Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20636034E50811EE97FCA4BB775412E6.roa
File: 20636034E50811EE97FCA4BB775412E6.roa (raw, json)
Hash identifier: tJuF3fnSzmmkfw4FeeLSGsOXovH3FK2IRvmu3MLGJNM=
Subject key identifier: 9A:99:29:6A:C9:DF:85:02:42:69:FD:01:64:E8:92:7C:26:D2:7B:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A2DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20636034E50811EE97FCA4BB775412E6.roa
Signing time: Mon 18 Mar 2024 09:15:56 +0000
ROA not before: Mon 18 Mar 2024 09:15:53 +0000
ROA not after: Sat 20 Apr 2024 09:15:53 +0000
asID: 39600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 09:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41691 (0xa2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 09:15:53 2024 GMT
Not After : Apr 20 09:15:53 2024 GMT
Subject: CN=65f8064c-fd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:aa:0e:ad:af:34:8d:df:00:9f:10:a3:e8:
5e:ae:1d:20:94:8b:65:ef:f7:6e:f8:40:10:bd:20:
d6:f4:17:a0:af:c8:a9:c5:34:91:28:bc:59:92:a4:
0d:06:ff:e8:c8:7c:1d:ea:fd:b5:0e:b6:22:5d:41:
2a:8d:85:7b:2b:29:de:41:d2:0f:79:61:d6:e0:fd:
b4:55:53:a1:c2:e2:0f:95:1a:63:0e:92:64:7f:4a:
10:2d:c5:b6:f7:5d:4f:ed:cb:b2:45:b0:fb:ee:8e:
bb:67:f0:93:e0:fa:13:4c:ba:88:6b:7a:fe:dd:7a:
bc:07:63:11:bf:f5:51:11:c8:16:a5:55:6b:ad:d4:
60:69:47:4b:51:6d:34:15:cb:11:5d:ba:43:21:75:
7e:ed:6c:50:58:62:9a:be:69:99:5f:6e:2f:87:b7:
56:4f:80:16:99:b0:9c:38:3e:12:37:40:0f:2a:d8:
62:72:33:1c:83:3b:3b:5f:a5:18:f6:7c:14:62:be:
76:48:5d:29:d4:08:e3:c1:5b:3f:0e:0f:ea:1e:19:
56:66:30:7f:1b:3b:15:8f:e3:d9:39:56:36:50:fe:
54:92:40:b9:39:15:da:b4:89:ad:27:97:d1:1a:79:
1a:79:58:71:c6:bf:aa:8d:45:0d:86:1e:c3:83:22:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:29:6A:C9:DF:85:02:42:69:FD:01:64:E8:92:7C:26:D2:7B:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20636034E50811EE97FCA4BB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:8b:fa:15:2d:65:3c:33:61:9d:d9:02:01:a6:da:cd:26:72:
cf:f5:4d:0f:7c:4a:b4:12:a3:ee:8f:58:fc:8f:2b:01:b2:9b:
cd:ac:b5:d1:97:21:46:dc:10:a0:94:a3:24:93:5d:25:d9:5f:
64:26:dd:62:14:a6:ad:11:71:4f:4f:de:d3:fd:f4:f0:a7:da:
0f:73:7c:2b:1b:d0:13:c8:fb:ff:5e:5f:c8:e8:eb:24:ec:e6:
d1:1f:32:6b:54:b9:ea:27:75:62:24:ba:a8:21:32:ed:7d:d3:
d4:e3:1a:d1:38:a5:9c:f6:c6:aa:7a:f6:8d:d1:8b:5d:b8:27:
11:d1:ac:90:69:df:af:97:c3:35:0f:70:df:72:ac:29:a5:58:
e0:f4:8b:3c:f4:d1:2c:81:4f:36:72:66:08:98:9e:14:ee:da:
f8:f6:42:26:b6:90:62:d8:2c:f6:32:93:8b:86:5a:49:fb:02:
97:eb:73:b6:a2:72:e1:73:24:6c:0f:a1:97:c9:da:b4:e7:4b:
95:e3:94:a3:f0:7f:8e:f5:07:5f:e8:28:e9:09:09:1e:02:d0:
eb:d5:58:33:44:0a:88:a4:31:e4:8b:b5:67:7d:1d:6b:f1:66:
50:47:24:96:22:52:fc:f6:3d:4c:e9:6c:44:e8:30:d6:ca:9a:
13:f9:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:38:57 2024 by rpki-client on console-ams.rpki-client.org