Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC1FD62E76711EE8A5CDCC1775412E6.roa
File: 1CC1FD62E76711EE8A5CDCC1775412E6.roa (raw, json)
Hash identifier: z5aiVyyB3obljGXNOQ5KfmXZ+OlxD2/aeT2G4i73cho=
Subject key identifier: 02:B2:2D:52:28:5D:04:AA:66:93:F5:A6:47:41:18:11:90:89:5D:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A51F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC1FD62E76711EE8A5CDCC1775412E6.roa
Signing time: Thu 21 Mar 2024 09:40:55 +0000
ROA not before: Thu 21 Mar 2024 09:40:51 +0000
ROA not after: Tue 23 Apr 2024 09:40:51 +0000
asID: 44559
IP address blocks: 154.208.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42271 (0xa51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:40:51 2024 GMT
Not After : Apr 23 09:40:51 2024 GMT
Subject: CN=65fc00a6-29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:c2:89:82:9a:72:59:9f:23:18:e8:b1:ce:
e5:91:9a:50:ad:03:9e:56:4c:18:5a:f1:a2:a8:5e:
11:2e:e1:92:9d:36:44:f2:0b:90:3a:f4:60:61:7d:
ac:b6:41:c5:f9:ac:ee:40:f9:25:6d:e6:da:3a:7b:
59:7f:e3:e6:4e:e2:33:d0:02:a3:d5:c4:cc:a4:a8:
d5:3f:e8:08:5e:40:c7:7f:e2:35:b0:56:9d:92:bd:
03:6a:1f:69:42:05:4e:f4:dc:99:75:c6:50:00:d3:
61:b1:3b:a2:38:5d:88:2d:c8:0e:22:d5:27:3d:8d:
55:17:1e:2f:f1:d4:16:6d:74:3f:9f:03:23:2c:1e:
32:e0:21:85:b7:fd:7d:1e:10:b5:30:25:ad:af:23:
c3:a4:e3:31:7f:04:10:a5:99:dd:ac:40:76:3f:4a:
60:64:7e:d8:a8:44:73:fa:d7:4f:0f:76:d8:97:2e:
9b:a6:dd:85:01:23:16:33:68:a4:f6:65:4e:c8:e8:
f9:9f:88:1f:2d:c8:72:50:f2:e6:db:29:f9:fb:45:
58:86:e4:69:37:51:e6:a9:db:cf:55:58:43:ff:77:
00:be:d5:4f:ad:e5:ce:40:76:f7:3e:c7:f6:12:ea:
e7:a8:98:93:9e:c9:d3:e0:f9:72:b2:47:b4:5c:22:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B2:2D:52:28:5D:04:AA:66:93:F5:A6:47:41:18:11:90:89:5D:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CC1FD62E76711EE8A5CDCC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c1:3d:91:a7:1c:5c:16:23:96:d3:80:91:d9:49:7f:b4:04:
00:5d:3c:cf:81:bd:ce:91:15:b5:ed:77:0f:74:10:09:80:89:
7e:e5:9d:5e:cb:e2:62:6f:75:b6:5c:76:67:cf:83:36:8e:a9:
5a:ac:18:8e:0e:65:6c:8c:5e:1e:7e:ec:ea:d1:e7:84:ca:a8:
95:fe:9c:9b:d7:83:95:01:ee:df:c8:5d:77:e5:5d:51:c2:62:
b8:01:3e:78:2c:6c:7b:81:c6:a1:44:68:dc:fa:fa:5c:70:ec:
d9:55:77:ee:e7:15:8d:1b:a5:f6:3d:82:7a:66:ce:2f:5b:d6:
5d:32:fb:cb:b8:0f:b8:77:b6:fa:bb:a9:cd:92:6e:4a:72:19:
94:ed:76:7f:c6:08:37:5b:af:91:20:d3:33:12:b1:ca:c0:5b:
df:f8:f4:3b:14:ab:bb:3e:ac:b6:de:35:7f:c1:6d:9f:21:4b:
4f:0e:60:11:2f:0b:ed:a8:59:3e:87:49:c8:cf:f0:ac:ef:15:
b2:d3:27:4c:82:5b:02:05:7d:41:6f:42:6e:a9:c8:0c:fe:b9:
2f:06:ca:bc:b7:54:e0:06:2d:74:37:db:30:b4:ce:b2:5d:f1:
f3:fd:22:18:18:0a:b0:1e:0a:56:ce:93:08:36:ea:ed:4e:20:
77:f6:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:14 2024 by rpki-client on console-ams.rpki-client.org