Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170B2704E05011EEAF6F20BC775412E6.roa
File: 170B2704E05011EEAF6F20BC775412E6.roa (raw, json)
Hash identifier: otYdo3Tku+diAgvhPf2Mk5BENchuyHE74YHl+Sl2bCI=
Subject key identifier: 15:B9:C1:9D:8F:E7:AF:FB:B2:E1:B0:14:D9:91:66:4F:7C:2E:38:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A0E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170B2704E05011EEAF6F20BC775412E6.roa
Signing time: Tue 12 Mar 2024 09:08:28 +0000
ROA not before: Tue 12 Mar 2024 09:08:25 +0000
ROA not after: Thu 30 May 2024 09:08:25 +0000
asID: 328608
IP address blocks: 154.195.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41190 (0xa0e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 09:08:25 2024 GMT
Not After : May 30 09:08:25 2024 GMT
Subject: CN=65f01b8c-848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:01:67:c2:fd:4c:f4:cc:5d:12:b6:fc:85:
2d:6c:9d:f5:4e:94:a6:ef:8a:b1:56:b1:6e:5f:f8:
29:ba:a7:f5:ae:d6:c6:33:ff:d7:8e:68:9d:47:dc:
bd:e9:8b:83:6a:69:73:e9:80:07:29:e6:d1:60:8c:
f4:07:4d:44:9e:c9:51:57:22:97:ed:3e:62:3a:5a:
05:09:d2:22:c6:c4:c5:47:de:b6:31:aa:d9:4d:10:
e0:50:ca:87:c0:02:20:9f:05:6c:aa:db:f0:eb:b2:
62:ef:54:6b:21:4e:8d:bf:6a:ca:b5:d5:7c:e3:ad:
33:5b:43:4f:eb:d3:de:cb:a9:38:07:c5:fd:b0:13:
68:54:33:ac:44:df:19:f4:f6:e6:40:08:9a:76:e4:
5c:1f:bc:91:37:76:e0:17:e7:8c:2f:00:64:e3:25:
a7:47:e4:b8:07:c7:a9:81:13:b3:92:26:7d:94:0f:
0e:77:0b:f4:16:0d:59:74:66:b6:8a:8f:d8:a7:77:
0c:9f:fe:0d:97:b6:cd:c7:96:88:12:23:05:4a:f1:
ac:ba:87:71:f7:56:39:a1:da:68:a4:5e:2c:3c:8c:
47:b8:a6:95:53:cc:cb:b5:8f:4f:12:c3:f7:89:f0:
b9:97:2f:69:d0:7c:96:0f:fb:1f:d6:56:6b:b9:0b:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:C1:9D:8F:E7:AF:FB:B2:E1:B0:14:D9:91:66:4F:7C:2E:38:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170B2704E05011EEAF6F20BC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b0:5f:c6:83:4c:43:4a:6a:65:da:44:bb:48:15:75:bc:1b:
51:a5:da:b8:75:98:02:c1:d2:f2:a2:72:ce:34:4b:11:23:aa:
5e:c3:4c:4e:32:b8:c3:5a:28:b9:5d:08:03:ef:d3:01:0d:36:
2d:50:a7:ae:cc:ec:89:22:c0:a3:be:c5:95:44:be:b5:2e:ee:
1b:cf:bd:1d:57:b7:9c:18:67:62:40:43:01:fd:46:57:90:ad:
72:60:1c:fa:c4:ec:33:34:be:77:99:50:b1:98:8c:7b:1e:b4:
0c:ab:a4:7d:a4:c7:e3:1a:d9:72:25:dd:ac:03:b4:96:a3:81:
b4:31:9a:56:8e:8a:2a:9c:d7:6d:d8:65:54:bb:e6:13:54:ee:
99:d2:0f:9f:14:20:3e:9a:cc:bd:a9:d4:d4:e1:ee:a8:6b:01:
9c:fc:16:24:8d:46:c3:93:23:90:40:e5:bb:e4:cb:4c:f4:1b:
3b:79:c6:18:3b:77:47:cc:54:df:6d:65:30:a9:20:f5:d8:db:
bf:9a:e5:4d:7f:bf:4c:06:02:9c:3b:6f:bf:25:24:63:bf:6d:
29:dc:3d:18:ed:18:57:82:4f:94:b2:79:a1:d7:cc:78:28:2b:
dc:19:22:0c:f3:63:87:2a:7a:0f:6f:74:e3:93:1e:99:e9:0c:
c4:7c:c5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:29:30 2024 by rpki-client on console-fra.rpki-client.org