1b:c1:cc:41:7b:60:
67:57:f1:85:10:2a:75:9b:78:63:63:d4:f3:b2:c6:69:59:e2:
62:6c:d0:f1:5d:b7:1e:9a:a6:66:eb:a5:57:31:39:fb:eb:25:
11:ac:d8:fc:18:c7:f7:e1:4d:f1:a4:7b:6c:a6:a6:cc:9d:24:
60:08:08:4f:63:5c:d0:24:32:1e:78:66:53:eb:1c:fc:18:07:
3f:a4:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org