Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF946B2B34811EE9D559F74775412E6.roa
File: 1CF946B2B34811EE9D559F74775412E6.roa (raw, json)
Hash identifier: aekLLwrOzl5W/SRrSg/PLzzrW6m0eej1Jq9Kh3hO4xQ=
Subject key identifier: E5:C7:3E:20:7D:03:93:3D:4E:A2:E5:8B:05:37:6D:D2:37:3D:C7:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7536
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF946B2B34811EE9D559F74775412E6.roa
Signing time: Mon 15 Jan 2024 01:48:00 +0000
ROA not before: Mon 15 Jan 2024 01:47:57 +0000
ROA not after: Fri 13 Dec 2024 01:47:57 +0000
asID: 8796
IP address blocks: 154.205.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30006 (0x7536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:47:57 2024 GMT
Not After : Dec 13 01:47:57 2024 GMT
Subject: CN=65a48ed0-03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:ce:db:75:ac:2a:b0:59:ba:e9:23:37:72:
c3:26:f6:51:8e:96:0a:e1:bf:17:fb:2c:48:bb:c9:
8d:6d:d0:e2:40:2e:9a:c2:fd:c8:f1:fa:d3:eb:75:
6c:ef:85:57:62:9d:25:c2:c9:05:c5:24:83:fa:9f:
f3:de:fb:c9:d7:6f:8a:e7:2e:e6:81:dc:f8:dc:02:
26:df:c7:55:19:a3:5e:c6:b1:ec:b4:d5:12:1f:33:
a0:72:c8:b2:87:b9:38:b6:1d:5a:93:6a:e1:d4:28:
69:bb:f6:74:e5:70:96:fb:01:47:4e:6a:b6:84:e5:
25:65:86:0e:de:08:b6:35:10:0f:ed:ef:a4:b7:9d:
07:25:82:b9:56:eb:4c:f3:37:56:18:60:76:35:53:
c9:c1:53:c9:d0:d0:38:dd:ec:8b:a5:40:df:bf:a4:
7f:bc:f1:3f:8c:bc:b4:2f:f0:2d:e6:20:26:f2:9c:
4d:20:d3:2f:3d:13:e6:23:5d:95:c0:8b:0e:a1:38:
aa:91:70:d2:98:a3:69:98:37:e2:4d:e7:4d:91:5b:
88:e2:2d:c1:f5:bc:fd:4f:34:50:00:b4:89:d7:2b:
d8:f4:d9:d2:1e:85:d1:bc:9c:98:b9:19:33:d9:47:
97:d7:91:a6:ff:50:98:de:ab:74:c5:c4:82:8c:91:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C7:3E:20:7D:03:93:3D:4E:A2:E5:8B:05:37:6D:D2:37:3D:C7:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF946B2B34811EE9D559F74775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.209.0/24
Signature Algorithm: sha256WithRSAEncryption
18:32:d6:89:ff:05:c9:3e:af:71:8e:fb:2b:fb:94:8a:dc:5c:
1a:e3:28:a0:a3:f4:f8:04:e8:76:11:c2:4f:5b:ec:88:ff:ce:
c5:20:18:2e:aa:55:29:81:40:6c:b4:7b:e8:13:f4:11:27:20:
85:73:c7:c8:be:3b:9b:17:66:2d:09:00:8d:eb:04:9c:ce:6c:
fa:3b:a2:2a:6f:06:d8:00:bf:51:fc:f0:e1:e4:fc:a5:d1:fb:
f1:ba:dc:eb:ca:a1:f9:4c:03:16:3c:d3:58:43:71:2b:a3:41:
dc:29:26:da:1a:65:0b:de:08:b4:c0:7d:f0:40:ae:ad:c6:34:
d7:40:4b:c9:58:e7:41:95:aa:25:79:68:48:4e:4e:f6:5d:89:
22:9b:7c:2c:41:70:94:07:94:0c:c4:e0:3e:e7:e4:1e:55:80:
63:b5:20:9d:ad:fe:60:4c:ee:ea:5e:52:2d:a9:2f:c5:0f:a9:
86:49:69:db:8b:59:70:59:fe:a5:58:08:ac:11:f1:eb:b9:da:
10:dc:3e:6a:6f:4e:7b:cf:a9:d7:bf:bb:37:24:84:fa:63:25:
dc:dd:1d:e7:ff:1d:b9:ca:12:3a:21:56:7d:06:40:64:51:4b:
1c:e0:da:ad:79:bc:77:14:fd:5b:c1:01:49:b5:e4:98:dd:32:
ff:f3:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org