Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC9F7EB10011EE8D063E5F775412E6.roa
File: 13DC9F7EB10011EE8D063E5F775412E6.roa (raw, json)
Hash identifier: 203qv8bwWYsNHW1H39nR4yyTq5tAdHL+DXu6sFzUR98=
Subject key identifier: 20:41:9C:D0:A7:B6:94:9A:FC:DE:12:5A:5F:32:F6:E1:D2:18:92:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 748B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC9F7EB10011EE8D063E5F775412E6.roa
Signing time: Fri 12 Jan 2024 04:07:19 +0000
ROA not before: Fri 12 Jan 2024 04:07:15 +0000
ROA not after: Fri 13 Dec 2024 04:07:15 +0000
asID: 140224
IP address blocks: 154.205.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29835 (0x748b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:07:15 2024 GMT
Not After : Dec 13 04:07:15 2024 GMT
Subject: CN=65a0baf7-a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:63:f1:4a:89:b8:9d:16:02:c6:fc:77:12:
3c:e4:c5:1a:ff:63:84:4d:26:9a:6b:17:48:f1:46:
67:e1:47:b7:f5:e4:3f:61:01:63:ac:23:cd:17:8a:
a0:fa:a7:c1:65:ec:18:fd:ec:46:80:21:01:87:05:
85:42:b3:e1:44:26:38:a8:27:db:48:6d:d2:17:91:
ce:01:2b:c2:f1:a4:f6:09:bc:67:8b:94:3d:31:68:
c3:2b:5d:8b:32:3d:3d:bd:10:38:7a:0e:ea:ce:9f:
5e:b9:6e:d8:e1:ee:33:09:ab:ae:d8:d8:30:d6:e1:
8a:75:03:1a:c1:4e:ac:cc:05:29:14:b8:85:43:89:
72:8c:8d:7c:ca:29:21:b7:36:7b:f0:2f:fe:7b:59:
ca:73:8f:56:4d:10:89:24:f1:8b:a7:a2:f4:63:e6:
9e:80:5d:dd:32:2e:c8:d3:ba:9f:af:68:b3:19:87:
d2:88:bd:64:4f:18:21:41:df:b9:32:94:02:39:90:
36:5e:44:b3:63:0a:d0:68:37:aa:91:6e:c3:64:38:
39:57:ec:80:7a:63:28:b4:f4:73:49:34:09:3a:c0:
50:a4:9a:47:70:2c:5a:e5:b2:ab:ea:d6:9b:ef:fa:
33:7b:86:e1:94:d9:a3:30:f3:2b:9d:4a:99:96:60:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:9C:D0:A7:B6:94:9A:FC:DE:12:5A:5F:32:F6:E1:D2:18:92:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC9F7EB10011EE8D063E5F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.208.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a3:e2:1b:d1:9c:2d:58:af:1e:dc:3f:9f:6b:90:b2:d8:61:
3f:89:f6:77:53:19:49:80:ba:bb:c2:29:b7:ee:1c:80:32:5f:
8d:c4:51:88:73:e0:c6:0c:3b:ab:44:07:16:0c:83:33:0e:e0:
96:83:3a:3c:94:98:26:35:ea:7c:1b:df:52:17:dd:02:b8:ac:
3c:bc:69:4a:c0:e4:f0:22:53:66:21:39:2b:e1:94:ed:4f:65:
a3:f3:61:8a:8c:f7:8d:04:36:8e:5d:c0:db:c5:98:ee:d2:fe:
39:35:d3:85:1c:d6:9a:9f:3e:66:50:8e:7d:63:b5:59:f0:3c:
4a:ba:9b:b3:92:0f:6a:24:66:d2:cd:8b:bd:a1:e0:ba:32:58:
37:20:17:e0:36:36:75:da:ce:0b:32:7f:82:a3:0a:99:a4:66:
29:44:85:19:d4:1c:41:1a:45:6f:99:d2:17:a8:dd:f6:e6:90:
54:70:90:1d:54:48:dc:b9:cb:80:d7:f9:06:55:bc:44:94:63:
28:1a:29:5e:c9:bd:12:0d:5b:e0:4d:eb:28:58:7b:fc:7d:ee:
ff:4a:ab:cd:d4:5d:89:5d:e4:a9:91:ad:c4:18:ee:2f:96:0e:
be:1e:a8:f5:03:df:91:dc:29:03:39:5f:32:5d:62:23:ca:d3:
42:c0:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org