Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AB38B2E28C11EEB859A7B5775412E6.roa
File: 14AB38B2E28C11EEB859A7B5775412E6.roa (raw, json)
Hash identifier: alQ6qp5wjDsVO08z7B+0qER2fiinI3cZS/Wb6Tee2GM=
Subject key identifier: 49:D4:05:59:E9:3A:16:24:C9:57:4F:58:36:6B:FD:2E:2D:96:E4:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A189
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AB38B2E28C11EEB859A7B5775412E6.roa
Signing time: Fri 15 Mar 2024 05:22:57 +0000
ROA not before: Fri 15 Mar 2024 05:22:53 +0000
ROA not after: Fri 20 Sep 2024 05:22:53 +0000
asID: 47890
IP address blocks: 154.214.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41353 (0xa189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:22:53 2024 GMT
Not After : Sep 20 05:22:53 2024 GMT
Subject: CN=65f3db30-45f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:6c:2f:e9:06:bd:3a:99:11:2e:19:13:1d:
75:a0:7b:ba:4b:25:bc:16:b1:92:67:2a:69:93:26:
a6:c6:3e:d0:cb:df:6f:13:e8:fc:50:54:cf:22:9c:
2f:ff:26:1a:d7:65:56:97:81:44:13:1d:67:4a:73:
d3:23:72:83:66:78:81:af:dd:49:08:b9:31:94:74:
08:be:33:36:4a:f4:7c:ea:bd:7b:fb:a7:6e:24:99:
69:e3:f5:24:bc:4b:16:9b:7d:39:96:d7:b4:91:af:
c2:c1:fd:80:a6:1e:cb:97:c7:19:3b:a5:5b:50:92:
67:87:57:ea:7a:5a:f9:2e:7e:ba:e2:d9:b4:ca:ae:
cf:3b:2e:c3:af:b5:75:39:b0:d1:d6:82:89:52:0d:
a9:f8:1d:cd:09:63:0e:e1:7b:41:ce:06:55:e0:6a:
3b:5d:61:21:95:8a:19:41:db:0b:22:76:51:8b:91:
da:8c:dd:86:30:18:5f:4a:9b:ad:35:76:be:7e:8d:
98:84:74:7d:62:af:9b:7f:ec:eb:6b:f0:43:04:3d:
3e:85:e0:d1:75:6b:cd:a7:9a:e9:d8:2f:24:fc:73:
ab:a2:a8:d8:99:59:5b:95:ef:52:0c:84:af:cc:96:
75:67:15:3d:8b:f3:00:79:12:5a:27:39:20:4a:17:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:05:59:E9:3A:16:24:C9:57:4F:58:36:6B:FD:2E:2D:96:E4:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14AB38B2E28C11EEB859A7B5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.199.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7f:07:c8:36:e7:6f:0b:d8:cd:18:6d:a7:0a:fb:0b:06:87:
05:36:4a:d7:b8:c0:68:ca:be:f1:f0:75:ff:7b:d3:b1:6b:c1:
e5:f1:73:5d:2a:3d:af:a1:04:66:7c:fc:c6:5a:8b:d9:91:6b:
20:05:cd:d9:ae:0d:e9:10:28:89:fb:2a:3f:ba:61:3f:79:33:
66:a3:02:12:af:69:2a:ce:d7:65:83:87:0d:19:e4:44:2b:ac:
12:72:da:45:c6:c9:c4:2f:79:4c:73:6c:22:52:02:26:9d:75:
34:2e:e0:77:94:08:5a:35:9f:43:b7:f5:21:f8:79:9c:21:fd:
af:b9:03:c5:10:f0:bc:a0:df:7e:a9:14:f5:16:29:91:fa:53:
93:66:be:84:3b:95:fd:3f:01:d3:c0:4d:53:67:f8:7f:0c:c3:
b3:c6:9f:fa:d3:4d:c0:4a:e8:8b:84:fd:c3:65:e5:2c:03:fe:
7a:46:69:63:08:8c:fe:da:2a:05:4a:0a:be:d1:d6:cb:69:88:
1c:7a:41:f2:c0:a7:ac:83:12:67:97:e3:3b:7d:dc:e0:39:7c:
b9:34:3a:1c:60:2a:d0:fc:a2:7a:7c:4c:40:f1:d6:e3:da:bf:
7a:47:f6:a5:09:f5:bb:9c:2f:d3:95:21:da:a6:97:75:50:23:
90:c3:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org